MFA Security Issues

How to Fix Unwanted Advertisements in Microsoft Sign-In OTP Messages

Muhammad TalhaMuhammad Talha Oct 7, 2026 868 views

Question details

The user is receiving text messages containing one-time passwords (OTP) for Microsoft account sign-in that appear to come from an unwanted advertising service instead of the official Microsoft authentication service.

How to Fix Unwanted Advertisements in Microsoft Sign-In OTP Messages
Product
Microsoft Account Authentication
Device & OS
not provided
Scenario
Attempting to sign in to a Microsoft account from a laptop on a home network using SMS text messages for multi-factor authentication.
Observed behavior
The SMS containing the Microsoft authentication OTP is bundled with or originates from an unwanted advertising service, raising security concerns regarding the SMS delivery route.
Before you start

Do not share the one-time code with anyone, and never click on any suspicious links included in the unexpected text message to protect your account from phishing attempts.

Solution 1Recommended

Secure Your Account and Switch to an Authenticator App

Since SMS delivery routes can be compromised or intercepted by advertising gateways, switching to a dedicated authenticator app is the most effective way to secure your Microsoft account.

Relying on SMS for multi-factor authentication (MFA) leaves you vulnerable to carrier routing issues, SIM swapping, and unauthorized message interception. Microsoft recommends using the Microsoft Authenticator app for a more secure and reliable sign-in experience.

1
Verify Recent Sign-in Activity

Log in to your Microsoft account through a trusted device and navigate to the 'Security' tab. Click on 'Sign-in activity' to ensure there are no unauthorized access attempts from unknown locations.

2
Change Your Password

While still in the Security dashboard, select 'Change password'. Enter your current password and create a strong, new password to immediately lock out any potential unauthorized users.

3
Remove Unknown Authentication Methods

Go to 'Advanced security options'. Review your listed authentication methods and remove any phone numbers or alternate emails that you do not recognize or no longer use.

4
Set Up Microsoft Authenticator

In the 'Advanced security options' menu, click 'Add a new way to sign in or verify'. Choose 'Use an app' and follow the on-screen instructions to link the Microsoft Authenticator app to your account.

Secure Your Account and Switch to an Authenticator App
Enhanced Security: Using an authenticator app relies on a secure, encrypted internet connection rather than legacy cellular networks, permanently resolving any SMS-based advertising interference.
Free Microsoft Office alternative

Looking for a Secure, Hassle-Free Office Suite?

While you are securing your Microsoft account, you don't have to put your work on hold. WPS Office is a lightweight, secure, and completely free alternative that lets you create, edit, and manage your documents without complex sign-in loops or SMS verification issues.

  1. 1. Download the Installer: Visit the official WPS Office website and download the free installation package for your operating system.
  2. 2. Install WPS Office: Run the downloaded file and follow the quick on-screen instructions to install the suite.
  3. 3. Open Your Office Files: Launch WPS Office and instantly open your existing Microsoft Office documents to continue working securely.
Fully compatible with Microsoft Word, Excel, and PowerPoint formats.Free and lightweight alternative to Microsoft Office.No mandatory cloud sign-ins required to work on your local files.Familiar and intuitive user interface ensures seamless migration.
microsoft office alternative - wps office

Frequently Asked Questions

Why does my Microsoft authentication code contain an ad?

This usually happens when the SMS delivery route is compromised by a third-party gateway, a malicious app on your phone is intercepting and altering the message, or your carrier's network routing has an issue. It is a security concern and should not be ignored.

Is it safe to use the one-time password if it arrives with an advertisement?

No. If your OTP is bundled with unexpected advertisements, you should treat the communication channel as compromised. Do not enter the code, do not click on any links in the text, and change your password immediately.

How do I stop using SMS for Microsoft sign-in?

Log into your Microsoft account, go to the Security dashboard, and select 'Advanced security options'. From there, you can remove your phone number as a sign-in method and click 'Add a new way to sign in or verify' to set up an authenticator app instead.