Dear Pierre Laroche1,
Thank you for posting in the Microsoft community.
I understand that you accidentally clicked on a link in what seemed to be a phishing email. I'm glad that you discovered this problem in time and changed your password.
Usually, regarding account issues, the official sender's address of Microsoft is @accountprotection.microsoft.com, so it was clearly a phishing email.
Can I trust email from the Microsoft account team? - Microsoft Support
Besides changing the password, I suggest that you continue to complete the following operations to protect your account to the greatest extent.
- Log in to your Microsoft account (Sign in to your account), enter "Security", click on "Manage sign-in options", check whether the current backup information is all available, and update it in a timely manner. I suggest that you keep at least two pieces of backup security information.
- In "Security", click on "Manage sign-in options", scroll down to find "Sign out from all locations" and click on it. Then generate a recovery code at the bottom and save it.
- On the account webpage, click on "Devices", and then remove all the unknown devices.
- Download a security authenticator on your mobile phone and add your own account. Then, in the aforementioned "Manage sign-in options", turn on two-factor authentication and use the app password to log in.
- Log in to the web version of Outlook (outlook.live.com), click on the gear icon for settings in the upper right corner, then go to "Mail" - "Rules", check whether there are any unknown rules in the rule settings and remove them.
I hope the information above will be helpful to you. We appreciate you spend your time working on this issue. Feel free to post back if you need further assistance. I wish you all the best.
Best Regards,
Ulrica.W - MSFT | Microsoft Community Support Specialist