My email was compromised

If the account was compromised and email is no longer being received, use this recovery path:

1. Run a full malware scan on the PC before changing the password. In Windows Security, open Virus and threat protection > Scan options > Full scan > Scan now.
2. Change the password immediately. If sign-in no longer works, use the password reset flow.
3. Check account settings that attackers commonly change:
   • Forwarding
   • Connected accounts
   • Automatic replies
4. Check whether the account is temporarily blocked because of unusual sign-in activity. If it is blocked, unblocking requires a password reset.
5. Check recent sign-in activity for the last 30 days on the Recent activity page to confirm whether unfamiliar devices or locations accessed the account.
6. If email still cannot be sent or received after the account is secured, also check whether mailbox or cloud storage is full, because a full mailbox can block sending and receiving.
7. If sign-in or recovery still fails, use the Microsoft account sign-in helper tool. It can provide self-help steps or an option to talk to an agent.

Common signs of a compromised mailbox include suspicious inbox rules, missing or deleted email, suspicious messages in Sent Items or Deleted Items, frequent password changes, unexplained lockouts, and recently added external forwarding.

• How to recover a hacked or compromised Microsoft account | Microsoft Support
• Unblock my Outlook.com account | Microsoft Support
• Email is missing from your Outlook.com inbox | Microsoft Support
• Can't send or receive email in Outlook.com | Microsoft Support
• Respond to a compromised cloud email account