Malicious Draft Email keeps appearing

FRANKIE 20 Reputation points
2026-02-02T08:03:17.3533333+00:00

My Outlook mailbox is continuously auto-generating scam drafts even after password reset, 2FA enabled, rules removed, forwarding disabled, POP/IMAP disabled, and all devices signed out. Sending is blocked due to daily limit. The drafts keep returning. I need a full mailbox backend reset

Outlook | Web | Outlook.com | Email

2 answers

Sort by: Most helpful
Most helpful Newest Oldest

  1. AI answer

    2026-02-02T08:03:25.9366667+00:00

    It sounds like your Outlook mailbox may still be compromised despite taking several security measures. Here are some steps you can take to address the issue:

    1. Check for Compromised Account: Ensure that there are no remaining unauthorized access points. This includes reviewing any connected applications and ensuring that all suspicious devices are removed from your account.
    2. Review Mail Forwarding and Inbox Rules: Although you mentioned that rules have been removed, double-check that there are no hidden or re-created rules that could be causing the drafts to appear. Use PowerShell commands to list any existing rules, as some may not be visible in the standard Outlook interface.
    3. Examine Audit Logs: Investigate the audit logs in the Microsoft Entra admin center to identify any unusual activity that might indicate ongoing unauthorized access. Look for signs of logins from unfamiliar IP addresses or locations.
    4. Reset Mailbox Settings: If the problem persists, consider contacting Microsoft support for a backend reset of your mailbox. This may help eliminate any lingering configurations that are causing the drafts to reappear.
    5. Enable Multi-Factor Authentication (MFA): Ensure that MFA is properly configured and that no unauthorized methods are registered.
    6. Scan for Malware: Make sure that your devices are free from malware that could be affecting your email account.

    If these steps do not resolve the issue, reaching out to Microsoft support for further assistance would be advisable.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

    1 person found this answer helpful.
  2. Anonymous
    2026-02-03T04:31:21.2866667+00:00

    Hello FRANKIE

    Thank you for reaching out to Microsoft Q&A Forum. I understand how alarming this is, even after securing the account, malicious draft emails keep reappearing and you’ve now hit a daily sending limit, so you can’t fully regain control of your mailbox.

    I can see the Q&A Assist answer under your post. To avoid repeating it, could you tell me whether you’ve tried those steps yet, and what happens when you try?

    In addition, please try the following steps:

    1. Double-check the account security

    2. Review and secure recent sign‑in  

    3. Run a quick isolation test

    • Sign in to Outlook on the web
    • Delete the malicious drafts (Empty Drafts folder).
    • Do not open Outlook on any device (PC/mobile/tablet) for 30–60 minutes.
    • Refresh Outlook on the web and check Drafts again.

    4. Remove any hidden mail actions

    • Still in Outlook on the web, go to Settings > Mail > Rules and Settings > Mail > Forwarding
    • Review and delete any unknown rules

    For more details, you can see this official guide: Fix email sync issues by removing a device from your Outlook mailbox - Microsoft Support

    Please feel free to let me know how it goes. I truly appreciate your time and understanding.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".    

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.