PanicStation.org
UK USA
us Technology & digital loss emails disappearing • inbox deleting messages • mail being auto-deleted • messages moved to trash • messages missing not deleted • unexpected email loss • mailbox empty suddenly • email rules not set • filters i did not create • forwarding i did not add • hacked email account • suspicious sign-in email • gmail missing emails • outlook missing emails • apple mail missing emails • imap sync deleted emails • mail app syncing wrong • recover deleted emails • stop further deletions • email account compromised

What to do if…
your email inbox starts deleting messages and you did not set any rules

Short answer

Stop further deletions: sign in to your email using the provider’s website (not an email app), and immediately remove any unknown rules/filters/forwarding. If anything looks suspicious, change your password and turn on multi-factor authentication.

Do not do these things

  • Don’t keep opening/refreshing the mailbox on lots of devices (sync can propagate deletions fast).
  • Don’t empty Trash/Deleted Items/Spam/Junk “to clean up” (you may erase your best recovery route).
  • Don’t click “security” links in emails to fix it—navigate to the provider’s site directly.
  • Don’t assume it’s harmless if it’s actively deleting; treat it as possible account takeover until you check.

What to do now

  1. Reduce syncing immediately.

    • Close mail apps on phone/tablet, or switch them offline temporarily.
    • Use one trusted device for the next steps (preferably a computer).

  2. Verify where the mail is (webmail first).

    • On the provider website, check: Trash/Deleted Items, Spam/Junk, and Archive/All Mail.
    • Use search (sender, subject, date range) to find “missing” messages that may have been moved rather than deleted.

  3. Remove the usual culprit: hidden rules, filters, and forwarding.

    • In web settings, review inbox rules/filters and delete/disable anything you didn’t create (especially anything that deletes, moves, archives, marks as read, or forwards).
    • Check forwarding and remove any destination you don’t recognize.

  4. Check account access and secure it (assume compromise until proven otherwise).

    • Review recent sign-in activity and active sessions/devices; sign out unknown ones.
    • Change your password using the official account security page.
    • Turn on MFA and confirm your recovery email/phone are yours.

  5. Recover messages while you still can.

    • Restore emails from Deleted/Trash back to Inbox (or a new “Recovered” folder).
    • If using Outlook.com/Microsoft webmail, also look for any “recover deleted items” option if messages aren’t in Deleted Items.

  6. Take quick screenshots before changes overwrite clues.

    • Capture any suspicious rules/forwarding addresses, unfamiliar sign-ins, and account change notices. This helps provider support (and you) trace what happened.

  7. If you can’t stop it: use the provider’s official recovery path.

    • Start the “account compromised” / “secure account” process for your provider.
    • If this is a workplace or school account, contact IT/security—organizations often have extra logging and recovery tools.

  8. If this connects to identity theft or scams in the USA (optional, but useful).

    • If you think personal information was stolen, go to IdentityTheft.gov to report it and get a step-by-step recovery plan.
    • To report scams/fraud, you can also file a report at ReportFraud.ftc.gov.
    • For cyber-enabled fraud/crime reporting, you can submit a complaint to the FBI’s IC3.

What can wait

  • You don’t need to decide right now whether to switch email providers.
  • You don’t need to reorganize folders or do a big cleanup.
  • You don’t need to notify everyone immediately—first stop the deletion and secure access.

Important reassurance

This can happen from a sync/app issue or from someone adding a rule/forwarding after gaining access. The same first steps help in both cases: stabilise via webmail, remove rules/forwarding you didn’t create, and lock down the account.

Scope note

These are immediate first steps to prevent further loss and reduce damage. If you confirm compromise, later steps may include checking other accounts that use this email for password resets and reviewing device security.

Important note

This is general information, not legal or professional advice. If you can’t regain control of the account or you suspect ongoing fraud, use official provider recovery/support and consider reporting through appropriate official channels.

Additional Resources
Support us