Observed Signal · Aug 13, 2026 · Policy Update · Source: t3n · Impact: 4/5 · Sentiment: Positive
Identity Market: Microsoft warns against SMS-based 2FA over AI phishing
Microsoft has warned IT administrators that SMS- and voice-based two-factor authentication (2FA) are increasingly vulnerable due to AI-assisted phishing and easier SIM-swapping. In an internal email, the company recommended migrating to phishing-resistant methods such as passkeys. Microsoft said it has observed a strong rise in AI-driven attacks with higher click-through rates that aim to capture passwords and MFA codes. As a consequence, Microsoft will disable SMS- and voice-based authentication for Entra ID accounts starting February 1, 2027; a timeline for personal Microsoft accounts has not yet been announced.
Policy update from a major platform (Microsoft) that changes authentication methods for enterprise Entra ID users and pushes adoption of phishing-resistant identity solutions, affecting identity management and security strategies across organizations.
Key Takeaways & Evidence Grounding
- Microsoft warned IT administrators by email to stop using SMS- or voice-based two-factor authentication due to AI-enabled phishing risks.
- Microsoft observed a strong increase in AI-driven attacks that aim to collect passwords and MFA codes and report higher click rates than pre-AI attacks.
- Microsoft recommended switching to phishing-resistant methods such as passkeys.
- From February 1, 2027, Entra ID users will no longer be able to access accounts using SMS- or voice-based authentication.
- Microsoft stated that SMS and voice authentication are among the most vulnerable available authentication methods, weaker than passkeys against phishing, SIM-swapping and replay attacks.
Connected Companies & Entities
4 Entities mappedTargetVideo
Publisher video platform and premium video advertising sales business.
“The article notes external content from TargetVideo GmbH that complements t3n's editorial offering....”
Windows Latest
Microsoft-focused technology news publisher and audience platform.
“Microsoft's email was obtained by Windows Latest, which the article cites as having the email....”
t3n
German tech publisher monetising audience, subscriptions and media sales.
“Article published on t3n (t3n – digital pioneers)....”
Microsoft
Diversified software, cloud, advertising and gaming platform company.
“Microsoft warned strongly against two-factor authentication via SMS and urged administrators to move to passkeys in an internal email....”
Ontology Mapping & Concepts
Track Real-Time Market Signals & Shifts
Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.