PanicStation.org
UK USA
us Technology & digital loss

What to do if…
your screen shows repeated allow access prompts for apps you did not open

Produced and maintained by PanicStation.org Published: Last reviewed: Editorial policy USA guide

Short answer

Do not approve the prompt. Pause, disconnect the device from the internet if you can, and use another trusted device to secure any account named in the prompt.

Do not do these things

  • Don’t tap Allow, Approve, Yes, or similar just to make the prompt go away.
  • Don’t read out one-time codes, verification numbers, or approval prompts to anyone who contacted you.
  • Don’t install a “fix,” profile, VPN, remote-support app, or security tool from the prompt itself.
  • Don’t change important passwords on the device showing the prompts if you have another trusted device available.
  • Don’t keep testing the prompt by granting camera, contacts, files, accessibility, device management, or notification permissions.

What to do now

  1. Freeze the situation. Turn on Airplane mode, or turn off Wi-Fi and cellular data. This can reduce new network activity while you pause and check what is asking.
  2. If the prompts keep taking over the screen, power the device off. Leave it off while you use another trusted phone or computer for account checks.
  3. Capture the clue if you can do it safely. Take 1–2 screenshots showing the exact wording, app name, website name, or account name. Note the time the prompts started.
  4. Sort the prompt into one of these types:
    • Sign-in approval: wording like “Is this you,” “Approve sign-in,” “Allow access,” or a location/device you do not recognise.
    • Device permission: camera, microphone, contacts, photos, files, accessibility, VPN, or device management.
    • Website permission: browser wording such as “Allow notifications” from a site.
  5. If it is a sign-in approval, secure the named account from another trusted device. Change the password for that account, check recent security activity, remove unfamiliar signed-in devices, and review recovery email, phone, and forwarding settings. If the prompt does not name an account, start with your main email account, then money-related accounts, then Apple Account, Google Account, or Microsoft account.
  6. If it is an iPhone or iPad profile or management prompt, check profiles. Go to Settings → General → VPN & Device Management. If this is a work or school device, or you are unsure, stop and contact IT or the admin before removing anything. If it is your personal device and the profile is clearly unwanted, remove it and restart.
  7. If it is an Android app permission prompt, look for the recent app causing it. Restart in Safe mode using your phone maker’s method, uninstall recent or unknown apps, then restart normally and see whether the prompts stop.
  8. If it is a website notification prompt, remove that site’s permission. In the browser settings, review site permissions or notifications and block or remove any site you do not recognise.
  9. Update before normal use. Install available operating-system and app updates, then recheck signed-in devices and recent security activity for the affected account.
  10. If money, identity information, or accounts were affected, report the right problem. For scams or fraud, report to the FTC. For signs of identity theft, such as new accounts you did not open or misuse of your Social Security number, use IdentityTheft.gov.
  11. If the device belongs to work or school, contact IT or the security team. Do this before approving new prompts, removing management settings, or reinstalling apps.

What can wait

  • You do not need to decide now about a factory reset, buying a new device, or replacing every account.
  • You do not need to contact every service at once; stabilise the prompt, then secure the named account, main email, and money-related accounts first.
  • You can leave deeper cleanup, such as reviewing every app permission or doing a full restore, until the prompts stop and your accounts are stable.

Important reassurance

Repeated approval prompts are meant to rush you into one wrong tap. Pausing, not approving, and checking accounts from another device is a strong first move.

Scope note

These are first steps only. Later decisions, such as a full device reset, workplace escalation, fraud recovery, or specialist security help, may need support from the relevant provider or a trusted professional.

Important note

This is general information, not legal, financial, professional security, or technical support advice. If someone is threatening you or you are in immediate danger, call 911.

Additional Resources

Closely connected guides that may be useful during the same situation or its immediate aftermath.

About this guide

This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.

Support us