Scam MFA fatigue: the prompts that won't stop
If you didn't just try to sign in, deny the prompt, every time.
Test yourself: how many would you spot?Authenticator · 2:14 AM
Approve sign-in request?
Location: unknown · New device
6th request tonight
SCAM
How it works
- The attacker already has your password from phishing or a leak.
- They trigger prompt after prompt, often at night.
- One tired tap on Approve gives them your account.
Red flags
- Prompts you didn't trigger
- Unknown locations or devices
- Calls from 'IT' telling you to approve
Stay safe
- Deny, then change your password
- Report it to IT or security at once
- Use number matching, and approve only prompts you started
Already happened? Act fast
- Call 1930National Cyber Crime Helpline. The sooner you call, the better the chance of stopping the money.
- cybercrime.gov.inFile an online complaint. Keep screenshots and transaction IDs.
- Call your bankUse the number on your card to block cards, UPI or the account.
- Report on ChakshuReport fraud calls, SMS and WhatsApp messages at sancharsaathi.gov.in.
Questions
I approved one by mistake. What now?
Tell IT immediately so they can end sessions, reset your password and check for access.