FIRST QUESTION Did you just try to sign in? If not, treat the prompt as suspicious. DO NOT APPROVE Do not approve unexpected MFA prompts, enter codes, or click confirmation links. REPORT Report the prompt with the time, account involved, device shown if available, and location or app shown in the prompt. CHECK Review account activity if available and change your password if support recommends it. WHY IT MATTERS Unexpected login prompts may indicate password theft or an active attack.