Attackers trigger repeated approval prompts or ask you to read out a code.
How to spot it
Prompts you did not start
Anyone asking for a one-time code
What to do
Deny prompts you did not start, change the password, tell IT. Never read a code to anyone.
What the real thing looks like
A prompt right after you tried to sign in yourself
Try an example
A practice example with fictional companies. Answer it, then see the tells.
What do you do?
Inbox
FromFrom: Lakeside IT Help DeskSender address: helpdesk@lakesideclinic-it.example
Tome
Ticket 4418: we will call you to verify your login
Hello,
Our help desk will call you in the next few minutes about a security problem on your account. They will ask you to read back the verification code you receive so we can confirm it is you.
Test yourself on eight more
The free quiz mixes scams with legitimate messages, like real life. No sign-up.