Official MASTR logo MASTR Support the work
Contents
← Wiki home

Scam patterns

MFA fatigue attacks

Repeated authentication prompts are sent until one is accepted.

Reference note · Sources below

Research articles and reference entries are published in English. Navigation is available in seven languages.

People & projects

In this article
  1. Overview
  2. Why it matters
  3. What to check
  4. Sources

Overview

Repeated authentication prompts are sent until one is accepted.

Why it matters

Prompt flooding is often paired with a call pretending to be support.

What to check

Use number matching or hardware-backed authentication; retain prompt and login records.

Sources

Related reading

scams

SIM-swap attacks

A phone number is moved to an attacker-controlled SIM or eSIM.

MASTR

Support independent research

The investigations, original evidence and guides here are free to read. Voluntary donations help fund the research and keep MASTR’s tools available.

Open wallet