Why do I keep getting Microsoft OTP on WhatsApp?

Microsoft sends verification codes when there is a sign-in or security-related action that needs identity confirmation. These codes can be delivered by SMS, voice call, or, for users who have WhatsApp, via WhatsApp using the phone number registered for text message verification.

Mobile phone verification works as follows:

• If WhatsApp is available on the phone number configured for text verification, Microsoft silently tries to deliver the verification message through WhatsApp.
• If WhatsApp is not available or there is no internet connectivity, the verification falls back to SMS.

Repeated or unexpected codes usually mean:

• Someone is trying to sign in to the account using that phone number, or
• Someone entered the phone number by mistake when trying to sign in or create an account.

If verification codes are not requested but keep arriving, this can indicate that another person or system is repeatedly attempting to use that phone number. In that case, review and secure the Microsoft account and security info, and avoid responding to or using codes that were not requested.

The WhatsApp Business number used by Microsoft for these verification messages is: +1 (217) 302 1989.

References:

• Authentication methods in Microsoft Entra ID - Voice call
• Why is Microsoft texting me?