draft threatening message being repeatidly sent to my inbox

ivor rawlins 0 Reputation points
2026-01-31T14:12:30.65+00:00

Hello All, my email has been compromised. The irritation is a draft email flooding my inbox threatening to share all of my files on the dark web and other sources if I do not pay up. I cannot use my email as these messages repeat every coupleof minutes. I have, cleared known devices, reset password, enabled 2FA, run scan and checked all the suggested areas for malicious activity from the forum and online.....nothing has helped.

Please could you advise on the next steps as all I can think of is deleting the account and setting up totally from scratch which will be catyastrophic considering the years and numerouse accounts set up under my current email address.

Thanks in advance

Ivor

Microsoft 365 and Office | Other
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Gunasekar N 56,725 Reputation points Independent Advisor
    2026-01-31T14:54:54.1466667+00:00

    Hello, thank you for reaching out to Microsoft Q&A.

    There have been many reports of scam and spoof emails in Outlook, similar to what you’re seeing. This can happen if you signed in to a fake or malicious website, and someone got access to your account details, not the entire account itself.

    If you see a suspicious draft email like this:

    • Do not click any links in it.
    • Do not reply or type in any personal information.

    Just leave the draft alone and follow the security steps (password reset, sign out everywhere, and turn on two-step verification) to protect your account.

    1. Reset your Microsoft account password.

    Open an InPrivate/Incognito browser window and use the following link to reset your password: https://account.live.com/ResetPassword.aspx

    2. Sign out of your account from all sessions.

    Once the password reset is successful, sign in with your account here: https://account.live.com/proofs/Manage

    Scroll down until you find Sign out everywhere. Select Sign out everywhere.

    3. Enable two-step verification.

    On the Security settings page, under Additional security, turn on Two-step verification. Make sure you have at least three security verification methods active.

    After you have enabled these security protections, sign out of your account in the Outlook app and sign back in with your new password.

    Note: The draft message in your inbox should disappear within 24–48 hours.


    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.