Skip to main content
Question

SMS MFA fails with 500 INTERNAL error after enabling Phone Enforcement (Fraud Defense) in Identity Platform

  • October 7, 2026
  • 0 replies
  • 10 views

Forum|alt.badge.img

Hello,

I'm getting intermittent 500 INTERNAL errors from accounts/mfaEnrollment:start and accounts/mfaSignIn:start after enabling Fraud Defense "Enforce" mode (phoneEnforcementState) for SMS-based MFA in my Identity Platform project.

The exact same requests work fine when I switch phoneEnforcementState to "AUDIT". 

I tested tollFraudManagedRules.startScore as low as 0.1, but even at this threshold some legitimate requests still fail with the error:
{
  "error": {
    "code": 500,
    "message": "Internal error encountered.",
    "status": "INTERNAL"
  }
}
 

Has anyone successfully debugged this kind of toll fraud protection issue?