my outlook email is hacked

If contacts received gift-card scam emails, secure the account immediately:

1. Run a full malware scan on the PC before changing anything else. In Windows Security: Virus and threat protection > Scan options > Full scan > Scan now.
2. Change the Microsoft account password after the scan. If sign-in fails, use the password reset flow.
3. Review recent sign-in activity and mark unfamiliar activity. The recent activity page shows successful sign-ins and security challenges.
4. Check Outlook.com settings for changes often made by attackers:
   • Mail > Forwarding: remove any forwarding address not added intentionally.
   • Mail > Rules: delete unfamiliar rules, especially rules that forward, move, or delete messages.
   • Check automatic replies and connected accounts for anything unfamiliar.
5. Review mailbox folders for suspicious behavior:
   • Sent Items and Deleted Items for messages not sent intentionally.
   • Junk Email, Archive, and other folders for missing mail.
6. Verify account security info and remove anything unfamiliar, then add recovery options such as an alternate email address and mobile phone number.
7. Tell contacts not to click links, open attachments, or reply to the scam messages.
8. If the account still appears compromised, use the Microsoft account sign-in helper tool. It can guide to self-help steps or offer the chance to talk to an agent.

For suspicious messages going forward:

• Delete messages with a red safety bar.
• Be cautious with messages showing a yellow safety bar.
• Use safe and blocked senders lists to control delivery.

• How to recover a hacked or compromised Microsoft account
• Help protect your Outlook.com email account
• Help protect your Outlook.com email account
• Phishing and suspicious behavior in Outlook
• Respond to a compromised cloud email account