PanicStation.org
UK USA
uk Technology & digital loss

What to do if…
your screen shows repeated allow access prompts for apps you did not open

Produced and maintained by PanicStation.org Published: Last reviewed: Editorial policy UK guide

Short answer

Stop tapping the prompts. Put the device into Aeroplane mode, check Wi-Fi and mobile data are off, and secure key accounts from a different trusted device.

Do not do these things

  • Don’t tap Allow, Approve, or Yes just to make the prompt go away.
  • Don’t enter passwords, passcodes, one-time codes, or recovery codes into any pop-up you did not intentionally trigger.
  • Don’t install a profile, VPN, “security tool”, or app from the prompt itself.
  • Don’t change your most important passwords on the possibly affected device if you have another trusted device available.
  • Don’t dismiss repeated prompts as only a glitch until you have checked the account, app, or website causing them.
  • Don’t reply to callers or messages claiming to be support because the prompts appeared.

What to do now

  1. Create a quiet pause. Turn on Aeroplane mode, then check that Wi-Fi and mobile data are off. If the prompts keep covering the screen, power the device off for a minute.

  2. Record the basic details without approving anything. Take screenshots of 2 or 3 prompts if you can do so safely. Note the app, account, website, or service name shown, and the time the prompts started.

  3. Decide what kind of prompt it is.

    • If it says Approve sign-in, Is this you?, Allow access, or similar for an account, treat it as a possible sign-in attempt.
    • If it asks for camera, contacts, files, accessibility, device admin, VPN, or device management access, treat it as a possible app or settings issue.
    • If it is from a browser or website and asks to Allow notifications, treat it as a site permission issue.

  4. If it looks like a sign-in approval prompt, use another trusted device first. Sign in directly through the official app or website, not through the prompt. Change the password for your email account, then the account named in the prompts, banking or payment accounts, and your Apple Account or Google Account if they are involved.

  5. Check account activity and signed-in devices. On the trusted device, review recent sign-ins, security events, and devices for the account named in the prompt. Sign out of devices or sessions you do not recognise, and follow the account provider’s security steps.

  6. On iPhone or iPad, check for device management profiles. Go to Settings → General → VPN & Device Management. If you see a profile or mobile device management entry you do not recognise, do not approve anything else. If it is a work or school device, contact your IT or admin team first. If it is your personal device and the profile is clearly not yours, remove it if your device allows this, then restart.

  7. On Android, check for a recently added or suspicious app. Use your phone maker’s Safe mode steps if the normal screen is hard to use. In Safe mode, uninstall apps added around the time this started, or apps you do not recognise.

  8. If it is a website notification prompt, remove the site permission. Open the browser settings directly and remove notification permissions for sites you do not recognise. Do not tap Allow on a prompt to test it.

  9. Update before returning to normal use. After removing suspicious apps, profiles, or site permissions and securing key accounts, install available operating system, browser, and app updates. Reconnect to the internet and watch whether the prompts return.

  10. If this is a work or school device, or it has work accounts on it, contact IT before approving anything again. Tell them what the prompt says and when it started.

  11. If you approved access by mistake, shared codes, or lost money, report it. In England, Wales or Northern Ireland, use Report Fraud for cyber crime or fraud. If you are in Scotland and you have lost money because of an online scam or fraud, contact Police Scotland on 101.

What can wait

  • You do not need to decide right now whether to factory reset the device or buy a new one.
  • You do not need to reset every account at once before securing the account named in the prompt and your email account.
  • You can leave deeper cleanup, password manager review, and full device reconfiguration until the prompts have stopped and the highest-risk accounts are secure.

Important reassurance

Repeated access prompts are often used because people feel pressured to tap Allow just to make them stop. Pausing, disconnecting, and using a different trusted device for account checks reduces the chance of approving something by accident.

Scope note

These are first steps to stop accidental approval and reduce immediate harm. Later decisions, such as a full device reset, account recovery, or specialist technical support, may need help from official device support, your account provider, your workplace IT team, or a trusted technician.

Important note

This is general information, not professional security, legal, financial, medical, therapeutic, or other professional advice. If you feel unsafe, threatened, or believe a serious crime is happening now, contact the relevant emergency services.

Additional Resources

Closely connected guides that may be useful during the same situation or its immediate aftermath.

About this guide

This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.

Support us