How to stop fake authentication requests very often?

@David Levy said

I am getting authentication requests very often , it’s not me

You create a new "secret" alias that only you know. You use it ONLY to logon to your account. Then you remove the Sign-In privilege from your existing email alias so it can not be used to logon to your account but can still be used to send and receive email. Now, if all the Bad Guys have is your old alias, they get "We couldn't find a Microsoft account ..." at the very first step of the logon process and can not continue.

For detailed instructions on how to setup a Login Only Alias and disable Sign-In for your current email address. See the Answer by "Hornblower409 on Feb 27, 2026" in
https://learn.microsoft.com/en-us/answers/questions/5789093/i-get-a-few-2fa-notifications-from-canada-daily-us

Hi. This answer was not helpful. Please provide information on how to stop getting verification requests 20 times per day. Someone is trying to hack into my account and I get a message on my phone saying are you trying to login. I'm supposed to click on the number that matches the number that the hacker has to approve the login. Obviously I click on deny. But after 10 attempts the system should be smart enough to realize that someone is trying to hack in and I have already denied the request. So it should reject the request for 10 days or something like that. The hacker should also be notified that there have been to many recovery attempts. Don't just let some bot go on spamming requests 10 times a day forever. Outlook is becoming unusable.

The below solution is provided based on the tag of your initial post as "For Business" users. If you're using a personal account (@hotmail, @gmail, @outlook.com...) please let me know so that I can provide guidance with more accuracy. 

Hi David, 

Based on your sharing, repeated Authenticator prompts usually mean someone/bot knows your sign-in email or a saved/old session/app is retrying to trigger MFA prompts. It's a good news that if you are not approving the requests, the attacker is likely not getting in so please ensure that you must never approve any request you didn’t start.  

To prevent this issue from happening again, please follow these steps: 

• Sign into My Account and go to My Account > Security Info 
• Select "Sign out everywhere" > this signs you out of browsers, apps, and most places your account is used within 24 hours which can help invalidate active sessions if someone already got in. 

If the issue still persists, since you're using a business account, I highly recommend that you can contact your IT department/administrators and they can help you strengthen the account security through passwords reset, MFA re-registration, revoke sessions, and also manage user authentication methods.  

In case you do not know who is your IT admin, kindly refer to this article: How do I find my Microsoft 365 admin? - Microsoft Support    

Hope this information would be helpful for your concern. If you have any questions or need further assistance, please feel free to reach out again on this post. I'm happy to continue support you. 

Thank you for your understanding and cooperation. I'm looking forward to your reply. 

If the answer is helpful, please click "Accept Answer" and kindly upvote it. 

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread