Sending, receiving, and organizing email in Outlook.com
Hello Jeff Whitt!
If you see a mysterious email address being automatically BCC’d on all your Outlook.com messages, it could be due to an inbox rule, a connected service, or (in rare cases) account compromise. Here’s how to check and remove it:
Check for Inbox/Forwarding Rules:
-Go to Outlook.com on the web.
-Click the gear icon (Settings) > View all Outlook settings > Mail > Rules.
-Look for any rules forwarding, redirecting, or automatically BCC’ing mail to another address. -Delete or disable suspicious rules.
Check Email Forwarding:
-In Outlook settings, go to Mail > Forwarding.
-If forwarding is enabled to the mysterious address, turn it off.
Review Connected Accounts:
-Under Mail > Sync email, see if any connected accounts or send-as addresses have been added that you don’t recognize.
Check Add-ins:
-Go to Mail > Customize Actions > Add-ins and disable or remove any you don’t recognize, as malicious add-ins can sometimes do this.
-Change Your Password & Secure Your Account:
-Change your Outlook.com password immediately.
-Remove any unfamiliar recovery emails or phone numbers (Settings > Security).
-Turn on Two-Step Verification.
Review Recent Activity:
-Visit https://account.microsoft.com/security > Sign-in activity to look for unfamiliar logins.
If after all this you still see BCC’d emails, it’s possible your account was compromised at the server level. In that case, contact Microsoft Support directly for in-depth investigation and remediation.
Best regards
Jerald Felix