PanicStation.org
UK USA
uk Technology & digital loss emails disappearing • inbox deleting messages • mail being auto-deleted • messages moved to trash • messages missing not deleted • unexpected email loss • mailbox empty suddenly • email rules not set • filters i did not create • forwarding i did not add • hacked email account • suspicious sign-in email • gmail missing emails • outlook missing emails • apple mail missing emails • imap sync deleted emails • mail app syncing wrong • recover deleted emails • stop further deletions • email account compromised

What to do if…
your email inbox starts deleting messages and you did not set any rules

Short answer

Stop the deletions first: sign in to your email in a web browser (not an email app) and immediately remove any unknown forwarding/rules/filters. If anything looks suspicious, change your password and turn on 2-step verification.

Do not do these things

  • Don’t keep “trying things” across multiple devices/apps (sync can propagate changes and make mail vanish everywhere).
  • Don’t empty Trash/Deleted Items/Spam/Junk “to tidy up” (you may destroy the easiest recovery path).
  • Don’t trust links in “security alert” emails—open your provider by typing the address yourself or using a saved bookmark.
  • Don’t assume it’s only a glitch if it’s actively deleting—treat it as a potential compromise until you’ve checked.

What to do now

  1. Freeze the situation (reduce syncing).

    • Close mail apps on phones/tablets, or switch them offline for a few minutes.
    • Use one trusted device for the steps below (preferably a computer).

  2. Check where the emails really are (webmail first).

    • On the provider’s website, check: Trash/Deleted Items, Spam/Junk, and Archive/All Mail (missing mail is often moved/archived).
    • Use search (sender domain, subject keywords, date range) and look for mail sitting in unexpected folders.

  3. Remove the “silent movers”: rules, filters, forwarding, and mailbox features.

    • In web settings, review rules/filters and delete/disable anything you didn’t create (especially “delete”, “move”, “mark as read”, “archive”, or “forward” actions).
    • Check forwarding addresses and remove any you don’t recognise.
    • If your provider has “cleanup/sweep/auto-archive” features, temporarily turn them off while you stabilise.

  4. Check account access and lock it down if anything looks off.

    • Review recent sign-ins / security events and signed-in devices; sign out of unknown sessions.
    • Change your password from the provider’s official account page (not via an email link).
    • Turn on 2-step verification and confirm recovery options (phone/email) are ones you control.

  5. Recover what you can while the window is open.

    • Restore messages from Deleted/Trash back to Inbox (or a new “Recovered” folder).
    • If your mail is Outlook.com/Microsoft-hosted, also look for any “recover deleted items” option if messages aren’t in Deleted Items.

  6. Capture quick evidence before you change too much.

    • Take screenshots of any suspicious rules/forwarding addresses, unexpected sign-ins, and any “settings changed” notices. This helps provider support (and you) reconstruct what happened.

  7. If you can’t stop it: use official recovery/support routes.

    • Use your provider’s official account recovery / compromised account flow.
    • If this is a work/school account, contact your IT/helpdesk and ask them to check for mailbox rules, forwarding, and signs of account compromise.

  8. If fraud is involved in the UK, report it using the right route (optional).

    • England/Wales/Northern Ireland: report cyber crime and fraud via the police reporting service at Report Fraud (online or phone).
    • Scotland: contact Police Scotland on 101 (or 999 in an emergency).

What can wait

  • You don’t need to decide today whether to switch email providers or “start over”.
  • You don’t need to reorganise your mailbox or rebuild folders right now.
  • You don’t need to contact everyone immediately—first stop the deletion and secure access.

Important reassurance

This can be caused by something mundane (syncing, archiving, a mail app issue) or something malicious (a rule/forwarding added after a sign-in). Either way, the safest first move is the same: stabilise in webmail, remove unknown rules/forwarding, and secure the account.

Scope note

These are first steps to stabilise and prevent further loss. If you confirm a compromise, you may later want specialist help (provider support, workplace IT, or fraud support) to fully review linked accounts and recovery options.

Important note

This is general information, not legal or professional advice. If you can’t regain control of the account or you suspect active fraud, prioritise official provider recovery routes and the appropriate UK reporting/support channels.

Additional Resources
Support us