Multiple sign in requests yet no activity showing

Those unrequested prompts typically mean someone or something is repeatedly trying to sign in as the account, but the attempts are being blocked at the second factor (the notification) before they complete. Because the sign-in isn’t successfully finished, it might not appear as normal activity on the Recent activity page.

Outlook mobile and Microsoft Authenticator can both be used as a second factor. If a prompt appears that wasn’t initiated, Microsoft recommends always selecting Deny and treating it as a potential attack or a mis-typed email/phone by someone else.

To protect the account:

1. Deny all prompts not initiated. If a prompt says “Are you trying to sign in?” and it wasn’t initiated, select Deny.
2. Check Recent activity anyway. Go to the Security basics page, select Review activity, and look for any unusual sign-ins. If anything suspicious appears:
   • If it’s in Unusual activity, expand it and select This wasn’t me.
   • If it’s in Recent activity, expand it and select Secure your account.
3. Secure the account. From Security basics, change the password and review/update security info (phone, email, and sign-in methods). Consider using Microsoft Authenticator as the primary sign-in method.
4. Ignore or disable Outlook sign-in requests if not needed. If Outlook mobile is being used as a sign-in method and it isn’t needed, turn off Allow sign-in requests in Outlook mobile (Settings → Accounts → account name → Account → Sign-in requests → toggle off).

The prompts can also be delayed deliveries of earlier requests, or caused by someone accidentally entering the email/phone when trying to sign in to their own account. As long as all unrequested prompts are denied and the password and security info are secured, the account remains protected.

References:

• Using Outlook mobile to sign in
• What is the Recent activity page?
• What happens if there's an unusual sign-in to your account