DUO: Report Suspicious Activity

Issue

• I received a Duo Push I didn’t request
• I got a Duo notification when I wasn’t logging in
• My Duo Push shows a location I don’t recognize
• My Duo Push shows an app I wasn’t trying to log into
• How do I report a suspicious Duo Push?
• I think someone is trying to log into my account

Environment

• Duo Two-Factor Authentication
• Duo Mobile app (Duo Push)

Resolution

Verify a Duo Push Before Approving

When you receive a Duo Push, check these details before you approve it:

1. Confirm the application name matches the application you are logging into.
2. Confirm the timestamp matches when you started logging in.
3. Only tap Approve if both details match what you are doing.

Report a Suspicious Push

When you receive a push, if anything about it looks unusual, such as a location you don’t recognize, an application you aren’t using, or a request you didn’t start:

1. Tap Deny.
2. When asked whether the request was suspicious, tap Yes. This reports the push to Duo.
3. Change your Multipass password right away, since it may have been compromised. Reset Multipass