Authenticator push from foreign country i did not request

The unrequested Microsoft Authenticator prompts indicate repeated sign-in attempts to the account, often from someone entering the username and password from another location or from delayed prompts.

Do not approve any prompts that were not initiated. Denying or ignoring them keeps the account safe because the attacker cannot complete sign-in without the correct response.

To further secure the account:

1. Treat the activity as an attempted compromise
   • Unrequested prompts or verification codes typically mean:
     • Someone is trying to access the account, or
     • Someone accidentally entered the account name, or
     • A previously requested prompt is delayed.
   • Continue to deny any sign-in prompts that are not initiated.
2. Review and update security info
   • Sign in to the Microsoft account security page (for example via the paths described in the articles) and check:
     • Phone numbers
     • Alternate email addresses
     • Registered Authenticator apps and devices
   • Remove any phone, email, or device that is not recognized.
3. Strengthen sign-in methods
   • Turn on and use strong two-step verification methods such as:
     • Microsoft Authenticator app
     • Physical security keys
     • Windows Hello
   • Consider going passwordless so that sign-in relies on Authenticator, Windows Hello, SMS/email codes, or security keys instead of a reusable password. This reduces the impact of any password leak.
4. Keep devices and notification settings healthy
   • Ensure Authenticator notifications are working correctly so that any future prompts can be seen and denied quickly.
   • Verify the device clock is set automatically and correctly, and that notifications are allowed for Authenticator.
5. Monitor for unusual activity
   • Regularly check the account’s recent activity and security alerts. If sign-ins from unfamiliar locations or devices appear, follow the guidance in the security pages to secure the account.

If unrequested prompts continue after these steps, keep denying them and maintain strong, updated security info and sign-in methods. Without the correct verification response, the account remains protected.

References:

• Using Outlook mobile to sign in
• Common problems with two-step verification for a work or school account
• Why is Microsoft texting me?
• How to help keep your Microsoft account secure
• Troubleshoot problems with Microsoft Authenticator