Sending, receiving, and organizing email in Outlook.com
If the account is still listed but mail is not arriving after a hack, the supported recovery path is:
- First, secure the account before changing mail settings.
- Run a full malware scan on the PC: open Windows Security → Virus and threat protection → Scan options → Full scan → Scan now.
- Then change the password, or reset it if sign-in fails.
- Check Outlook.com account settings that are commonly changed during a compromise.
- Review connected accounts.
- Review forwarding and remove any unknown forwarding destination.
- Review automatic replies.
- Check for signs the mailbox was altered by the attacker.
- Suspicious Inbox rules can automatically forward mail to unknown addresses.
- Rules can also move messages to Notes, Junk Email, or RSS Subscriptions.
- Recently added external email forwarding is also a common symptom of compromise.
- If the Outlook.com account is temporarily blocked because of unusual sign-in activity, use Sign-in Helper to unblock it. If unblocking by security code or password change does not work, use the Microsoft account sign-in recovery path.
- If Outlook for Windows is connected to this mailbox and still has old credentials or incorrect server settings, update the account from Control Panel → Mail → Email Accounts → select the account → Change. Verify:
- Incoming mail server
- Outgoing mail server
- User Name and Password
- If two-factor authentication is required, use the generated passcode instead of the regular password.
If the goal is to make mail start arriving again, the most relevant settings to check first are Rules, Forwarding, and whether the account is blocked after the compromise.