Sending, receiving, and organizing email in Outlook.com
If the Outlook.com account is being used for impersonation, phishing, or other suspicious activity, report it through Microsoft’s scam or abuse reporting channels.
If a Microsoft account may also have been compromised, use the Microsoft account recovery flow:
- Start the sign-in helper: Start
- Before changing the password, run a full antivirus scan on the PC:
- Open Windows Security
- Go to Virus and threat protection
- Select Scan options > Full scan > Scan now
- Change the password if sign-in still works, or reset it if sign-in fails.
- Review account settings that attackers often change, especially connected accounts, forwarding, and automatic replies.
- Check recent sign-in activity on the recent activity page to see when and where the account was accessed.
If the issue is specifically a fake Outlook.com address pretending to be someone else, Microsoft Q&A guidance in the provided material points to reporting it here:
- How to recover a hacked or compromised Microsoft account
- Help protect your Outlook.com email account
- Phishing and suspicious behavior in Outlook
- Phishing and suspicious behavior in Outlook
- Impersonation and fraudulent Outlook/Hotmail account - Microsoft Q&A
- How to report an outlook.com email address being used for fraud - Microsoft Q&A