I just got an email from my own address “Hello pervert, I’ve sent this message from your Microsoft account”

Dear user

Thank you for sharing your concerns in the Microsoft Community.

Sorry to know that you are being threatened by the email. Finding this email in your inbox can be alarming**, but in general, don't worry, you can safely ignore and delete this email,** and it doesn't necessarily mean that your account has been hacked. And they don't really go out their way to expose your privacy to others, they are just trying to frighten you.

Why do you get an email from yourself?

Making the email appear to come from your own address is a technique known as email spoofing.

Scammers manipulate email headers to make it appear as if the email was sent from your account. They do this without actually having access to your account. This makes the threat more credible, but it doesn't mean that your account has been compromised.

How to find actual sender?

Here are the steps****to checkthe email headerto find out the actual sender of that email to Outlook.com or new Outlook, as some users give feedback that they are not getting spam because they have blocked the actual sender.

1. OpenOutlook.live.com or new Outlook .
2. Select the message, then select**...From this message menu, select View, and then selectView News Source**.
3. You have now opened the email header
4. Search for X-SID-PRA or From, this will show the actual sender address or an encoded string.

5. Add a rule to mark as spam or exclude emails where the header of the email contains the content in X-SID-PRA.

Steps to take if you receive this email

1. Never contact the hacker

I would like to inform you that you have never responded to this email or contacted the sender. This confirms that your email address is active, which can lead to various spam emails or scams. If you don't respond to hackers long enough, they will give up on their own, lose their patience, and try to find their next victim.

2. Check your device as it may be infected with a virus

No matter what antivirus app you install, it will fully scan your device before changing the password. You should also set your antivirus program to automatically receive updates and scan your computer regularly, you may also need to back up your data before running a full scan.

3. Improve your account's security

Meanwhile, you may need to consider that your account or device may have been hacked or compromised. I highly recommend that you follow the instructions on this support site to perform actions such as fully authenticating your device and changing your password: How to recover a hacked or compromised Microsoft account - Microsoft Support

I hope my answer can solve your problem and clear your concerns, if you encounter this kind of situation, stay calm, don't fall into the trap of hackers, I sincerely hope that you and your account can be safe forever.

Best regards

Schale.P-MSFT | Microsoft Community Support Specialist

A bit more info from reading this response on reddit: "You've been hacked" email. Try sending an email to yourself and compare the results in the View tab.

A fake email will show < Authentication-Results: spf=fail (sender IP is 193.8.175.132)
smtp.mailfrom=hotmail.com; dkim=none (message not signed)
header.d=none;dmarc=fail action=none header.from=hotmail.com;
Received-SPF: Fail (protection.outlook.com: domain of hotmail.com does not
designate 193.8.175.132 as permitted sender) receiver=protection.outlook.com;
client-ip=193.8.175.132; helo=me425.com; >

If you send a message to yourself, the Authentication-Results: will be PASS, not spf=fail. I hope this helps.

So what happens if you find the source has your own email address? Does this mean you've been hacked?

Hi, I apologize for reviving an old thread but I've encountered the same issue twice, and have since changed my password (after getting access to the recovery email), but in the process of doing so I've come to find under "my activity" that there have been repeated brute force type attacks throughout MAY 2025, and maybe earlier (the see more stops at 17) to access the account from different countries but very close in time (as in hour:minute).

Is there a way you can block access to the account from a set of IPs? and is there a way I can notify authorities of a targeted attack?

Thanks in advance.

Kind regards.

The problem we all share is that you write that when we look to the From/X-SID-PRA we should find another email address. But ... we all have our email address ... not one that looks like it ...

Can you please update your answer to the specific case when we have our own email address ... we all received the same mail apparently ...

super nice one ... :)