Microsoft keep on sending me authentication codes via text

Hello @Timmie,

I understand how concerning it can be to receive repeated Microsoft authentication codes that you did not request.

Receiving these codes does not necessarily mean that your account has been compromised. In many cases, it means that someone is attempting to sign in using your email address but cannot complete the process without the verification code. It can also happen if someone accidentally entered your phone number when trying to access a Microsoft account.

If you did not request these codes, do not share them with anyone and do not approve any sign-in prompts that you were not expecting. Without the verification code, another person generally cannot complete the sign-in process.

Since you are using a university account, I recommend the following:

• Review your recent sign-in activity for any unfamiliar access attempts: View your work or school account sign-in activity from My Sign-ins | Microsoft Support
• Change your password if you have any concerns that your account credentials may have been exposed: Reset your Microsoft work or school account password using security info | Microsoft Support
• Check your security information and verify that the phone number and other authentication methods associated with the account are correct: mysignins.microsoft.com/security-info
• Review the devices you use to access the account. Make sure your computer, phone, and web browsers are fully updated, protected by reputable security software, and free of any suspicious apps, browser extensions, or malware. If you see any device or session that you do not recognize, sign it out and change your password as a precaution.
• Consider using Microsoft Authenticator or another stronger authentication method instead of SMS verification if your university allows it. Microsoft has been moving toward more secure authentication methods because SMS can be targeted by phishing and other abuse attempts.

If the notifications continue, I recommend contacting your university's IT support team/Microsoft 365 admin for further assistance. They may be able to:

• Review the account's sign-in logs and determine whether there have been repeated or suspicious attempts to access your student account: Sign-in logs in Microsoft Entra ID - Microsoft Entra ID | Microsoft Learn
• Check the devices currently signed in to your account and help you sign out of any devices that are unfamiliar or no longer in use: Manage devices in Microsoft Entra ID using the Microsoft Entra admin center - Microsoft Entra ID
• Help you add a new authentication method, such as the Microsoft Authenticator app, reset MFA access, and review your account's security settings to ensure they are configured appropriately.

These checks can help identify whether the messages are related to legitimate sign-in activity or repeated authentication attempts against your account.

I hope this helps. If you need any further assistance or more detailed guidance, please feel free to leave a comment. I'll be happy to help further.

If the answer is helpful, please click "Yes". If you have extra questions about this answer, please click "Comment".   

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.