Fix Emails Moving to Deleted Items After Outlook Account Hack
Question details
The user needs to recover and secure their Microsoft or Outlook account because incoming emails are being automatically moved to the Deleted Items folder, alongside other suspicious activity.
- Product
- Microsoft Outlook
- Device & OS
- not provided
- Scenario
- Securing an email account after a potential hack and fixing the automatic deletion of incoming messages.
- Observed behavior
- Incoming messages are automatically routed to the Deleted Items folder, and suspicious emails may be sent from the account without the user's consent.
Use a secure, trusted device to perform these recovery steps, and temporarily disconnect any email apps on your mobile devices until your account is fully secured.
Secure Account and Remove Malicious Inbox Rules
Hackers often set up hidden inbox rules to delete incoming emails and hide their tracks. Removing these rules and resetting your credentials is the priority.
When an account is compromised, attackers frequently create forwarding or deletion rules so you don't see security alerts or replies to their spam.
Change your Microsoft account password immediately from a trusted device and enable Two-Factor Authentication (2FA).
Log into your Microsoft account security dashboard online and force a sign-out on all unfamiliar devices and sessions.
Open the Outlook desktop app, click the 'File' tab, and select 'Manage Rules & Alerts'.
Review the list of rules carefully. Select any unrecognized rules—especially those moving emails to the 'Deleted Items' folder—and click 'Delete'.
Disable the Ignore Conversation Feature
Sometimes, emails are moved to Deleted Items simply because the Ignore Conversation feature was accidentally triggered.
Start Outlook in Safe Mode and Update Office
Running Outlook in Safe Mode can help determine if a malicious or broken add-in is causing erratic inbox behavior.
Switch to WPS Office for Secure Document Management
While securing your Microsoft email account is crucial, you can also protect your documents offline and online with a lightweight, secure office suite. WPS Office is a powerful, free alternative to Microsoft Office that offers full compatibility with Word, Excel, and PowerPoint files without the heavy account dependencies.
- 1. Download the Installer: Visit the official WPS Office website and download the free installation file.
- 2. Install WPS Office: Run the installer and follow the on-screen prompts to set up the software.
- 3. Open Your Files: Launch WPS Office to securely open and edit your existing Microsoft Office documents.
Frequently Asked Questions
Why do my emails go straight to the Deleted Items folder?
This typically happens if a hacker creates a malicious inbox rule to hide their activity, or if you accidentally enabled the 'Ignore Conversation' feature in Outlook for a specific email thread.
How do I check my recent sign-in activity for my Microsoft account?
Log into your Microsoft account online, navigate to the 'Security' tab, and click on 'Sign-in activity'. This will show you the times, locations, and IP addresses of all recent logins.
Should I reinstall my Outlook mobile app after a hack?
Do not reinstall or reconnect your mobile email apps until you have fully secured your account, changed your password, and removed all unauthorized forwarding rules or connected apps.
Can hackers forward my emails without me knowing?
Yes, hackers often set up auto-forwarding rules to intercept your messages. Check 'File' > 'Manage Rules & Alerts' in the Outlook desktop app to review and delete any forwarding rules you didn't create.
