No Ticket Needed

Appearance

How to Stop Unwanted MFA Prompts (Push Bombing and MFA Fatigue)

Applies toMicrosoft Authenticator, Duo, Okta, General Security
3 min read Updated 20 Jul 2026

By , 10+ years in IT support and helpdesk How these guides are checked

Quick Answer

If you receive unexpected MFA prompts you did not initiate — do not approve them. Someone may have your password and is trying to get you to approve their sign-in. Change your password immediately and report it to IT.

Checked against Microsoft Learn - end of support and retirement and Google Chrome Releases between 5 Aug 2026 and 12 Sep 2026. Nothing published in that period has been linked to this guide.

Estimated Time to Fix: 2 minutes

Summary ​

This article explains what to do if your phone starts receiving dozens of multi-factor authentication (MFA) approval requests that you didn't initiate.

Before You Start ​

  • None required.

Instructions ​

1. Identify an MFA Fatigue Attack (Push Bombing) ​

  1. You may receive multiple consecutive notifications on your phone asking you to approve a sign-in.
  2. These will occur when you are not actively trying to sign into your work accounts.
  3. The attacker is hoping you will get annoyed or confused and tap Approve to make the notifications stop.

2. Deny and Report the Request ​

  1. Under no circumstances should you approve an MFA prompt you didn't trigger yourself.
  2. Tap Deny or It's not me on the prompt.
  3. If the app asks to Report fraud or Report suspicious activity, select Yes. This instantly alerts your IT department that your account is under attack.
  4. If someone phones or messages you asking you to approve the prompt — even claiming to be your own help desk — deny it and verify them separately. See How to Verify a Suspicious Call or Message from IT.

3. Change Your Password Immediately ​

  1. If an attacker is able to trigger an MFA prompt, it means they already know your current password.
  2. Navigate to your organization's password reset page immediately.
  3. Change your password to a strong, new passphrase that you have never used before.
  4. Once your password is changed, the attacker will no longer be able to trigger the MFA prompts.

Troubleshooting ​

DANGER

If you accidentally tap Approve on a prompt you didn't initiate, the attacker will gain full access to your account. Contact your IT Help Desk immediately. They can forcefully sign out all sessions and block the attacker.

Symptom / ErrorPotential CauseSolution
Notifications keep coming after denyingCompromised passwordYou must change your password immediately. Denying the prompt does not change your password.
Can't access password reset pageAccount lockedYour account may have been locked by automated security policies. How to Submit an Effective IT Support Ticket

Last updated:

Frequently asked questions

If I am getting MFA prompts, does that mean they have my password?
Yes. If an attacker is triggering an MFA prompt, it means they have successfully guessed or stolen your password and are trying to pass the second layer of security.
Should I just approve the prompt to make my phone stop buzzing?
NEVER approve an MFA prompt you didn't initiate. Approving it grants the hacker full access to your email, files, and company network. Deny the request and immediately change your password.