OTBOYOTBOY
Back

Never approve a login you didn't start

Once a criminal already has your password, they may flood your phone with "Approve this sign-in?" notifications, hoping you tap one just to stop the buzzing. Sometimes they follow up with a call: *"Hi, it's IT support — please approve the prompt to clear the alerts."*

Every one of those prompts is the criminal trying to get in. Tapping "Approve" lets them straight into your account.

What to do: never approve a sign-in prompt you didn't start yourself, and never read a code out to someone who contacted you. If prompts keep arriving unexpectedly, your password is already known — change it.

Threat examples

The "just approve it" call
"IT Support"Incoming call
You keep getting sign-in approval alerts you never asked for.
It's perfectly safe, it happens all the time.

Tap the outlined parts of the message to see the red flags

You keep getting "Approve sign-in?" notifications you never asked for, then a call: "This is IT — there's a glitch, just tap approve to make the alerts stop."