Hello KATE DI VITO
Thank you for reaching out to Microsoft Q&A Forum. From what you shared, your email was used to send unwanted messages to your contacts, and I'm glad to hear that you’ve already regained access by changing the password.
Have you’ve tried the steps mentioned in the Q&A Assist reply above? If yes, did you face any difficulties with those steps?
In the meantime, please try the following steps:
1. Secure your account first
- Go to: https://account.microsoft.com/security > Manage how I sign in
- Remove any unfamiliar sign‑in methods you don’t recognize
- Check the list of devices associated with your account
- Turn on Two-step verification: How to use two-step verification with your Microsoft account - Microsoft Support and Sign out everywhere
- If locked out, go to https://account.live.com/password/reset and follow the prompts.
Review and secure recent sign‑in:
- Check Recent activity: https://account.microsoft.com/activity
- Choose This wasn’t me/ Secure your account for anything you don’t recognize. You can see What happens if there's an unusual sign-in to your account - Microsoft Support
2. Double-check Inbox rules
In Outlook on the web, go to:
- Settings > Mail > Rules/ Sweep: delete any suspicious rules you did not create
- Settings > Mail > Forwarding: make sure nothing is forwarding
You can also see this official Microsoft guide: How to help keep your Microsoft account secure - Microsoft Support
I truly hope this helps you.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.