How to Stop Microsoft Authentication Codes After Removing a Phone Number
Question details
The user is continuously receiving Microsoft verification codes via text messages despite having already removed the associated phone number from their account.

- Product
- Microsoft Account
- Device & OS
- not provided
- Scenario
- The user removed their phone number from their Microsoft account settings but continues to receive automated authentication texts.
- Observed behavior
- Unsolicited verification codes are repeatedly delivered to the removed phone number, which may indicate that the number is linked to another account or someone is attempting unauthorized sign-ins.
Ensure you have access to your primary Microsoft account credentials and an alternative, secure method for receiving verification codes, such as an authenticator app or a secondary email address.
Review Security Information and Add Alternative Methods
Check if your phone number is still linked to other Microsoft services or alternative accounts, and update your primary sign-in methods to stop the codes.
A single phone number can often be tied to multiple Microsoft accounts, such as work, school, or family accounts. Removing it from one account does not automatically unlink it from others.
Sign in to your Microsoft account in a web browser and navigate to the 'Security' dashboard, then click on 'Advanced security options'.
Check the list of ways to prove who you are. If the phone number is still listed here as a text or call option, remove it.
Click 'Add a new way to sign in or verify' and set up an alternative method, such as an authenticator app or a secondary email address, to replace the phone number completely.
Log into any other Microsoft accounts you or your family members might own and check their security settings to ensure your phone number is not listed there as a recovery option.

Contact Microsoft Support for Persistent Issues
If the verification codes continue despite unlinking the number from all known accounts, you will need to contact Microsoft Support to investigate the backend issue.
Looking for a Seamless and Free Office Suite? Try WPS Office
While resolving your Microsoft account security and verification issues, consider switching to WPS Office. It provides a lightweight, secure, and entirely free alternative to Microsoft Office, letting you edit documents offline without dealing with complex cloud account verifications.
- 1. Download the software: Visit the official WPS Office website and click the free download button for your operating system.
- 2. Install WPS Office: Run the downloaded setup file and follow the straightforward on-screen instructions to install the suite.
- 3. Start editing seamlessly: Launch WPS Office and instantly open your existing Microsoft Office files to continue working offline or online.

Frequently Asked Questions
Why am I getting Microsoft verification codes when I didn't request them?
Receiving unrequested codes usually means someone else has mistakenly entered your phone number during their sign-in process, or a malicious actor is actively attempting to access a Microsoft account that is still linked to your phone number.
Can a phone number be linked to multiple Microsoft accounts?
Yes, a single phone number can be used as a security or verification method for multiple personal, work, or family Microsoft accounts. You must remove the number from the security settings of every connected account to stop the codes entirely.
Should I reply 'STOP' to the Microsoft verification text message?
No, Microsoft's automated multifactor authentication (MFA) text numbers generally do not process 'STOP' replies. The only reliable way to halt the messages is to unlink the number from the account's advanced security options or contact support.
How can I secure my Microsoft account if someone is trying to guess my password?
Change your password immediately to a strong, unique phrase. Furthermore, it is highly recommended to enable passwordless sign-in or use the Microsoft Authenticator app to significantly enhance your account's security against brute-force attacks.




