rule forwarding to unauthorized gmail won't allow me to delete

Question

rule forwarding to unauthorized gmail won't allow me to delete

Raebo 25

I've read others with the exact same issue by the exact same hacker - but have not come across the fix which seems clearly to be at the server level.

My account was hacked and has since been recovered. The hacker has created a rule under the name of "idtienphuoc 1" which auto-forwards all of my emails to a third-party email address.

I've tried deleting this, amending it and even trying to create an alternate rule to try and counteract the one above - all to no avail.

I've tried all the steps suggested by responses to others with this same problem. It seems clearly at the server level, possibly requiring an OAuth consent reset. Outlook support is an endless loop with no actual help.

0 comments

Answer accepted by question author

0 additional answers

Your answer

Answer 1

EmilyS726 255.9K Independent Advisor

Hello,

Do you use Outlook Classic or New Outlook app by chance?

If so, please go in the app.

If it is Classic, go to Files > Accounts settings > Account Settings, delete your user profile.

If it is new Outlook, click on the setting icon on the upper right, go to Accounts > Manage accounts, click on your account, click on Manage, and on the next page, remove the user.

===========

Once the above is done, go through the following:

Make sure you do this on a computer, not on smartphone or tablet. Go to https://www.outlook.com and log in, click on the gear icon on the top right to launch the settings.

Then, on the Mail tab, go to Rules. Are there any rules set up here? If yes, delete them all.

Then check the conditional format, again, if it's there, delete it.

Then, check Forwarding and IMAP, If any items are present, delete them as well.

===========

If you can't find anything, go to https://account.live.com > Your info > Sign in Preferences. Make sure to check all the aliases here. If you don't recognize any there, delete it.

Then go to Security > Manage How I sign in, make sure all contact info is yours. Then scroll down on the same page, look under App Password, click on remove existing app passwords as well.

Please make sure you change your password and enable two-step verficiation.

Go to your account online, go to Devices, remove any devices you don't recognize.

Then go to Security, click on Sign out everywhere. This is meant to kill any session that's still connected. Unfortunately, this one will take 24 hours to take effect.

Raebo 25 Reputation points

2026-02-08T22:05:24.3633333+00:00

Thank you for your reply. I was not using an outlook app but rather the web version. I also have a mail app on my phone, but not the outlook app. I have done much of what you suggest with signing out everywhere, changing password. I can see that all my emails as I try and change passwords elsewhere are being forwarded to this gmail in the 'rule'. Elsewhere I've read that this means it is likely server level. I've tried the help support but thought this might have better results - I've seen questions from others with literally the exact same hacker profile and gmail address.
Raebo 25 Reputation points

2026-02-08T22:18:11.0066667+00:00

THANK YOU! I've tried so much and there were a few steps here that I had not. Essentially deleting all of the accounts on my phone and elsewhere made it so when I went back in to my account through the web I was able to actually remove the rule and have it stay removed. I've been working on this for hours and your response was so helpful. Thank you again.
EmilyS726 255.9K Reputation points Independent Advisor

2026-02-08T22:19:47.15+00:00

No. It’s not server level. Rather there’s still somewhere your user is signing in via a client and the rule from the client kept syncing it back to the server. I’ve had some success using this method

if you use a client on the phone, don’t just close it but actually remove the account off the app.

did you also specifically delete the app passwords? That’s also an important step.
EmilyS726 255.9K Reputation points Independent Advisor

2026-02-08T22:21:42.3366667+00:00

Oh great. I see you did exactly that and sorted it. Glad to hear.
Jessica 0 Reputation points

2026-07-24T14:07:21.8433333+00:00

I did all steps but can't seem to get the rule to delete it just keeps coming back. I removed the account from my iphone and the app. Tried to delete from the web version now and nothing.
Hornblower409 11,780 Reputation points

2026-07-25T04:09:57.35+00:00

@Jessica said

I did all steps but can't seem to get the rule to delete

You might be better served by starting a new thread using the "Ask a question" button at the top of this page to create a new Question and include the details for your problem and what steps to fix it you have already done. This provides much higher visibility to your issue than commenting on an old post, which is only seen by people who are already following this question.

(You can put the link for this page in your new Question for reference)