Multi-factor prompts you did not request are a reason to stop
A sign-in approval prompt can become so familiar that tapping it feels automatic. When you did not initiate the login, the prompt deserves attention rather than a quick approval to make it disappear.
Deny the unexpected request
Do not approve a login you cannot connect to your own action. Open the account through its official app or website and review the available security information. Follow the provider’s instructions for securing the account.
Check the surrounding context
Repeated prompts, unexpected password-reset messages or unfamiliar devices may indicate that someone is trying to gain access. Do not send a one-time code to a caller claiming that it will cancel the problem.
Improve the routine
Use the strongest suitable authentication option the service supports and keep recovery methods current. Teach household members that a verification code is a secret, not a customer-service reference number. The purpose of the second factor is to add a check beyond the password; approving it without recognizing the request removes much of that benefit. A brief pause is part of using the feature correctly.
Sources & further reading
Source material and official guidance. Original practical suggestions are editorial content, not statements from the organisations below. Selected references checked September 24, 2026; publication dates and context are stated in each article.
Have a correction or a question about this article? Contact the editorial team. Read our editorial policy and disclaimer.
