Sending, receiving, and organizing email in Outlook.com
If the account is hacked and spam is still arriving or being sent, use this cleanup sequence:
- Scan the device for malware before changing anything else
- Open Virus and threat protection.
- Select Scan options > Full scan > Scan now.
- This helps prevent the attacker from stealing the new password again.
- Change or reset the Microsoft account password
- If sign-in still works, change the password.
- If sign-in does not work, use the password reset flow.
- Use a strong password.
- Review recent sign-in activity
- Check the recent activity page to see when and where the account was accessed.
- If there are sign-ins that are not recognized, treat the account as compromised.
- Check Outlook.com mail settings for attacker changes
In Outlook.com, open Settings > View all Outlook settings > Mail and review:
- Rules: delete any rule not created intentionally, especially rules that forward, move, or delete mail.
- Forwarding: remove any forwarding address not recognized.
- Automatic replies: turn off anything not configured intentionally.
- Check for signs of compromise in the mailbox
Look for:
- Missing or deleted email
- Suspicious messages in Sent Items or Deleted Items
- Rules that move mail to Junk Email, Notes, or RSS Subscriptions
- Frequent lockouts or unexpected password changes
- Add recovery and security information Add an alternate email address and mobile phone number so account recovery is easier if access is lost again.
- If the account is blocked Outlook.com accounts can be temporarily blocked after unusual sign-in activity. In that case, reset the password to unblock it.
- If spam is continuously arriving A leaked email address can cause a surge in spam and phishing attempts even after the account is secured. Be extra cautious with links, attachments, fake invoices, and messages asking for passwords.
If the account cannot be secured through these steps, use the Microsoft account sign-in helper tool, which can guide to self-help steps or offer the chance to talk to an agent.
- How to recover a hacked or compromised Microsoft account | Microsoft Support
- Help protect your Outlook.com email account | Microsoft Support
- Help protect your Outlook.com email account | Microsoft Support
- Phishing and suspicious behavior in Outlook | Microsoft Support
- Unblock my Outlook.com account | Microsoft Support
- What to do if your email address is leaked | Microsoft Support
- Respond to a compromised cloud email account