The described behavior is consistent with malicious inbox rules or other account compromise artifacts rather than a repairable “mailbox corruption.” A mailbox repair/reset cannot be run from here, but the issue can be mitigated by fully cleaning up the account configuration and then engaging Outlook.com support if it persists.
Follow these steps end-to-end:
- Verify and remove malicious rules/forwarding again
- Sign in to Outlook.com in a browser.
- Go to Settings → Mail → Rules and delete any rule that:
- Moves, copies, or creates messages in Drafts, or
- Has suspicious names or conditions (similar to the “Demon” rule pattern described in a related case).
- Go to Settings → Mail → Forwarding and remove any forwarding address that is not recognized.
- Remove hidden or persistent access paths
- Go to the Microsoft account security page and use Sign out everywhere to invalidate all active sessions (this has been effective in other Outlook.com issues).
- In the same security area, review app permissions and revoke any apps that are not recognized or no longer needed.
- Clear out existing bad items
- In Outlook.com, empty Drafts, Deleted Items, and any folder where these drafts are appearing.
- Wait a few minutes and refresh the browser to see if new drafts are still being created.
- Monitor for re-creation of drafts
- If drafts immediately reappear, repeat the rules/forwarding/app-permission checks; in prior cases, a single overlooked rule or app was responsible for continuous draft creation.
- If the behavior continues, contact Outlook.com support
- Use the in-product help channel so Outlook.com support can check the mailbox on the service side:
- In Outlook.com, select Help on the menu bar and enter a short description (for example, “Infinite duplicate drafts in Outlook.com”).
- If self-help does not resolve it, scroll down to Still need help? and select Yes to open a support request.
- If sign-in becomes a problem, use the dedicated sign-in help link from the documentation.
- Use the in-product help channel so Outlook.com support can check the mailbox on the service side:
- Keep the account secured
- Ensure multi-factor authentication (authenticator app or SMS) is enabled and keep the new password unique to this account.
- Periodically review sign-in activity and app permissions for anything unexpected.
If Outlook.com support confirms no remaining rules/forwarders/apps and the drafts still regenerate, they can investigate and remediate any server-side mailbox issues on the backend.
References:
- Fixes or workarounds for recent issues on Outlook.com
- Emails deleted from Outlook.com are reverting back to the Inbox
- Hacker set up continuous draft ransomware email - Microsoft Q&A
- Stopped receiving emails on my account. - Microsoft Q&A
- Outlook.com address returning TooManyObjectsOpenedError - Microsoft Q&A