Outlook email Hacked

Question

Outlook email Hacked

Jonathan 35

So a couple of hours ago I got hacked, but not sure what to do now. I changed the language back to the original, I removed the "idtienphuoc1" rules from the inbox rules, my account does not support a conditional format, for Forwarding and IMAP: forwarding is off and my email is there as primary and POP and IMAP are on, I didn't see anything off from in the Sign-In Preferences besides my email, I turned two-step verification, and I signed out my account from every device, but it said that it is going to take 24 hours. I scanned my computer to check for anything, it detected four files but at the end it said "no threats" When I did all of that I am still receiving those spam messages. I checked the rule again from inbox rules, but it was not there anymore after I deleted the first time

Jonathan 35 Reputation points

2026-03-09T21:45:33.67+00:00

Sorry @EmilyS_726 I have one more question in regard to this situation. I received an email (only one) from the junk section and in the email it had "?" and "unverified" and it seems like the email was the same as mine. I didn't click on the email. I do have the 2-step verification on since we had our first conversation, change the password, and sign out from all accounts. I changed the password and sign out from all accounts again. I do want to hear your thoughts about this
EmilyS_726 34,015 Reputation points Volunteer Moderator

2026-03-09T22:58:15.91+00:00

Yes, that means the email did not pass SPF, DKIM, or DMARC checks, which indicates it was not sent by the real source. In other words, it was spoofed. It was sent from somewhere outside your mailbox or account, but made to look as though it came from you.

When it shows as “not verified,” it means the message failed SPF, DKIM, or DMARC authentication. These are standard email security checks used across the industry to confirm that a sender is actually who they claim to be. There is nothing to worry about here.
Jonathan 35 Reputation points

2026-03-09T23:47:16.85+00:00

Ok. Sounds good. I just wanted to make sure. Thank you again for your assistance
EmilyS726 278.3K Reputation points Independent Advisor

2026-03-10T00:07:53.39+00:00

No problem.

Answer accepted by question author

EmilyS_726 34,015 Volunteer Moderator

Hi Jonathan,

I saw your comments in another thread that Kendra posted.

It sounds like you may be dealing with a similar issue. In most of the recent cases, the problem has usually come down to a few common causes:

A virus or malicious script on a device running the email app that keeps reapplying the changes. That is why running a virus scan can help if this was the cause.
An active signed-in session in an app, either on one of your devices or on a device the hacker is using. That is why signing out of all sessions and deleting any app passwords can help. But signing out of all sessions can take up to 24 hours.

If the issue is coming from a session on a device you have access to, that is also why I often suggest completely removing the account from all email apps on any devices you can think of. Otherwise, the rules may just sync back across devices again.

EmilyS_726 34,015 Reputation points Volunteer Moderator

2026-03-04T01:50:19.3266667+00:00

I forgot to mention, check your To-Do as well.
Anna Hughes 0 Reputation points

2026-03-09T23:24:35.1166667+00:00

EmilyS, I want to Thank you for giving good instructions on how to start receiving emails again. It all started with family and friends saying did you send me an email and of course I haven't. So, I changed my password but was not receiving email until I read your instructions. This happens on 3.4.2026. I am back in business now (3.9.2026). I don't know what happened to the good old days, were you chat with Tech Support, the world is in trouble.

3 additional answers

Your answer

Jonathan 35 Reputation points

2026-03-09T21:45:33.67+00:00

Sorry @EmilyS_726 I have one more question in regard to this situation. I received an email (only one) from the junk section and in the email it had "?" and "unverified" and it seems like the email was the same as mine. I didn't click on the email. I do have the 2-step verification on since we had our first conversation, change the password, and sign out from all accounts. I changed the password and sign out from all accounts again. I do want to hear your thoughts about this
EmilyS_726 34,015 Reputation points Volunteer Moderator

2026-03-09T22:58:15.91+00:00

Yes, that means the email did not pass SPF, DKIM, or DMARC checks, which indicates it was not sent by the real source. In other words, it was spoofed. It was sent from somewhere outside your mailbox or account, but made to look as though it came from you.

When it shows as “not verified,” it means the message failed SPF, DKIM, or DMARC authentication. These are standard email security checks used across the industry to confirm that a sender is actually who they claim to be. There is nothing to worry about here.
Jonathan 35 Reputation points

2026-03-09T23:47:16.85+00:00

Ok. Sounds good. I just wanted to make sure. Thank you again for your assistance
EmilyS726 278.3K Reputation points Independent Advisor

2026-03-10T00:07:53.39+00:00

No problem.
EmilyS_726 34,015 Reputation points Volunteer Moderator

2026-03-04T01:50:19.3266667+00:00

I forgot to mention, check your To-Do as well.
Anna Hughes 0 Reputation points

2026-03-09T23:24:35.1166667+00:00

EmilyS, I want to Thank you for giving good instructions on how to start receiving emails again. It all started with family and friends saying did you send me an email and of course I haven't. So, I changed my password but was not receiving email until I read your instructions. This happens on 3.4.2026. I am back in business now (3.9.2026). I don't know what happened to the good old days, were you chat with Tech Support, the world is in trouble.

Answer 1

Shane Templar 5

I am having the same problem. I have been dealing with this for 2 days now. Including the 24 hour kick off wait. As far as I can tell, I have secured my account, but there seems to be something left that is causing the problem. I have deleted items in To Do, one foreign calendar, deleted rule changes twice (before securing account), as well as deleted access for 2 3rd party email forward (BH and Feather), as well as any other things I have seen recommended. It appears that there is are server "hidden" rules that are still running as any email I receive gets overwritten almost immediately, as well as emails are appearing in my draft and archive folders that claim to be have written and then sent by me. This is on Outlook web based and not the app on my computer. Virus/threat protections have been run and no threats identified.

Nathan Zdanowicz 20 Reputation points

2026-03-18T19:28:21.6966667+00:00

Facing the same thing.. did you resolve this?
Shane Templar 5 Reputation points

2026-03-18T20:12:00.1133333+00:00

Finally yes. Follow the suggestions on this thread. You need to create an alias for your email, kick all users off (it took twice and 3 days before it finally took for me). Make sure to change/cancel all mail rules, check calendars and To Do lists. Pretty much scrub everything. Last one made the biggest difference for me- I looked at apps that were connected to my email in the Microsoft security settings, in my case there were 2 forwarding apps attached, remove permissions for anything you don’t know for sure you use. I just removed everything even ones that I was pretty sure I allowed to connect myself. Took over 3 days and at least 4 password changes before I got my account back. Plan on using at least 2 throw away passwords before picking one you want to use for real.

Answer 2

Jonathan 35

Thank you again for all of your help. II really appreciate on how quick you were active and your advice was very helpful

0 comments

Answer 3

Jonathan 35

Thank you for responding. I checked the to-do list, but there was nothing there

EmilyS_726 34,015 Reputation points Volunteer Moderator

2026-03-04T02:13:32.86+00:00

Then just wait 24 hours and see if it eventually stops.
Jonathan 35 Reputation points

2026-03-04T02:16:35.9166667+00:00

Ok. Hopefully it stops. Thank you for your assistance. I'll message here tomorrow
Jonathan 35 Reputation points

2026-03-04T21:13:28.46+00:00

So the email spamming have stopped for almost 12 hours now. I appreciate the help on that. Sorry for the trouble, but I just have a few more questions. I have 1451 flag on the To-Do list and I am not receiving emails. I even sent one to myself , but it is being sent to Junk.
EmilyS_726 34,015 Reputation points Volunteer Moderator

2026-03-05T00:09:21.51+00:00

No need to apologize. That's what we are here for. :)

I am glad the spamming has stopped.

The to-do is still an issue though if those are not your flags. You want to delete them.

As for not receiving email, you got it though, but ended up in junk, right?

In this case, double check the rules again, make sure they are not being revived.

First, go to https://www.outlook.com and sign in.

Click the gear icon in the top right corner to open Settings.

Under Mail, review the following areas:

Rules

If any rules are listed, delete all of them.

Conditional formatting

If anything is set up there, delete it.

Forwarding and IMAP

If you see any entries or settings you did not create, remove them.

Junk

Review sender block list. Make sure it is also set to standard, not strict. Also make sure check box is not checked to blocked attachment, Pictures, links.
Jonathan 35 Reputation points

2026-03-05T01:54:08.28+00:00

This is what I currently have:

For my Rules: There's nothing

Conditional Formatting: "Rules are not supported with this account"

Forwarding and IMAP:

Enable Forwarding = off

Set default address = my email

POP = On

"don't allow devices and apps to delete messages

Let Device use IMAP = on

Junk:

Standard

Both security options are off

Nothing on Block sender

A couple of Safe mailing lists that I did not create

A couple of Safe senders and domains that I did not create

I am still trying to delete all of the flagged tasks. Is there a way to do all of them at once?

Thank you again
EmilyS_726 34,015 Reputation points Volunteer Moderator

2026-03-05T02:47:57.0633333+00:00

Regarding bulk deleting to-dos, hold down shift key while you select the actual task titles (see where i circled). Don't select the radio button. Then use delete key.

Depends on your color theme in outlook.com, it might give you a very light shaded color when selected, can be a bit hard to see, just want to give you a heads up.

For the Mail settings > Forward & IMAP, I would turn off both POP and IMAP. At least for now.
Jonathan 35 Reputation points

2026-03-05T05:35:43.5533333+00:00

I just deleted everything on the flagged to do list. All that's left from the spam messages are from inbox and the stuff that were "sent" which I am assuming I need to delete? I am still having some issues about receiving emails. I have to search them in order to see them. They don't appear on the most recent one. I have to search for them on the search tab. Again sorry for the trouble, but I appreciate the patience you have to help me
Jonathan 35 Reputation points

2026-03-05T05:36:20.2066667+00:00

I also turned off the POP and IMAP
Jonathan 35 Reputation points

2026-03-05T05:43:21.33+00:00

Ok I just fixed the receiving the email situation. So the only thing that is left that I am assuming is deleting the inbox spam and "sent"?
EmilyS_726 34,015 Reputation points Volunteer Moderator

2026-03-05T13:33:41.3833333+00:00

Did email start to come in after you turned off IMAP and POP?

Yes, you will have to delete the existing spams.
Jonathan 35 Reputation points

2026-03-06T01:41:48.3233333+00:00

Emails stopped for almost 36 hours now. I deleted all of those emails. I sent emails from two other accounts and was receiving them normally. I just have to communicate some companies that were linked to the email since the hacker stole my accounts from there as well. I appreciate your help for everything. I believe my email is fine now
Jonathan 35 Reputation points

2026-03-06T01:44:37.1933333+00:00

"Emails stopped for almost 36 hours now" was meant from spams. I'm not receiving those
EmilyS_726 34,015 Reputation points Volunteer Moderator

2026-03-06T01:48:18.7766667+00:00

I am glad to hear it has been back to normal. Sorry you still have to deal with the rest of the fall out with other services. Good luck to you.

If all is good, feel free to mark the answer for this thread, or let me know if you need anything else from me.
Jonathan 35 Reputation points

2026-03-06T05:19:10.4833333+00:00

I think I am good for now. Thank you again for all of your help. I really appreciate on how quick you were active and your advice was very helpful