Windows 11 Outlook - email account was hacked.

[John Clark]

I received calls yesterday that my email account was hacked and I immediately went in and changed the account password. I have not been able to receive email since Friday. What are my options to regain my account?

 

[ChatGPT]

If you were able to change the password, that is a good sign: it usually means you still have control of the Microsoft account. Since you were previously using a personal @live.com Microsoft account, and you already confirmed you could manage security methods there, the account itself is probably recoverable even if Outlook is not receiving mail right now. You also previously had a passkey/security-method setup on that account, including a Google Password Manager passkey that you removed to fix Outlook sign-in. e*account problem or an Outlook** problem
Do this before anything else:

1. Sign in to your mail in a browser at Outlook.com / live.com webmail.
2. Send yourself a test email from another address.
3. Check:
   • Inbox
   • Junk Email
   • Deleted Items

Result A: webmail receives mail​

If mail arrives in the browser but not in Outlook on the PC, your account is not lost. The problem is with Outlook sync/profile, not the account.

Result B: webmail does not receive mail either​

Then the account may have been altered by the attacker with:

• forwarding rules
• blocked senders
• filters
• recovery/security changes

---

Immediate account-security steps​

Because you got calls saying the account was hacked, I would do these right now:

1) Review recent sign-in activity​

1. Go to your Microsoft account Security page.
2. Open Recent activity / Sign-in activity.
3. Look for unknown locations/devices.
4. If Microsoft offers Sign out everywhere, use it.

2) Review security methods​

1. In the same Security area, check:
   • phone numbers
   • alternate email addresses
   • passkeys
   • authenticator methods
2. Remove anything you do not recognize.
3. Keep only methods you control.

This matters because you already had passkey/security methods on this Microsoft account before, so now is the time to make sure no extra method was added.

3) Turn on 2-step verification​

If it. Enable two-step verification
2. Prefer Authenticator app or text code
3. Save any recovery codes somewhere safe

---

Check for mailbox tampering​

Attackers often do not lock you out immediately. They quietly create rules.
In Outlook.com webmail, check these:

1) Rules​

1. Open Settings
2. Search for Rules
3. Delete any rule you did not create, especially rules that:
   • move mail to Deleted
   • forward mail
   • mark mail as read
   • archive mail automatically

2) Forwarding​

1. Go to Mail forwarding
2. Make sure forwarding is OFF
3. Remove any forwarding address you do not recognize

3) Blocked senders / safe senders​

1. Check Blocked senders
2. Remove anything suspicious

4) Deleted / archived folders​

Search for recent missing emails in:

• Deleted Items
• Archive
• Junk Email
• any custom folders

---

If webmail works but Outlook on the PC does not​

Then the account is probably fine, and Outlook is the issue.
Try this in order:

1) Fully sign out and restart Outlook​

1. Close Outlook completely
2. Reboot the PC
3. Open Outlook again

2) Create a new Outlook profile​

1. Close Outlook
2. Open Control Panel
3. Click Mail (Microsoft Outlook)
4. Click Show Profiles
5. Click Add
6. Create a new profile and add the account again

This is often the cleanest fix after password/security changes.

3) Remove and re-add the account​

If it is an IMAP/Exchange-style Outlook setup, removing and re-adding the account may restore sync.

---

If you cannot sign in to webmail at all​

Then use Microsoft account recovery:

1. Go to the Microsoft account recovery form
2. Use your recovery email/phone
3. Fill in as much history as possible
4. If you regain access, immediately:
   • change password again
   • remove unknown security methods
   • turn on 2-step verification

---

My best read based on what you wrote​

Because you said you changed the password but cannot receive mail since Friday, I suspect one of these is true:

• the attacker created a forwarding or delete rule
• the attacker changed a mailbox setting
• Outlook on the PC is no longer syncing after the password change

So the most important first test is this:

Do this now​

1. Sign in to webmail
2. Send a test message from another email address
3. Tell me:
   • does it arrive in webmail?
   • does it arrive in Outlook on the PC?
   • do you see any forwarding/rules?

If you want, I can walk you through the exact click-by-click path in Outlook.com webmail to check Rules, Forwarding, and Recent activity.

 

[John Clark]

Did not receive test email in either webmail or outlook. Could not find settings that you suggested

 

[ChatGPT]

Because your test email did not arrive in either webmail or Outlook, this is not primarily an Outlook-for-Windows problem. It points to an account/mailbox-side issue on your Microsoft personal account instead. Since this appears to be the same personal @live.com account you recently repaired after the passkey problem, I would focus on the Outlook.com mailbox and Microsoft account security pages first, not the PC client. com](https://support.microsoft.com/en-us...6c8f-4144-b255-14fc07007dad?utm_source=openai))

Most likely causes​

The most common reasons a personal Outlook.com / Live / Hotmail account suddenly stops receiving mail are:

1. A forwarding setting was turned on.
2. A rule is moving or deleting incoming mail.
3. Blocked/Junk settings are catching mail.
4. Mailbox or Microsoft storage is over quota.
5. Microsoft has flagged the account for suspicious activity or spam and partially restricted it.

Do these exact checks in Outlook.com​

If you “could not find the settings,” use the Settings search box in Outlook.com. Microsoft’s current paths are under Settings > Mail for Rules, Forwarding, and Junk Email, and Settings > Storage or search for Storage to see quota usage.

1) Check forwarding​

1. Sign in to Outlook.com in a browser.
2. Click the gear icon at top right.
3. In the settings search box, type forwarding.
4. Open Mail > Forwarding.
5. Make sure Enable forwarding is OFF.
6. If any forwarding address is listed and you do not recognize it, remove it and save.

2) Check rules​

1. In Outlook.com, click the gear icon.
2. Search for rules.
3. Open Mail > Rules.
4. Disable or delete any rule you did not create, especially rules that:
   • move mail to another folder
   • delete mail
   • forward or redirect mail
   • mark mail as read automatically

3) Check Junk / Blocked senders​

1. Click the gear icon.
2. Search for junk email.
3. Open Mail > Junk email.
4. Review:
   • Blocked senders and domains
   • Safe senders and domains
5. Remove anything suspicious from Blocked senders.

4) Check storage/quota​

If Outlook.com storage is full, Microsoft says you cannot send or receive email, and messages sent to you may be returned to the sender until you free space and the sender resends them. To check it, open Outlook.com Settings and search for Storage.
Do this:

1. In Outlook.com, click Settings.
2. Search Storage.
3. If you are near or over quota, delete mail from:
   • Deleted Items
   • Junk Email
   • large mail folders
4. Then empty Deleted Items.

Check whether Microsoft flagged the account​

Since you changed the password after getting warned yesterday, and you stopped receiving mail on Friday, April 3, 2026, Microsoft may have detected suspicious activity. On the Microsoft account Recent activity page, look for entries such as “Sign-in blocked (Account compromised)”, password changes, or unfamiliar sign-ins. If you see suspicious activity, Microsoft recommends securing the account and reviewing the entries.

Do this​

1. Go to your Microsoft account Security page.
2. Open Recent activity.
3. Review all sign-ins and changes.
4. If you see anything suspicious, mark it accordingly and secure the account.

Sign out everywhere​

If you think someone got into the account, use Microsoft’s Sign out everywhere option. Microsoft says this signs you out of browsers, apps, and other sessions within up to 24 hours.

If the account is locked or blocked​

If Microsoft shows the account as locked or compromised, use the Microsoft sign-in helper / unlock flow. Microsoft also states that support agents cannot directly change account details or send password reset links outside the official recovery process.

What I think is most likely​

Since mail is missing in both webmail and Outlook, the strongest suspects are:

1. Forwarding turned on
2. A rule moving/deleting mail
3. Storage quota full
4. Microsoft restriction after suspicious activity

Reply back with just these 3 results​

1. In Mail > Forwarding, was forwarding ON or OFF?
2. In Mail > Rules, were there any rules listed?
3. In Storage, are you over quota or close to full?

If you want, I can walk you through those three screens one at a time in the shortest possible way.

 

[John Clark]

Forwarding was off
There was a rule, but may have been left over from a long time ago.
Plenty of storage left
I checked recent activity and the first listing is my changing the password, next activity was signing in.

I will check next to see if account is blocked or compromised.
I am seeing your email in the web mail and outlook.

 

[ChatGPT]

That narrows it down a lot.
Because:

• Forwarding is off
• storage is not full
• Recent activity only shows your own password change/sign-in

…the next most likely causes are:

1. that old rule is still affecting incoming mail,
2. the account is temporarily blocked/restricted by Microsoft because of suspicious activity,
3. or mail is being diverted by Junk/blocked sender settings rather than Inbox delivery. Microsoft’s current paths for these are under Settings > Mail > Rules, Mail > Junk email, and Microsoft also has a separate Unblock my Outlook.com account flow for unusual activity. (support.microsoft.com)

Do this next, in order​

1) Disable or delete that old rule​

Even if it looks old, turn it off completely for now, save, then send another test message. Rules can still move, redirect, or delete incoming mail.

2) Check Junk / Blocked senders​

In Outlook.com:

1. Click the gear icon.
2. Search for junk email.
3. Open Mail > Junk email.
4. Review Blocked senders and domains.
5. Remove anything you do not recognize.
6. Also check the Junk Email folder for the test message.

Microsoft notes that blocked senders are routed to Junk Email, not your Inbox. (support.microsoft.com)

3) Check whether Outlook.com says the account is blocked​

Open Microsoft’s Outlook.com unblock page and see whether it reports unusual activity or a temporary block. Microsoft states an Outlook.com account can be temporarily blocked after unusual sign-in activity, and if the mailbox or OneDrive storage is full you also can’t send or receive mail.

4) Sign out everywhere​

If someone may have had access, use Sign out everywhere on the Microsoft account security page. Microsoft says this signs you out of browsers and apps, though it can take up to 24 hours. (support.microsoft.com)

5) Send another test and ask the sender what happened​

Have someone send you a message again and ask them:

• Did they get a bounce / nondelivery report?
• If yes, what is the exact error text?

That detail matters. If Microsoft is rejecting mail because of a block/restriction, the sender often gets the clue first.

My best guess right now​

Since webmail itself is not getting the message, this is not an Outlook desktop problem. It is almost certainly either:

• the old rule,
• a Junk/blocked sender setting,
• or a Microsoft-side restriction/block on the mailbox.

Please report back with just these 3 items​

1. Did you disable/delete the old rule?
2. In Junk email / Blocked senders, did you find anything suspicious?
3. When someone sends a new test email, do they get a bounce message?

If you want, I can walk you through the blocked/compromised account check one click at a time.

 

[John Clark]

where is "sign out everywhere" located

 

[ChatGPT]

For your personal Microsoft / live.com account, Sign out everywhere is on the Advanced security options page. Microsoft’s instructions are:

1. Sign in to your Microsoft account Advanced security options
2. Scroll down to Sign out everywhere
3. Click Sign out. Microsoft notes it can take up to 24 hours to sign you out of browsers, apps, and other sessions.

Fastest way to get there​

Since you already reached the correct personal-account security area earlier for passkeys on your @live.com account, open the same personal security page again. That earlier thread confirmed your account is a personal @live.com Microsoft account, not a work/school account.
Use this path:
ft account Security
2. Open Advanced security options
3. Scroll down until you find Sign out everywhere
4. Click it

Important​

Make sure you stay on the personal Microsoft account pages, not the work/school portal. Earlier, your issue was caused by being redirected to the wrong Microsoft sign-in system, and the fix was to use the personal-account security pages instead.
If you want, I can give you the exah starting from Outlook.com webmail so you don’t end up on the wrong page again.

 

[John Clark]

Test did not show up in junk email
Rule was deleted
Nothing suspicious in blocked senders but deleted all.
I am getting test email now in both webmail and outlook but not getting email between yesterday and today.

 

[ChatGPT]

That is actually good news: if a new test message now arrives in both webmail and Outlook, your account is working again and Outlook is syncing again. Earlier, when mail was missing in both webmail and Outlook, that pointed to a mailbox/account-side issue, not just an Outlook client issue. We also identified that mailbox rules were one of the main suspects because rules can move, delete, forward, or mark mail as read automatically. yrding was off

• storage was fine
• you had a rule and then deleted it
• and new test mail now works

…the old rule was very likely the cause, or at least part of it.

About the missing emails from yesterdaly, those messages may fall into one of these buckets:​

1. Moved/deleted by the old rule
2. Rejected or bounced while the account was misbehaving
3. Never delivered, so they will not appear later automatically

If a message was rejected upstream, it usually has to be resent by the sender. It normally does not magically appear later.

Do this now​

1) Search all folders for the missing mail​

In Outlook.com webmail, check:

1. Deleted Items
2. Junk Email
3. Archive
4. Any custom folders
5. Use the search box with:
   • sender address
   • subject words
   • date range

This matches the earlier mailbox-tampering checklist: check Deleted, Archive, Junk, and custom folders when rules may have moved mail.

2) Ask one sender from that missing period to resend​

Pick one person who emailed you between yesterday and today and ask:

1. Did they get a bounce / nondelivery report?
2. If yes, what was the exact wording?
3. Please resend the message now

If the resent message arrives, that strongly suggests the originals were either deleted/moved by the old rule or rejected during the problem window.

3) Check “Recover deleted items” if available​

In Outlook.com or Outlook, look for Recover deleted items under Deleted Items.
If the rule deleted messages, some may still be recoverable there.

4) Keep the account secured​

Since this started after a suspected compromise, I would still do this:

1. Use Sign out everywhere on the Microsoft account security page
2. Verify your security methods
3. Turn on 2-step verification

Earlier we noted that Microsoft’s Sign out everywhere is on Advanced security options and can take up to 24 hours to sign out other sessions.

Bottom line​

Your account is not lost. The fact that new mail now reaches both webmail and Outlook means the account is back to receiving normally. The missing messages from the bad window are the only remaining issue, and those are most likely:

• sitting in another folder,
• deleted by that old rule,
• or need to be resent.

If you want, I can give you the shortest exact click-by-click path in Outlook.com to check:

1. Deleted / Recover deleted items
2. Archive
3. all folders search

one step at a time.

 

[John Clark]

I am missing a bunch of emails out of my inbox now (200+)

There are just a few emails in deleted, archive.

 

[ChatGPT]

That’s still consistent with the old rule having moved or deleted mail, and the good news is that Outlook.com often lets you recover deleted mail for up to 30 days from the recoverable-items area. Microsoft also notes that if mail is “missing from Inbox,” you should check Filter, Rules, and recovery options.

Do this now in Outlook.com​

1) Check the Inbox filter​

1. Open Inbox in Outlook.com.
2. Look for Filter above the message list.
3. Set it to All.

If a filter is active, messages can appear to vanish from Inbox even though they are still there.

2) Recover deleted mail​

1. Open Deleted Items.
2. At the top of the message list, click Recover items deleted from this folder.
3. Review everything there.
4. Restore the messages you want back to Inbox.

Microsoft says items removed from Deleted Items in Outlook.com are still recoverable for 30 days.

3) Search the whole mailbox, not just Inbox​

1. Use the Search box.
2. Search by:
   • sender address
   • subject words
   • a date range
3. Make sure the search scope is All folders / all mailboxes if Outlook offers that choice.

Missing messages are often still in another folder after a rule problem. Outlook search can widen the scope beyond the current folder.

4) Show the full folder list​

1. Expand the Folder pane fully.
2. Look for unusual folders or old folders the deleted rule may have used.
3. Check any custom folders.

If the folder pane is minimized, you may not be seeing where mail was moved.

What this likely means​

Because new test mail is now arriving in both webmail and Outlook, the account is receiving again. That points to the old rule as the most likely cause of the earlier disruption.
If the 200+ older messages are not in Deleted Items, Archive, Recover Deleted Items, or another folder, they may have been permanently removed or never delivered during the problem window. In that case, the practical fix is to ask key senders to resend important messages. Microsoft’s recovery guidance also notes that once mail is beyond the recovery window or permanently deleted, it may not be recoverable.

One more security step​

Since this started as a suspected compromise, I would still do this:

1. Use Sign out everywhere
2. Keep the new password
3. Review security methods
4. Turn on 2-step verification

Microsoft says Sign out everywhere can take up to 24 hours to complete across browsers and apps.

Fastest next move​

Please check Recover items deleted from this folder first. That is the most likely place for a large batch of “missing Inbox” mail after a bad rule.
If you want, I can give you the exact 3-click path to that screen in Outlook.com and stay with just one step at a time.

 

[John Clark]

What is the exact 3-click path

 

[ChatGPT]

Yes — for Outlook.com webmail, the exact 3-click path is:

1. Click Deleted Items
2. Click Recover items deleted from this folder
3. Select the messages you want, then click Restore

That is the fastest place to check since you said about 200+ emails are missing from Inbox and only a few are in Deleted and Archive. e step 2
Try this:

1. Open Deleted Items
2. Look at the top of the message list
3. If needed, maximize the browser window and scroll to the top

Sometimes the Recover items deleted from this folder link is easy to miss.

Important​

• Restore a few test messages first.
• Confirm they return to Inbox before restoring a large batch.

If you want, I can give you the next exact 3-click path for checking All folders search right after this.

 

[John Clark]

go for it

 

[ChatGPT]

Got it. Since new mail is working again but you still have 200+ missing Inbox messages, the next best check is an all-folders search. th in Outlook.com webmail

1. Click the Search box at the top
2. Type the sender, subject word, or date keyword
3. Click All folders or All mailboxes if Outlook offers that scope

Outlook search can be widened beyond the current folder, which is what you want here.

Best first searches​

Try these one at a time:

• a sender you know is missing
• a subject word from one missing email
• received:yesterday
• received:today

If you find messages​

• note which folder they are in
• then move them back to Inbox

If you do not find them​

Then do the other recovery path:

1. Click Deleted Items
2. Click Recover items deleted from this folder
3. Click Restore

Outlook.com can recover deleted items from that area for a limited time.
If you want, next I can give you the exact 3-click path to check whether an Inbox filter is hiding messages.

 

[John Clark]

Thanks for the help!

 

[ChatGPT]

You’re welcome, John.
The key takeaway is:

• your account is receiving mail again
• the old rule was very likely the cause
• the remaining job is just to recover or locate the missing messages

Best next checks​

1. Deleted Items → Recover items deleted from this folder
2. Search → All folders
3. Check Inbox filter = All

If you get stuck on any one screen, just reply with:

• which step
• what you see

and I’ll give you the next exact click path.