Model deployment blocked with error 715-123420 "unusual activity"

Matt Lavallee 0 Reputation points
2026-08-12T02:25:27.41+00:00

Title: New AI Foundry (Cognitive Services AIServices) resource - model deployment fails with error 715-123420 "unusual activity"

Body:

Environment:

  • Resource type: Microsoft.CognitiveServices/accounts, kind AIServices, sku S0
  • Region: East US 2
  • A Foundry project sub-resource was created under the account (Microsoft.CognitiveServices/accounts/projects)
  • System-assigned managed identity enabled on the account
  • This was the first Cognitive Services / Azure OpenAI resource ever created on this subscription
  • All actions performed interactively via Azure CLI, no automation or service principal involved

Steps taken:

  1. Created an AIServices account with a custom subdomain and sku S0. -> Succeeded
  2. Enabled a system-assigned managed identity on the account. -> Succeeded
  3. Created a Foundry project sub-resource under the account via az resource create against the accounts/projects resource type (had to include an identity block on the project itself, not just the parent account). -> Succeeded
  4. Checked model availability and quota for the region — confirmed unused GlobalStandard quota for a small chat model.
  5. Attempted a model deployment (small chat model, GlobalStandard sku, capacity 50) using the exact version returned by the model list. -> Failed: model version was in a deprecating state and rejected for new deployments.
  6. Retried with a different, non-deprecated small chat model version, same sku/capacity. -> Failed with error code 715-123420: "Our system has detected this request as unusual activity for your account. If you are confident this is in error, please contact support."
  7. Did not retry further after this, since it looked like an abuse-detection flag rather than a transient error.

Question: What typically triggers error 715-123420 on a first-ever model deployment attempt on a subscription, and is there a self-service way to clear it, or does it always require a support ticket? I do not have a support contract beyond Developer, so cannot open a traditional ticket with the Human Interaction Team any other way.

Foundry Models
Foundry Models

A catalog of AI models in Microsoft Foundry that you can discover, compare, and deploy using Azure’s built‑in tools for evaluation, fine‑tuning, and inference


1 answer

Sort by: Most helpful
  1. Allan Solomon Mejia 3,755 Reputation points
    2026-08-12T02:27:35.99+00:00

    Hello @Matt Lavallee

    Error 715-123420 with the “unusual activity” message isn't normally caused by your model version, quota, RBAC configuration, or CLI syntax. Microsoft moderators have confirmed in several recent cases that this error indicates the deployment has been blocked by an automated fraud/risk signal and requires review by the appropriate internal team.

    There isn't currently a documented self-service method to clear this restriction. I also wouldn't recommend repeatedly retrying deployments, recreating the AI Services resource, changing regions, or creating another subscription to work around it.

    Since this is the first AI/Foundry deployment on the subscription, a false-positive risk assessment is certainly possible, but Microsoft doesn't publicly document the exact signals that trigger the detection.

    Given that you only have Developer support and can't open the required technical support case, I would recommend that a Microsoft Q&A moderator assist with internal escalation. This has been done for other 715-123420 cases where moderators requested the necessary information through private message.

    Have the following ready:

    • Subscription ID
    • AI Services resource ID
    • Azure region
    • Error code 715-123420
    • UTC timestamp of the failed deployment
    • Correlation/request ID from the failed ARM operation

    Please don't post subscription/resource identifiers or other sensitive account information publicly; provide them through private message if requested by a Microsoft moderator.

    Your first failure caused by the deprecated model version is a separate issue. The subsequent 715-123420 response is the one that indicates the account/subscription-level risk block and needs Microsoft review.

    Please "Accept the Answer" if this information helped you. This will help us and others in the community as well.

    Was this answer helpful?


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.