Account Keeps Locking

Hi magrima, we know how important it is to have access to email.

Currently, some AT&T Mail customers are being continually prompted to reset their password when attempting to login to their mail account. 

It is believed this issue is being caused by bad actors trying to gain access to legitimate users’ mail accounts. After six unsuccessful login attempts by the bad actors, AT&T places a fraud lock on the account for the protection of the AT&T user and their mail account. To regain access to their account, the legitimate user must reset their password after validating their identity. 

AT&T Security is investigating and is frequently blocking the IP addresses of the bad actors who are making these login attempts.

Please don't hesitate to reach out if you have further questions, and thank you for contacting the AT&T Community Forums.

Jennifer, AT&T Community Specialist 

Moving this post to the Email forum.

I truly appreciate the frustration of the post from magrima.  I am also the victim of a 'bad actor'.  I have had to change my AT&T email login several times over the past few weeks.  My question is simple... why does AT&T not have multi-factored authentication upon login?  Most every other company out there has it and ALL high-tech companies have it.  Give me the option to use a code from my phone when logging in.  That would save the huge hassle I am having every time I attempt to log in.  Simple fix.  Please do it!

I agree with mrbluesky62. There IS a simple fix that would not inconvenience the rightful account owner, whereas having to keep changing login credentials every few days is a major frustration. Some people don't have a password management program to keep track of these constant changes. Luckily, I use Roboform so it's not a problem. But in addition to sending a code to one's cell phone, it would be a great option to send the access code verbally to a non-mobile phone if one is listed on the user's account  (i.e., a landline or Google Voice number) because not everyone has a cell phone. My cell has been out-of-commission for months due to a defective screen so even if an access code was sent to me, I would not be able to see it. Please AT&T, make life easier for those of us who use your service. At least send a code to a cell phone or via recording to a non-mobile phone. It's a bit less frustrating for me to keep changing my login but again, not everybody has a password manager --- what's worse, most of the people this is happening to don't even know what's happenening because AT&T doesn't seem to go out of their way to explain it. I had to Google the issue to find the answer on this forum!

I'm going to have to backup "mrbluesky" here and bump this thread because AT&T should be temporarily IP banning "bad actors" from gaining access to accounts, not locking accounts of the owner, I have to reset my AT&T email password over 15 times a week because of this (Edited per community guidelines) poor coding.

You guys are royally screwing your customers over by locking them out for someone elses actions.

The system doesn't know who is trying to gain access.  If you were to have brain fade and make six unsuccessful attempts to access your account, you'd be blocked out. That part of the system is just good security and most websites and email services use that.

AT&T is supposedly doing exactly what you suggest although they claim that's hampered because the hackers (I refuse to use the less sinister phrase) are using VPNs.  Still it doesn't take 10 months to accomplish this and other systems in place that don't even require the blocks and yet here we are.

Bottom line, AT&T does not care.

I have the same problem with the message that I have exceeded the number of sign attempts when I have not tried more than once with a single login.  I tried the stupid chat and got this response.  Obviously the chatbot is stupid!

AT&T Company Chat Transcript
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Reference Number: (removed personal reference number)
DATE/TIME: 2023-06-07 10:16:37

*Your chat transcript:*

Good morning!
Wednesday 10:21 AM

[AT&T] : Welcome to the AT&T chat! Select a topic or ask a question.
 - Update user ID and password
 - Fix my internet

[Me] : When I sign in, I get this message

The limit for unsuccessful sign-in attempts has been reached. Select Forgot user ID or Forgot password to restore access.Care code: 205.2 LU003

[AT&T] : I missed that, say that again?

[Me] : 

The limit for unsuccessful sign-in attempts has been reached. Select Forgot user ID or Forgot password to restore access.Care code: 205.2 LU003  I get this when I sign in, I have not made any attempt except the first and I did not enter anything incorrect

[AT&T] : Sorry, could you say that again?

[Me] : What does it matter, you can't understand me!

[AT&T] : I missed what you said. What was that?

[Me] : 
(Edited per community guidelines) you!

[AT&T] : Sorry, I didn't get that. Can you rephrase?

[Me] : When I sign in I get this message 

The limit for unsuccessful sign-in attempts has been reached. Select Forgot user ID or Forgot password to restore access.Care code: 205.2 LU003.

[AT&T] : One more time?

[Me] : When I sign in I get this message

The limit for unsuccessful sign-in attempts has been reached. Select Forgot user ID or Forgot password to restore access.Care code: 205.2 LU003

[AT&T] : One more time?

[Me] : When I sign in I get this message The limit for unsuccessful sign-in attempts has been reached. Select Forgot user ID or Forgot password to restore access.Care code: 205.2 LU003

[AT&T] : I didn't get that. Can you repeat?

[Me] : When I sign in I get this message The limit for unsuccessful sign-in attempts has been reached. Select Forgot user ID or Forgot password to restore access.Care code: 205.2 LU003

[AT&T] : I missed what you said. What was that?

[Me] : When I sign in I get this message The limit for unsuccessful sign-in attempts has been reached. Select Forgot user ID or Forgot password to restore access.Care code: 205.2 LU003

[AT&T] : Sorry, can you say that again?

[Me] : When I sign in I get this message The limit for unsuccessful sign-in attempts has been reached. Select Forgot user ID or Forgot password to restore access.Care code: 205.2 LU003

[AT&T] : Sorry, can you say that again?

[Me] : When I sign in I get this message The limit for unsuccessful sign-in attempts has been reached. Select Forgot user ID or Forgot password to restore access.Care code: 205.2 LU003

[AT&T] : Sorry, could you say that again?

[Me] : When I sign in I get this message The limit for unsuccessful sign-in attempts has been reached. Select Forgot user ID or Forgot password to restore access.Care code: 205.2 LU003

[AT&T] : I didn't get that. Can you say it again?

[Me] : When I sign in I get this message The limit for unsuccessful sign-in attempts has been reached. Select Forgot user ID or Forgot password to restore access.Care code: 205.2 LU003

[AT&T] : Can you say that again?

[Me] : When I sign in I get this message The limit for unsuccessful sign-in attempts has been reached. Select Forgot user ID or Forgot password to restore access.Care code: 205.2 LU003

[AT&T] : Sorry, what was that?

[Me] : When I sign in I get this message The limit for unsuccessful sign-in attempts has been reached. Select Forgot user ID or Forgot password to restore access.Care code: 205.2 LU003

[AT&T] : Sorry, what was that?

[Me] : What is the point of this you can't understand.  You are artificial ignorance

[AT&T] : I didn't get that. Can you repeat?

[Me] : When I sign in I get this message The limit for unsuccessful sign-in attempts has been reached. Select Forgot user ID or Forgot password to restore access.Care code: 205.2 LU003

[AT&T] : Can you say that again?

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
2023 AT&T Intellectual Property. All rights reserved.
AT&T and Globe logo are registered trademarks of AT&T Intellectual Property.