Organización y acceso a la información de contacto en Outlook.com
I noticed your post is in the Spanish (es-ES) community, but since your message is written in English, I'll go ahead and reply in English as well. If you'd prefer a response in Spanish, just let me know and I'll be happy to translate it for you.
Hi M B,
Thank you for reaching out, and I understand how concerning it must be to see strange or phishing-looking addresses appearing in your Cc/Bcc fields.
What you're seeing in the To/Cc/Bcc fields are AutoComplete (Suggested People) entries, not actual contacts in your address book. Outlook on the web keeps its own separate AutoComplete cache (independent from desktop Outlook), and it automatically stores any address you've ever typed, replied to, or that appeared on a thread you interacted wit. That's why they reappear even after clearing browser cache.
So this isn't a vulnerability or a compromise of your account, and the good news is you can clean it out.
How to remove the unwanted entries
- In Outlook on the web, click New mail.
- Start typing the first few characters of the suspicious address in To, Cc, or Bcc.
- When it appears in the dropdown, hover over it and click the X to remove it.
Please allow up to 24 hours for the change to fully sync.
To clear the entire list at once: Go to Settings (⚙️) > General > Suggested replies / Privacy and data and toggle Suggested people off. You can re-enable it afterward to start fresh.
Tip: Whenever a phishing message arrives, please use Report > Phishing so Microsoft can take action against the sender, and as always, keeping 2-step verification enabled at https://account.microsoft.com/security to keep your account secured.
If you need anything else or if the issue persists after these steps, please don't hesitate to reach out, I'm always happy to help. And if this answer was helpful, kindly mark it as accepted so others can benefit too.
Warm regards,