What is this social-engineering trick commonly called?

MFA fatigue, also called prompt bombing, is a social-engineering tactic where attackers who already have a stolen password repeatedly trigger login approval requests on the victim's phone, hoping sheer annoyance or confusion eventually leads to an accidental tap of 'Approve.' It exploits human behavior rather than any technical flaw in the multi-factor authentication system itself, since the underlying security technology is working exactly as designed.

A SQL injection is a technical attack that manipulates a website's database through malicious code entered into input fields, a completely different method with no phone prompts involved. A man-in-the-middle attack secretly intercepts communication between two parties, which is also unrelated to spamming approval notifications.

To counter prompt bombing, many login systems now use number-matching, requiring the user to type a specific code displayed on their screen rather than simply tapping 'yes,' which forces genuine attention instead of a reflexive dismissal.