PanicStation.org
UK USA
us Technology & digital loss email sending blocked warning • outgoing mail blocked • unusual activity email account • suspected email compromise • email provider security alert • spam sent from my email • my email is rate limited • locked out of sending emails • email account flagged suspicious • mailbox rules changed • emails forwarding unexpectedly • filters i did not create • sign-in from new device • account security check • password may be stolen • third party mail app access • app password revoked • smtp sending blocked • unexpected emails from me • phishing warning email • email account takeover

What to do if…
your email provider warns it will block outgoing mail because of unusual activity

Short answer

Stop sending email and secure the account from the provider’s official site/app (not the alert link): change your password, remove suspicious rules/forwarding, and enable multi-factor authentication.

Do not do these things

  • Don’t keep hammering “send” or repeatedly re-trying logins — it can extend lockouts and make it harder to see what changed.
  • Don’t use links/buttons inside the warning email unless you independently navigated to the provider (fake “unblock” emails are common).
  • Don’t assume it’s “just a glitch” if you use this address for password resets — email compromise can quickly spread to other accounts.
  • Don’t delete or wipe things in a panic; if you think you may need to report or dispute later, a few screenshots of suspicious settings/activity can be helpful.

What to do now

  1. Pause outbound sending and go to the provider the safe way.
    Close your mail app for a moment. Open the provider’s official app, or type their web address into your browser and sign in.
  2. Follow the provider’s verify/unblock flow and change your password.
    Complete any security prompts, then set a new, unique password (not a reused one).
  3. Review account activity and sign out everywhere else.
    In security/account settings, check “recent activity” or “sign-in history.” Remove unknown devices/sessions and choose “sign out of all devices” if available.
  4. Check for mailbox takeover tricks and remove them.
    In mail settings, look for and delete anything you didn’t create:
    • Forwarding
    • Rules/filters that auto-forward, auto-delete, or hide messages
    • Signature changes you didn’t make
    • Delegates/permissions you don’t recognize
  5. Remove third-party access that can send mail on your behalf.
    In connected apps/security:
    • Revoke access for unknown apps/services
    • Disable or remove app passwords if you don’t strictly need them
    • Re-check which desktop/mobile apps are configured to send as you (IMAP/SMTP clients)
  6. Turn on MFA/2-step verification and secure recovery options.
    Add MFA and confirm your recovery email/phone are correct. Save backup codes somewhere safe.
  7. Check your device for malware (avoid random “cleaner” apps).
    Update your device and run a scan using built-in or reputable security tools. If you suspect the device is compromised, do account recovery from a different trusted device.
  8. If anyone got suspicious email “from you,” send one short correction (when sending is restored).
    Tell them not to open links/attachments from recent unexpected messages and that you’re securing your account.
  9. If this is a work or organization email, contact IT/security now.
    Ask them to check organization-wide sign-in logs, outbound sending spikes, and whether other accounts are affected.
  10. If you think your identity or money may be at risk, report it using official channels.
  • If identity theft is possible (accounts opened, tax/benefits issues, persistent fraud): start at IdentityTheft.gov.
  • If money was sent due to email deception (e.g., invoice/wire change, business email compromise) or you’re reporting cyber-enabled fraud: file at the FBI’s IC3 site (ic3.gov).

What can wait

  • Debating whether to switch providers — first, regain control and stop misuse.
  • Changing every account password immediately — prioritize accounts that reset via this email (banking, payroll, primary cloud accounts).
  • Deliverability appeals and technical email authentication changes unless your admin/provider confirms it’s needed.

Important reassurance

“Unusual activity” warnings often trigger from automated defenses (new device, travel, a burst of sending, password reuse leaks). The priority is to prove you’re the legitimate user and remove anything that lets someone keep sending as you.

Scope note

These are immediate first steps to stabilize and prevent further harm. If you discover fraud or identity misuse, you may need additional support from your provider, workplace IT/security, and consumer protection or law-enforcement reporting tools.

Important note

This is general information, not legal or professional advice. If you suspect account compromise, use official provider channels and protect your email first, since it can be used to reset other accounts.

Additional Resources
Support us