A draft keeps appearing in my inbox. What can i do to fix it?

Question

Ive logged out of all devices, changed my password and even got rid of all rules and forwarding. But it keeps appearing. I don't really know what to do now. any help would be appreciated.

Answer 1

Hello, thank you for reaching out to Microsoft Q&A.

There have been many reports of scam and spoof emails in Outlook, similar to what you’re seeing. This can happen if you signed in to a fake or malicious website, and someone got access to your account details.

Just leave the draft alone and follow the security steps (password reset, sign out everywhere, and turn on two-step verification) to protect your account first.

1. Reset your Microsoft account password.

Open an InPrivate/Incognito browser window and use the following link to reset your password: https://account.live.com/ResetPassword.aspx

2. Sign out of your account from all sessions.

Once the password reset is successful, sign in with your account here: https://account.live.com/proofs/Manage

Scroll down until you find Sign out everywhere.

• Select Sign out everywhere.

3. Enable two-step verification.

On the Security settings page, under Additional security, turn on Two-step verification. Make sure you have at least three security verification methods active.

After you have enabled these security protections, sign out of your account in the Outlook app and sign back in with your new password.

The draft message in your inbox should disappear within 24–48 hours.

In addition to this, open Microsoft To Do and delete all the drafts in the 'My Day' section or in the 'Task lists' where you see the drafts. To open To Do

In the https://outlook.live.com/ online, select ToDo in the left pane to launch it.

Click on a draft task and delete it.

Answer 2

If a draft keeps appearing in your inbox after you've logged out of all devices, changed your password, and removed all rules and forwarding, it may be due to a persistent rule or a malicious setup by a hacker. Here are some steps you can take to address the issue:

1. Check for Suspicious Rules: Sign in to Outlook on the web and navigate to Settings → Mail → Rules. Look for any rules that you did not create and delete them.
2. Review Forwarding Settings: In the same settings area, check for any unknown forwarding addresses that might be set up to send your drafts elsewhere.
3. Sign Out Everywhere: Ensure that you are signed out of all active sessions. You can do this by going to Microsoft Account Security and selecting the option to sign out everywhere.
4. Revoke App Permissions: Go to Manage App Permissions and revoke access to any apps that you do not recognize, as hackers often use these to maintain access to your account.
5. Run Antivirus Scans: Perform a full antivirus scan on all devices you have used to access your account to ensure there are no malware or unauthorized access points.
6. Monitor Account Activity: Keep an eye on your account for any suspicious activity and consider changing your password again if you suspect unauthorized access.

If the problem persists, you may need to contact Microsoft Support for further assistance.

---

References:

• Hacker set up continuous draft ransomware email - Microsoft Q&A
• Unable to change password in my Outlook - Microsoft Q&A