# Blocking account due to suspicious activity

**URL:** <https://community.auth0.com/t/blocking-account-due-to-suspicious-activity/10454>\
**Category:** Get Help\
**Tags:** security\
**Created:** [March 28, 2018, 3:36pm UTC](https://community.auth0.com/t/blocking-account-due-to-suspicious-activity/10454 "2018-03-28T15:36:51Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![jgerber](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/jgerber/32/9325_2.png) [@jgerber](https://community.auth0.com/u/jgerber)\
**Post date:** [March 28, 2018, 3:36pm UTC](https://community.auth0.com/t/blocking-account-due-to-suspicious-activity/10454/1 "2018-03-28T15:36:51Z")

</div>

We did a pen test with a customer and found that auth0 correctly detected suspicious activity and blocked the originating IP address. Our customer would like the account used to be locked as well. Is that possible with auth0?

---

<div class="post-metadata">

**Author:** ![jerdog](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/jerdog/32/11231_2.png) [@jerdog](https://community.auth0.com/u/jerdog)\
**Post date:** [March 29, 2018, 3:34pm UTC](https://community.auth0.com/t/blocking-account-due-to-suspicious-activity/10454/2 "2018-03-29T15:34:51Z")

</div>

User’s can be blocked in the Dashboard via the **User Detai** page, _Actions_ button.

You can use the API to do this via:

```auto
PATCH https://<TENANT>.auth0.com/api/v2/users/<USER_ID>
{ "blocked" :true }

```

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [July 25, 2019, 11:15am UTC](https://community.auth0.com/t/blocking-account-due-to-suspicious-activity/10454/3 "2019-07-25T11:15:43Z")

</div>