u/RecreatorofPES

Test for Shadowbanned Account.

Yesterday I suddenly received a Microsoft Authenticator number-matching approval request that I never initiated. It asked me to choose the matching number and approve the sign-in. I immediately denied it and changed my Microsoft account password because I assumed someone had my credentials.

Today I received another unexpected Authenticator request again, and one of the attempts showed a login location from Japan. That confused me because I had already changed my password.

At first I panicked and thought:

• my email was fully hacked
• my devices were infected
• someone had access to my files/emails

But after researching and reading many Reddit threads, I’m now wondering if this is actually an MFA fatigue / MFA bombing situation rather than a confirmed account takeover.

What I’ve done so far:

• Denied/ignored all MFA prompts
• Changed my Microsoft password
• Reviewed recent account activity
• Checked recovery/security info
• Signed out of sessions
• Planning to run malware scans just to be safe

So far I have NOT found:

• successful suspicious sign-ins
• unknown devices connected
• forwarding rules
• recovery email changes
• evidence emails/files were accessed

From what I understand now, it seems possible that:

• my email address was exposed somewhere in a breach
• bots are abusing Microsoft Authenticator/password less flows
• they may not actually have full account access
• if I had approved the correct number, THEN they could potentially access the session

I also found many people recently reporting almost identical Microsoft Authenticator spam prompts even after password changes.

Does this sound like standard MFA fatigue bombing, or should I still assume one of my devices/accounts is compromised?

Also:

• Is creating a hidden Microsoft login alias worth doing?
• Should I worry about my Google/other accounts too?
• Would you recommend a full device reset or just malware scans + password/security cleanup?

Would appreciate advice from people who’ve dealt with this recently.

(Note: I used AI only to help fix grammar and organize the situation more clearly.)