Email account hacked.

Question

Email account hacked.

H.J. W 0

Hello. Hopefully someone can help. My email account has been taken over and credit agreement etc set up. I've callled police and my son has helped me change password and two step authenticator etc but emails i have been receiving are still showing SKY MARKET ALL-IN-ONE CHECKER and quickmailchecker_bot.

I'm really worried but can't seem to contact anyone at Microsoft to speak to.

0 comments

2 answers

Your answer

Answer 1

Francisco Montilla 30,735 Independent Advisor

Hello,

Just so you know first, this is a public community forum where everyday users help each other out, not Microsoft direct support.

What you are seeing with Sky Market and QuickMailChecker is a known bot tool that attackers use to hijack email accounts, scrape data, and tamper with inbox contents. Since your son already helped you reset your password and turn on two-step verification, we need to diagnose whether this bot is still actively messing with your account or if you are just seeing leftover damage from when they had access.

Could you tell me if brand new emails arriving right now are still getting overwritten by the bot, or is it only older emails from when the break-in happened?
Also, if you send a fresh test email to yourself right now from a different account, does it come through normally or does the bot message show up on that new test too?
Lastly, do you know if your son also used the option on the Microsoft account page to sign out of all sessions everywhere, or was it only the password and authenticator change?

Once we know whether the bot is still actively touching incoming mail, we can pin down what is going on.

H.J. W 0 Reputation points

2026-10-07T21:00:55.21+00:00

Thank you so much for the quick reply. We sent a test email and its still being overwritten by the bot. The same bot message is coming up a few minutes after it has been sent.. My son said he used the option to sign out but it said it would take 24 hours. I am using another email as contact for these messages. Do you know if it is possible to speak to someone about this?
Francisco Montilla 30,735 Reputation points Independent Advisor

2026-10-08T03:35:25.2666667+00:00

Microsoft does not have an inbound phone number you can call directly for free personal email accounts, but you can request an online live chat with a support agent by going to support.microsoft.com/contactus or opening the Get Help app on Windows, typing account security, and choosing the option to chat with an agent.

Now, to stop the bot immediately, have your son check and clear your mailbox rules on a computer browser. When accounts get compromised, these bots almost always install hidden or automated inbox rules to keep intercepting and overwriting incoming mail even after your password and authenticator are updated.

Sign into your email at outlook.live.com on a computer, click the gear icon in the top right corner to open Settings, go to Mail, and select Rules. Delete any rule listed there that you did not create yourself. Right below that in the same menu, click Forwarding and make sure email forwarding is disabled.

Removing those malicious rules should stop the bot from touching your incoming emails.

Answer 2

If the Outlook.com account has been taken over, the supported next steps are:

Run a full malware scan on the PC before making further account changes. In Windows Security, open Virus and threat protection > Scan options > Full scan > Scan now.
Change or reset the Microsoft account password again after the scan, and keep a strong password in place.
Review account settings that attackers commonly change:
- Connected accounts
- Forwarding
- Automatic replies
Check recent sign-in activity on the Microsoft account. The Recent activity page shows sign-ins from the last 30 days and can help confirm whether unfamiliar access is still happening.
If suspicious Microsoft account emails are being received, messages from the domain @accountprotection.microsoft.com are legitimate Microsoft account notifications. If a verification code was not requested, that can indicate someone is trying to access the account.
If the account is blocked or still cannot be secured by changing the password, use the Microsoft sign-in helper and recovery flow. That process can either provide self-help steps or offer the chance to talk to an agent.
For direct support, use Contact Microsoft Support and select Get Help, then Contact Support.

Important points:

Microsoft support agents are not allowed to send password reset links or directly change account details.
If the email address has been exposed, keep multi-factor authentication enabled and continue reporting spam or phishing messages so filtering improves.

References: