What to do when you get flooded with approval prompts
A storm of unexpected approve-or-deny notifications is an MFA fatigue attack, also called push bombing. It means someone has your password and is hoping you tap Approve just to make it stop.
- Do not tap Approve — not even to clear the notifications. That is exactly what the attacker is waiting for.
- Tap Deny or No, it’s not me on the prompt if that option is offered.
- Treat it as proof your password is already compromised, and change it straight away from a device you trust.
- Sign out of all sessions in the account’s security settings to kick off any intruder.
- Tell your IT provider or whedo.it immediately — we can block the attacker and review what they touched.
- Where available, switch that account to number matching or a passkey, which neutralises this style of attack.
Still stuck after those?
You’ve done the right thing by trying. Send whedo.it a quick note — what you tried, what you saw — and a senior pair of eyes will be on it the same business day.