hotmail email was hacked

Question

After changing my password and reactivating my account, checking storage, making sure forwarding is off, and checking rules which I couldn't find any, my new emails are still being delivered to my deleted folder and marked as read in Outlook which I use to manage my hotmail. Any suggestion?

Answer 1

@Chris Jarvis said

hotmail email was hacked ... new emails are still being delivered to my deleted folder and marked as read

Check for any connected devices you don't own.
https://support.microsoft.com/en-us/accounts-billing/manage/manage-devices-used-with-your-microsoft-account

Check for any OAuth Access you didn't approve.
https://account.live.com/consent/Manage

Last one is tricky. Hackers can create a "Hidden Rule" that you can't see from the UI. You will need Microsoft Support to get rid of it. See the Answer by "Hornblower409  Feb 28 2026" in
https://learn.microsoft.com/en-us/answers/questions/5786650/email-hacked-new-emails-get-turned-into-spam-black

Answer 2

Since password, storage, forwarding, and visible rules were already checked, focus on the remaining Outlook.com causes that fit this behavior:

1. Check Deleted Items and restore a test message
   • In Outlook.com on a computer, open Deleted Items.
   • Select one of the new messages and choose Restore.
   • If messages continue arriving there, that confirms something is still moving them after delivery.
2. Check the message list filter
   • In Outlook.com, above the message list, select Filter and set it to All.
   • A filter can make inbox mail appear missing even when it is still present.
3. Review rules again in Outlook.com on the web
   • Use a computer, because rules must be viewed and edited there.
   • Go to Rules settings and look for any rule that moves mail to Deleted Items, marks mail as read, or sends mail to another folder.
   • Delete or edit anything unexpected.
4. Treat the account as still compromised and complete the recovery steps
   • Run a full malware scan on the PC before changing the password again: Windows Security → Virus and threat protection → Scan options → Full scan → Scan now.
   • Then change or reset the password again.
   • After that, check Outlook.com account settings that are commonly changed after a compromise: connected accounts, forwarding, and automatic replies.
5. Check recent account activity
   • Review the recent activity page to confirm there are no ongoing unauthorized sign-ins.
   • If suspicious activity still appears, secure the account again before continuing.
6. If the account was temporarily blocked or limited after unusual activity, use the sign-in helper
   • Outlook.com accounts can be temporarily blocked after unusual sign-in activity.
   • Use the Microsoft sign-in helper to complete recovery or unblock steps.
7. If the behavior continues after all checks, contact Outlook.com support
   • Use Outlook.com Help and, if self-help does not solve it, go to Still need help? and select Yes.
   • If sign-in is affected, use the account recovery support path.

A practical end-to-end path for this case is:

• Use Outlook.com on the web on a computer.
• Set Filter = All.
• Check Deleted Items and restore a test message.
• Recheck Rules.
• Run a full malware scan.
• Change the password again.
• Review connected accounts, forwarding, automatic replies, and recent activity.
• If mail is still going to Deleted Items and marked read, use Outlook.com support.

---

• Email is missing from your Outlook.com inbox
• How to recover a hacked or compromised Microsoft account
• Help protect your Outlook.com email account
• Unblock my Outlook.com account
• Email is missing from your Outlook.com inbox