Someone with access to your inbox can set messages to forward automatically. A password change may end their login while a forwarding rule continues sending new mail. Check this especially after an unfamiliar sign-in, phishing incident or unexplained missing message.
Review Gmail
- Open Gmail directly. On a computer, choose Settings → See all settings → Forwarding and POP/IMAP. Check the forwarding address and whether forwarding is enabled.
- Open Filters and Blocked Addresses. Inspect filters that forward, delete, skip the inbox or mark messages as read. A malicious filter may affect only bank or password-reset mail.
- Keep a screenshot or note of an unfamiliar setting, then remove or disable it. Save changes and send a harmless test message to confirm it reaches your inbox.
Review Outlook.com
Open Outlook.com yourself and check
Settings → Mail → Forwarding. Also inspect inbox rules under Mail settings. Remove rules or destinations you did not authorize, then test with a non-sensitive message. Work or school accounts may have different menus and organization-managed rules; contact IT before removing a legitimate policy.
Finish the recovery
Review recent sign-ins and connected apps, correct recovery details, change the password and end unfamiliar sessions. Removing forwarding stops future copies; it cannot recall messages already sent. Google's
forwarding instructions and Microsoft's
Outlook.com instructions explain the controls. If you also typed a password into a suspicious page, follow the
broader account checklist.
If mail still goes missing
Check spam, archive and trash as well as blocked senders. An inbox rule can move mail without forwarding it. If you use a desktop mail client or a work account, ask whether another legitimate rule is managed outside the web interface. Repeat the harmless test after each change so you know which rule affected delivery.
