Deny it. An unexpected MFA prompt can mean someone is actively trying to sign in. Never approve a request simply to make repeated notifications stop.
What to do immediately
- Deny the request and report it as suspicious if that option appears.
- Contact your IT team.
- Change the password through the official site.
- Review recent sign-ins and registered MFA methods.
Repeated prompts are not a system glitch
Attackers sometimes send prompt after prompt hoping the user approves one from frustration. This is commonly called MFA fatigue.
This page provides general security guidance, not a guarantee that any individual message is safe. When money, passwords, remote access, or sensitive records are involved, verify through a separate trusted channel.