10/29/2026
You’re not logging in, but your phone keeps asking you to approve a sign-in. That prompt may mean someone already has your password and is hoping you’ll tap “Approve” just to make the notifications stop.
This is called MFA fatigue. An attacker sends request after request, sometimes in the middle of the night, and waits for one tired or distracted tap.
If you get a login prompt you didn’t trigger, deny it and tell your IT team right away.