Sign in attempts from unknown parties

Denying unexpected prompts is correct and keeps the account safe, but additional steps are recommended:

1. Continue to deny any sign-in prompts not initiated personally.
2. Review recent sign-in activity for the account to confirm whether there are suspicious attempts:
   • For personal Microsoft accounts, go to the Security basics page and select Review activity to open the Recent activity page. Mark any activity that was not performed as This wasn't me or Secure your account as appropriate.
3. If there is any activity that is not recognized, change the account password immediately from the Security basics page and ensure it is strong and unique.
4. Verify and update security info (phone numbers, alternate email) so alerts and verification codes go only to trusted contact methods.
5. If this is a work or school account and repeated attempts continue, contact the organization’s IT administrator so they can review Microsoft Entra sign-in logs for possible malicious activity.

As long as unrequested prompts are always denied and the account security settings are reviewed and updated, the account remains protected even if someone keeps trying to sign in.

References:

• Using Outlook mobile to sign in
• Common problems with two-step verification for a work or school account
• What happens if there's an unusual sign-in to your account
• Check the recent sign-in activity for your Microsoft account