Security - Responding to a Duo notification you did not initiate

Whenever someone tries to log into your account, Duo will send you a notification and ask you to verify that it is you. These are the steps to take if you receive a notification which you did not initiate as your account may be compromised.

If you receive a Duo push, SMS/Text, or phone call which you did not initiate

1. Change your password immediately by using Password Self-Service

2. Update your challenge response questions.

3. Log into Duo Self-Service and confirm all device information is still correct.

If you accidentally approved a push notification or phone call which you did not initiate

1. Change your password immediately by using Password Self-Service

2. Update your challenge response questions

3. Contact the ITS Help Desk immediately.  Please provide:
  • The time of the incident so the Help Desk can consult with our Duo administrators to determine any systems which were accessed. 
  • The system which was accessed, if known.  If the notification was provided via push, it should indicate which system was accessed.
4. Log in to Duo Self-Service and confirm all device information is still correct.

If you have questions, please contact the ITS Help Desk at 608.342.1400 or helpdesk@uwplatt.edu.  You may also visit the Help Desk on the first floor of the Karrmann Library.




Keywords:duo fraud compromise compromised account 2 two factor mfa hack hacked push start accept accident 2fa   Doc ID:30294
Owner:Nathan M.Group:UW Platteville
Created:2013-05-22 14:39 CDTUpdated:2020-09-28 14:40 CDT
Sites:UW Platteville
Feedback:  0   0