How to identify multi-factor authentication scams
WHAT MFA SCAMS LOOK LIKE
Attackers may send repeated approval prompts, call pretending to be support, ask for codes, or claim they need verification to fix your account.
RED FLAGS
Unexpected prompts, urgent messages, requests for codes, prompts when you are not signing in, or instructions to approve a request you did not start.
WHAT TO DO
Deny unexpected prompts. Do not share codes. Report the incident immediately.
REMEMBER
Support should not ask for your password or MFA code.
BEST PRACTICE
Only approve MFA when you personally initiated the sign-in.