How to fix mail that is involuntarily forwarded to another's address

Disable forwarding in Outlook.com, remove any rule that redirects messages, and then secure the Microsoft account so the unauthorized setting cannot be restored.

Stop the forwarding

Use a computer browser and sign in to Outlook.com:

1. Select Settings (gear icon).
2. Select Mail → Forwarding and IMAP.
3. Select Disable forwarding.
4. Select Save. ^1^

Then check for forwarding hidden in an inbox rule:

1. Go to Settings → Mail → Rules.
2. Examine every rule, including rules with vague or unfamiliar names.
3. For any rule that forwards, redirects, deletes, or moves messages unexpectedly, select More actions (⋯) → Delete rule.
4. Temporarily disable any rule you are uncertain about using its toggle. Rules can forward or redirect incoming messages independently of the main forwarding setting. ^2^

Secure the account

An unknown forwarding address may mean that someone accessed the account. Complete these steps promptly:

1. Scan the device first.
   In Windows Security, open Virus & threat protection → Scan options → Full scan → Scan now. Microsoft recommends scanning before changing the password so malware cannot capture the replacement password. ^3^
2. Change the Microsoft account password.
   Use a new, strong password that is not used for any other account.
3. Review Recent activity.
   Check the last 30 days for unfamiliar successful sign-ins, devices, applications, or security changes. Expand suspicious entries and select This wasn’t me where that option appears. ^4^
4. Sign out everywhere.
   From the Microsoft account security settings, use Sign out everywhere to terminate other active sessions. Then sign back in only on trusted devices. This containment step is recommended when an unknown forwarding address appears. ^5^
5. Review account security information.
   Remove any recovery email address, telephone number, alias, or sign-in method that you do not recognize.
6. Enable two-step verification.
   This requires an additional verification method when someone signs in from an untrusted device, making the account harder to access with only a stolen password. ^6^

Confirm the repair

Send a test message to the account from a different email address and verify that it arrives. Recheck Forwarding and IMAP and Rules afterward.

If forwarding reappears, or if you cannot sign in or change the security settings, use Microsoft’s compromised-account sign-in helper. It can provide recovery steps or offer contact with an agent, depending on the account state. ^3^

References

1. [Outlook.com](https://support.microsoft.com/outlook/mail/turn-automatic-forwarding-on-or-off-in-outlook)
2. [Outlook.com](https://support.microsoft.com/outlook/mail/manage-email-messages-by-using-rules-in-outlook)
3. How to recover a hacked or compromised Microsoft account | Microsoft Support
4. What is the Recent activity page? | Microsoft Support
5. Bogus Forwarding Email - Microsoft Q&A
6. Help protect your Outlook.com email account | Microsoft Support