Managing personal Outlook.com account settings, security, and privacy
The symptoms described match a phone number or sign-in method that has been blocked by Microsoft’s risk and reputation systems, which results in errors like “Try another verification method” and prevents SMS codes from being sent.
From the available information, there is no self-service or community-forum action that can clear a bad-reputation flag or unblock MFA/SMS at the backend. In similar cases, resolution has required direct Microsoft support intervention and escalation to internal data or protection teams:
- For Azure/Microsoft Entra/MFA scenarios where a phone number was blocked with a “bad reputation” flag (for example, error 399287), the resolution was:
- The Microsoft Data team reset MFA and cleared the block on the backend.
- For tenant or admin lockout scenarios (no other admin able to reset MFA), the resolution was:
- Opening a support ticket and having the Data Protection team restore access and reset MFA from the backend.
- For blocked accounts or fraud-alert-related MFA blocks in Microsoft 365/Entra, the documented guidance is:
- Use the official “Report suspicious activity” and MFA support paths, and if MFA is enabled through Microsoft 365, submit a support request with Microsoft to unblock the account.
Given that:
- The account safety investigation is already complete and confirmed no compromise.
- SMS/MFA is blocked by reputation/anti-abuse systems.
- Frontline support (e.g., Xbox Support) has confirmed a cooldown but cannot override it.
The only supported path to clear the phone reputation flag and reset the MFA/SMS block is:
- Open or update a formal support ticket tied to the affected account/tenant.
- Provide the existing SIR/case numbers and clearly state that:
- Ownership and non-compromise have already been confirmed by the Account Safety Team.
- The issue is a technical MFA/SMS block (phone reputation / risk-based block), not an ownership dispute.
- Ask for escalation specifically to the internal Data/Data Protection team or the team that handles MFA and reputation-based blocks, referencing that similar cases were resolved by a backend MFA reset and unblock.
- If the scenario involves Microsoft 365/Entra MFA, follow the documented guidance to submit a support request to unblock MFA.
Community responders and forum moderators cannot access backend systems to clear reputation flags or reset MFA; only Microsoft’s internal support and data protection teams can perform that action once identity and account safety checks are satisfied.
References:
- Troubleshoot Microsoft verification code issues
- Common problems with two-step verification for a work or school account
- How to use Fiddler trace logs for MFA in Microsoft 365 and Microsoft Entra ID
- Azure has blocked myphone number for SMS verification due to a “bad reputation” flag - Microsoft Q&A
- Severity A Situation - Locked out of global admin account (MFA) - business down - Microsoft Q&A
- How do I send an email to Microsoft about my account being hacked and taken over by <removed> ? - Microsoft Q&A
- Need help with hacked microsoft account - Microsoft Q&A