MFA fatigue

MFA fatigue, also called push bombing or prompt bombing, is an attack where someone who already has your password repeatedly triggers login approval prompts on your phone, hoping you will tap Approve by mistake, out of annoyance or to make the alerts stop. Attackers may send prompts late at night or call pretending to be IT support and tell you to accept. Number matching, where you must type a code shown on the login screen, makes this much harder. If you get prompts you did not start, deny them, change the account's password immediately, and tell your IT team or the service. Unexpected prompts are a clear sign your password is known.