Overview
Suspicious forwarding rules on your email account can redirect your messages to an attacker without your knowledge. This is often a sign of a compromised account or a security weakness. Here's what causes it and how to prevent it.
Common Causes
- Compromised account – An unauthorized person accessed your account and set up forwarding to spy on your emails.
- Weak password – Easily guessed passwords can be cracked through brute force attacks.
- Phishing attacks – Entering your credentials on a fake website or email gives attackers direct access.
- Insecure devices or networks – Unsecured Wi-Fi or devices can expose your login details.
- Third-party access – Apps or services with excessive permissions may create forwarding rules without your knowledge.
- Persistent attacker – Attackers may keep access and recreate forwarding rules even after you delete them.
How to Prevent It
- Change your password immediately – Use a strong, unique password. A password manager can help generate and store it securely.
- Review account activity – Check recent logins for unauthorized access. Contact us for login attempt details if needed.
- Limit third-party access – Revoke permissions for any apps or services you no longer use or trust.
- Check forwarding rules regularly – Remove any rules you didn't create.
- Enable two-factor authentication (2FA) – Adds a second layer of protection beyond your password.
- Avoid suspicious links – Never enter credentials on unfamiliar websites or emails.
Need Help?
If suspicious forwarding rules keep appearing, contact Nocser.net Support immediately — we can review your account activity and help secure it.
