No Ticket Needed

Appearance

2 min fix 3 min read Recently reviewedBeginner

By , IT support technician

Quick Answer

If you receive unexpected MFA prompts you did not initiate — do not approve them. Someone may have your password and is trying to get you to approve their sign-in. Change your password immediately and report it to IT.

How to Stop Unwanted MFA Prompts (Push Bombing and MFA Fatigue) ​

Estimated Time to Fix: 2 minutes

Applies to: Microsoft Authenticator, Duo, Okta, General Security
Article Type: Informational
Last Updated: 2026-07-20

Summary ​

This article explains what to do if your phone starts receiving dozens of multi-factor authentication (MFA) approval requests that you didn't initiate.

Prerequisites ​

  • None required.

Instructions ​

1. Identify an MFA Fatigue Attack (Push Bombing) ​

  1. You may receive multiple consecutive notifications on your phone asking you to approve a sign-in.
  2. These will occur when you are not actively trying to sign into your work accounts.
  3. The attacker is hoping you will get annoyed or confused and tap Approve to make the notifications stop.

2. Deny and Report the Request ​

  1. Under no circumstances should you approve an MFA prompt you didn't trigger yourself.
  2. Tap Deny or It's not me on the prompt.
  3. If the app asks to Report fraud or Report suspicious activity, select Yes. This instantly alerts your IT department that your account is under attack.
  4. If someone phones or messages you asking you to approve the prompt — even claiming to be your own help desk — deny it and verify them separately. See How to Verify a Suspicious Call or Message from IT.

3. Change Your Password Immediately ​

  1. If an attacker is able to trigger an MFA prompt, it means they already know your current password.
  2. Navigate to your organization's password reset page immediately.
  3. Change your password to a strong, new passphrase that you have never used before.
  4. Once your password is changed, the attacker will no longer be able to trigger the MFA prompts.

Troubleshooting ​

DANGER

If you accidentally tap Approve on a prompt you didn't initiate, the attacker will gain full access to your account. Contact your IT Help Desk immediately. They can forcefully sign out all sessions and block the attacker.

Symptom / ErrorPotential CauseSolution
Notifications keep coming after denyingCompromised passwordYou must change your password immediately. Denying the prompt does not change your password.
Can't access password reset pageAccount lockedYour account may have been locked by automated security policies. How to Submit an Effective IT Support Ticket