
Xbox mobile test message notices leaked from a Braze QA workflow into the public app, sparking confusion and concerns.
On February 25, Xbox app users reported their phones were hammered by repeated alerts labeled as “dummy” or “mobile test message,” with text indicating it was “sent via Braze” and asking for a screenshot. The pop-ups referenced a “recently added gallery” – a clue the prompt was written for internal testing.
Xbox later acknowledged the Xbox Braze message flood on X, saying the app “got a little too enthusiastic with test notifications” and that it was resolved.
The Xbox App got a little too enthusiastic with test notifications today. That’s on us, but it’s resolved now. Thanks for understanding, and we apologize for flooding your notifications.
— Xbox (@Xbox) February 25, 2026
There was no indication of account compromise, but the experience still triggered predictable “was I hacked?” anxiety among the Xbox userbase.
Braze is a customer engagement platform used to orchestrate push notifications and in-app messaging. In this case, the Braze Xbox message was visible in plain text, turning an internal label (i.e., “Xbox braze”) into a public breadcrumb for users to Google quickly.
When a “dummy notification” such as the Xbox Braze test message hits real customers, it typically signals an environment or segmentation mistake, whether it’s test recipients mapped to production or a campaign launched without the intended audience confines. Staged environments, approval gates and rate limiting or frequency caps can keep mobile test messages from becoming notification storms.
Although this notification turned out to be harmless, even benign dummy messages can look like common social-engineering attempts. Repetition also creates notification fatigue, conditioning users to either ignore legitimate alerts or to click reflexively just to stop the buzzing.
Predictably, some users even tried to correlate the timing with unrelated AI outages elsewhere. There’s no public evidence of a causal link, but the reaction hints at bigger ramifications: as platforms adopt more automation, users assume hidden dependencies.
No. Based on Xbox’s public acknowledgement and the wording of the notification itself, the incident was a misfired test push, not a security breach.
Braze is a customer engagement and cross-channel messaging platform companies use to manage push notifications, in-app messages, email campaigns and audience segmentation. It allows product and marketing teams to test messaging workflows before deploying them broadly.
If you were affected by the Xbox mobile test dummy notification flood, you can temporarily disable notifications at the OS level:
On iPhone:
Settings -> NotificationsXboxAllow NotificationsOn Android:
Settings -> Apps -> XboxNotificationsYou can also manage notification preferences inside the Xbox app itself under Settings -> Notifications. If a similar dummy message Xbox issue occurs in the future, temporarily muting notifications is the safest quick fix while the vendor resolves the backend issue.
tags
Vlad's love for technology and writing created rich soil for his interest in cybersecurity to sprout into a full-on passion. Before becoming a Security Analyst, he covered tech and security topics.
View all posts