If someone tries to access your account using your username and password, Duo will notify you through one of your enrolled authentication methods.
If you receive a login request you didn’t make and suspect fraud, deny the request:
- In the mobile app, tap Deny
- On a phone call, press 0
This will block the login attempt and report it as fraudulent.