Angvlar Security Awareness
MFA fatigue and unexpected approval prompts
Respond safely when repeated authentication prompts try to pressure you into approving access.
Why this matters
MFA fatigue attacks rely on annoyance, confusion or a convincing phone call. An unexpected prompt is evidence that someone may already know your password.
By the end of this lesson
- Recognise the main warning signs
- Choose a safe verification method
- Know when and how to report the situation
What to notice
- Repeated prompts you did not initiate
- Phone call claiming to be IT during the prompts
- Prompt location or device is unfamiliar
- Request to read out a code
- Pressure to approve quickly
- Number-matching value supplied by another person
What to do
- Deny the prompt
- Change your password from a trusted device
- Review active sessions
- Report the incident immediately
- Do not share codes or number-matching values
- Use phishing-resistant authentication where available
Frequently asked questions
What does an unexpected MFA prompt mean?
Someone may be attempting to sign in with your password.
Should I approve once to stop the prompts?
No. Deny and report.
Can IT ask me for an MFA code?
Legitimate support should not ask you to disclose an authentication code.