Free · Arcade
Approve or Deny
Your phone lights up with a Microsoft Authenticator push. Some are your own sign-ins. Some are an attacker who has your password, bombing you with prompts hoping you tap Approve to make it stop. Read your situation, read the prompt — then approve the real ones and deny the rest.
The tells
- ✗ A sign-in you did not start — the single biggest signal.
- ✗ Impossible travel, odd hours, an app you never use, a hosting-provider IP.
- ✗ Prompts stacking up (push bombing), or a number that does not match your screen.
- ✓ You clicked sign in seconds ago, from your own device — even if you are travelling.
Approving an attacker hands over your account — that mistake costs the most. A round is 12 prompts from a pool of 30.