Since Junk mail is still updating but Inbox is not, the most likely causes are a malicious rule, forwarding, filtering, or account changes left behind after the compromise.
- Secure the account first.
- Run a full malware scan on the PC before changing anything else: Windows Security > Virus and threat protection > Scan options > Full scan > Scan now.
- Then change the Microsoft account password again.
- If not already enabled, turn on two-step verification.
- Check recent sign-in activity.
- Review the Recent activity page for unknown sign-ins, devices, or app activity from the last 30 days.
- If suspicious activity appears, continue the account recovery flow.
- Check Outlook.com folders and tabs carefully.
- Open Junk Email and mark any valid message as Not junk.
- Open Archive and move any missing message back to Inbox.
- If Focused Inbox is enabled, check the Other tab and move messages back to Focused inbox if needed.
- In the message list, restore chronological order with Filter > Sort > Date.
- Check Outlook.com settings that commonly get changed after a hack.
- Review Mail rules and remove anything suspicious.
- Check whether email forwarding is enabled and turn it off if it should not be there.
- Check connected accounts, automatic replies, and sign-in preferences/aliases, and remove anything unrecognized.
- Check filtering and delivery settings.
- Check Junk Email settings and the Junk Email folder.
- Make sure there are no filters preventing all messages from being shown.
- If using a third-party mail app, it must support modern authentication and IMAP. If IMAP or POP are enabled, disable them and test again.
- If only one sender is affected, ask that sender to review Sender Support in Outlook.com.
- If the account still behaves as compromised, use the Microsoft account hacked-account recovery tool. It can provide self-help steps or offer the chance to talk to an agent.
If Inbox still does not receive mail after removing rules/forwarding and securing the account, use Outlook.com support from the Help menu or the hacked-account recovery tool for assisted recovery.