ThisCalculator

Everyday

Find & Remove Email Forwarding Rules You Didn’t Create

Updated · Standard formula, shown below

Find & Remove Email Forwarding Rules You Didn't Create

If someone gains access to your email account, one of the first things they often do is set up a forwarding rule to secretly send copies of your incoming messages to their own address. This guide shows you how to check for and delete any forwarding rules you didn’t create in the most common email services (Gmail, Outlook, Yahoo, and iCloud). You’ll need to log in to your account on a computer or mobile browser—no special tools are required.

What You’ll Need

  • Access to your email account (log in normally).
  • A web browser or the email app on your phone.
  • Your account password (you may need to re-authenticate for security).

Step-by-Step

Gmail (Web)

  1. Open Gmail in your browser and log in.
  2. Click the gear icon (Settings) in the top-right, then select See all settings.
  3. Click the Forwarding and POP/IMAP tab.
  4. Look for the Forwarding section. If forwarding is enabled, you’ll see an address listed. If you didn’t set it up, click Disable forwarding and save changes.
  5. Also check the Filters and Blocked Addresses tab. Look for any filter that says “Forward to” in its action. Select any suspicious filter and click Delete, then confirm.

Outlook.com (Web)

  1. Go to Outlook.com and sign in.
  2. Click the gear icon (Settings) at the top, then select View all Outlook settings at the bottom.
  3. In the left menu, go to Mail → Forwarding.
  4. If the toggle is on and shows an address you don’t recognize, turn it off and click Save.
  5. Next, go to Mail → Rules. Review the list of rules. Any rule with a “forward” action that you didn’t create should be deleted by selecting it and clicking the trash icon.

Yahoo Mail (Web)

  1. Sign in to Yahoo Mail.
  2. Click the gear icon (Settings) and choose More Settings.
  3. Go to Mailboxes → Forwarding.
  4. If an address is listed and you didn’t add it, click Remove (or turn off the toggle).
  5. Then go to Filters in the same settings menu. Look for any filter that forwards email. Delete any you don’t recognize by clicking the trash icon next to it.

iCloud Mail (Web)

  1. Go to icloud.com and sign in.
  2. Open the Mail app.
  3. Click the gear icon (Settings) in the Mail window, then choose Preferences.
  4. Click the Rules tab. Review each rule. If any rule forwards mail to an address you don’t know, select it and click Delete.
  5. There is no separate forwarding setting in iCloud Mail; forwarding is done via rules, so this list is the complete check.

Mobile Apps (General)

  1. Open your email app (Gmail, Outlook, etc.) on your phone.
  2. Go to the app’s settings (usually via your profile icon or the hamburger menu).
  3. Look for Forwarding or Rules options. The exact location varies by app, but you can usually find them under the account settings.
  4. If you find a forwarding address you didn’t set, remove it or turn off the toggle.

Common Mistakes

  • Only checking forwarding, not filters/rules. Attackers often use filters to forward only certain emails (e.g., password resets), so you must check both.
  • Forgetting to check other email aliases or secondary addresses on the same account.
  • Deleting a legitimate rule you set up long ago and forgot about. Always verify the forwarding address—if it’s yours, it’s fine.
  • Not saving changes after disabling forwarding. In Gmail, you must click “Save Changes” at the bottom of the page.

Tips

  • Change your email password immediately after removing suspicious rules. Use a strong, unique password.
  • Enable two-factor authentication (2FA) on your email account to prevent future unauthorized access.
  • Check your account’s recent activity or sign-in history (available in most services) to spot other suspicious logins.
  • Review your recovery email and phone number—attackers often change these to maintain access.
  • Run a security checkup if your provider offers one (e.g., Google Security Checkup).

Troubleshooting

  • You can’t find the forwarding settings: The menu names may differ slightly depending on your region or interface version. Use the help search within your email service (e.g., type “forwarding” in the Gmail help center) to locate the exact path.
  • You removed a rule but emails are still being forwarded: There may be multiple rules or a forwarding setting in a different section (e.g., POP/IMAP in Gmail). Double-check all tabs and also look for any “send as” or “delegate” settings that might redirect mail.
  • You don’t see any forwarding rules, but you suspect your emails are being read: Check for auto-forwarding in your email client (like Outlook desktop) if you use one, or check if your account has been compromised in another way (e.g., a malicious app with access). Revoke third-party app permissions.
  • You’re locked out of your account: Use your provider’s account recovery process (usually via phone or recovery email) to regain access. If you can’t, contact their support.

Frequently Asked Questions

How can I tell if a forwarding rule was created by someone else?

Look for any forwarding address that you don’t recognize. If you never set up forwarding, any active forwarding rule is suspicious. Also, check the date the rule was created (if available)—a recent creation date is a red flag.

Can forwarding rules be hidden from the settings?

In most major email services, forwarding rules are visible in the settings. However, an attacker might create a filter that forwards only certain emails, which can be easy to miss if you only check the main forwarding toggle. Always review the complete rules/filters list.

What if the forwarding address is similar to mine but not exactly the same?

That’s a common trick—attackers use an address that looks like yours (e.g., with a different domain or extra characters). If it’s not your exact address, treat it as suspicious and remove it.

Will removing the rule delete the forwarded emails that were already sent?

No. Emails that were already forwarded are gone. You can’t retrieve them unless you have a backup or the recipient’s account is under your control. Focus on stopping future forwarding.

Do I need to check forwarding rules on all my devices?

No. Forwarding rules are set on the email server, not on individual devices. Checking via the web interface on any device is sufficient.

Can I prevent someone from adding forwarding rules in the future?

Enable two-factor authentication and use a strong, unique password. Also, regularly review your account settings and third-party app permissions. Some services allow you to set up alerts for new rules (e.g., Google’s security alerts).

Related

Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.