We are aware of a growing security concern involving accounts becoming compromised because users approve multi-factor authentication (MFA) prompts that they did not initiate. MFA is designed to keep our accounts secure even if our password becomes compromised—but it only works if we remain diligent in reviewing all of the phone calls, text messages, and push notifications we receive asking for our approval before we respond to them.