Microsoft 365 from GoDaddy Help

Check my Microsoft 365 account for suspicious inbox rules

If your Microsoft 365 account is compromised, someone may add rules to move your incoming emails to different folders without your knowledge. This can make it seem like you're missing emails when they're actually being sent to a random folder. If you suspect your account has been compromised, check for and delete any rules that you didn't create.

Outlook on the web

First, check for any malicious rules in Outlook on the web.

  1. Sign in to Outlook on the web. Use your Microsoft 365 email address and password (your GoDaddy username and password won't work here).
  2. In the upper-right corner, select Settings Gear Button Settings.
  3. Select Mail, and then select Rules. You'll see a list of rules added to your account. Delete any that you don't recognize.
    Settings panel showing Mail on the left and Rules selected to the right.

Exchange admin center

Some rules may appear in the Exchange admin center but not in Outlook on the web. Please note you must be an admin to access the Exchange admin center.

  1. Sign in to the Exchange admin center. Use your Microsoft 365 email address and password (your GoDaddy username and password won't work here).
  2. On the leftmost side, under Mail flow, select Rules. You’ll see a list of rules added to your account.
    Mail flow settings expanded with Rules highlighted.
  3. To delete any rules that you don’t recognize, next to a rule, select the checkbox, and then select Delete.

Your account should now be cleared of any rules or settings that you didn’t create.

Related steps

More info