Emails sent that I did not write
Short answer
Confirm whether the messages really originated from your account before assuming a breach. If they are in Sent and activity is unfamiliar, secure sign-ins and connected apps.
What you need to know
Investigate unexplained messages in Sent.
-
Only the recipient sees the message
A message showing your address in From may be impersonation without access to your mailbox. Ask for relevant message details through a known contact channel; do not open suspicious attachments to investigate.
-
The message appears in your own Sent folder
Inspect authorized apps, delegates and provider activity as well as devices. A sending permission can differ from a browser session. Save a private note of the message and time, then follow account security instructions; do not assume the Sent entry identifies the person who sent it.
Check, act, and the limit
-
Start by checking
Compare Sent, Trash and recent activity; ask one recipient for the full message details if needed.
-
Then act
Change credentials, revoke unknown access and warn contacts through a separate channel.
-
Know the limit
A forged From address can imitate you without access to your mailbox.
Next guide: Unknown app connected to email
Official sources
Provider security pages this guide is based on. Product details change, so check them before acting.
- Google Account Help: secure a compromised account support.google.com
HackEmail is an independent guide. We never ask for your password or verification codes, never read messages and never access anyone’s inbox. Not affiliated with Google, Microsoft, Apple or Yahoo.