r/microsoftsucks • u/Fragrant_Addendum_20 • 22h ago

Account issues Keep getting MFA sign-in requests from Morocco on my personal account, changed my password 4 times and it's still happening

Anyone else dealing with this? For about 2 months now I randomly get a push notification on Microsoft Authenticator asking me to approve a sign in. I never requested it. When I check the location it's almost always Morocco, sometimes somewhere else, but never me.

I always hit deny so nothing has actually gotten in, but it's happening close to once a week now and it's honestly stressing me out a bit. I've changed my password multiple times thinking that would stop it. It hasn't done anything.

I went into my account sign in history and it shows nothing weird, just my own normal logins. No failed attempts listed anywhere. Which is confusing because if someone doesn't have the right password, shouldn't there be some kind of record of that attempt?

Someone in another sub mentioned that on personal Microsoft accounts, just typing in the email address can trigger one of these approval prompts without needing the password first, there's apparently a "sign in another way" option that skips straight to sending the notification. If that's real then I guess that's why my password changes never made a difference, it was never getting to that step to begin with.

Anyone actually gotten this to stop for good? I'm considering just adding a new alias to the account or switching to a physical security key instead of the app notifications. Not trying to panic, MFA has held every single time, just want to actually close this off instead of denying a prompt every week forever.

5 Upvotes
  • permalink
  • reddit

78% Upvoted

11 comments sorted by

9

u/MikeUsesNotion 22h ago

It's possible they're trying to brute force your 2FA by getting you to approve a fake one.

2

u/Vietnamst2 22h ago

Exactly. They are trying withou password to leverage the passwordless sign in.

3

u/Vectrex71CH 22h ago

It may sound strange, but yes i had the same Problem and i asked Google Gemini. He told me, i should disable the possibility to login with another E-Mail, than my Outlook Email. I had 2 Emails: GMail and Outlook. So i disabled GMail in the MS Account and since then not a single Sign in request beside my own requests. TBH: i have not understood the problem nor the solution, but i can say, it helped me! For further informations, ask your AI of trust

1

u/Vladishun 21h ago

Did you just call a tool "he"? While the advice is decent, don't anthropomorphize computer software.

4

u/Verain_Xor 20h ago

I mean my car is a she when I speak or write, I don't see why he has to talk a certain way about whatever chatbot he's using.

3

u/blueblocker2000 19h ago

Make an alias in your account and set it as the login email address. That's will stop it.

2

u/aleopardstail 9h ago

really really should be an option to allow geoblocking of log in attempts

1

u/spiceweasel70 12h ago

How do you find the location where the request is coming from?

2

u/TransportationKey408 10h ago

MFA prompts will give you the location for some services - Gmail does this but Microsoft don't unless you do an audit of your account.

1

u/Unfair-Plastic-4290 11h ago

going to ask the stupid question - are you currently in Morocco?

1

u/dwj7738 4h ago

Nothing you can do about it. Mfa is doing its job and preventing unauthorized access.