What is a fraudulent MFA Extra Verification request?
A fraudulent Extra Verification or MFA request is one you receive that was initiated by someone else trying to sign in as you. Only approve MFA Extra Verification requests you initiate yourself, knowingly and intentionally.
- You’re away from work and your smartphone suddenly displays an MFA Extra Verification notification. It comes as a surprise and may be fraudulent because you're not signing in to any systems.
- You’re in your office when you receive an unexpected MFA Extra Verification call to approve a request to sign in. The call is a surprise and may be fraudulent because you were not signing in to any systems.
What should I do if I receive an unexpected MFA Extra Verification request?
Do not approve an MFA Extra Verification request you did not initiate yourself. An unexpected MFA Extra Verification request may be a fraudulent, unauthorized attempt to sign in as you and should be reported to firstname.lastname@example.org immediately.