Fix Outlook ‘Account Flagged for Unusual Activity’ Error

If you see the “Your account has been flagged for unusual activity” error in Outlook, Microsoft has temporarily locked your account to protect it from potential unauthorized access. This guide walks you through the steps to verify your identity, reset your password if needed, and get back into your email—usually within minutes.

What You’ll Need

• Access to the email address or phone number associated with your Microsoft account (for verification).
• A web browser (Chrome, Edge, Firefox, or Safari).
• Your current Outlook password (if you remember it) or access to a recovery email/phone.
• Optional: A second device (like a smartphone) to receive a security code.

Step-by-Step

1. Close Outlook completely. Right-click the Outlook icon in the system tray (bottom-right corner of your screen) and select Exit. This ensures the error dialog doesn’t interfere with the fix.
2. Go to the Microsoft account recovery page. Open your web browser and navigate to account.live.com/acsr (the official Microsoft account recovery page). Do not use third-party links.
3. Enter your email address. Type the full Outlook email address that’s showing the error, then complete the CAPTCHA if prompted, and click Next.
4. Choose a verification method. Microsoft will offer to send a security code to your recovery email or phone number. Select the option you have access to, then click Next.
5. Enter the security code. Check your recovery email or SMS messages for a code from Microsoft. Enter it in the field and click Next.
6. Reset your password. After verification, you’ll be asked to create a new password. Use a strong, unique password (at least 8 characters, mixing letters, numbers, and symbols). Confirm it and click Next.
7. Sign back into Outlook. Once the password is updated, open Outlook again. Enter your email and the new password. The error should be gone, and your mailbox will load normally.

Common Mistakes

• Using the wrong recovery email/phone. Make sure you’re checking the exact contact method you set up for your Microsoft account. If you have multiple email addresses, check all of them.
• Entering the code too late. Security codes expire after a few minutes. If you wait too long, request a new code.
• Reusing an old password. Microsoft often blocks passwords you’ve used before. Choose a completely new one.
• Ignoring the CAPTCHA. The distorted text is required; if you fail it, you’ll be stuck. Refresh the page to get a new one if needed.
• Panicking and clicking suspicious links. Only use official Microsoft URLs (like account.live.com or outlook.com). Scammers often mimic this error.

Tips

• Check your recent activity. After regaining access, go to account.microsoft.com/security to review recent sign-ins. If you see unfamiliar locations or devices, change your password again and sign out of all devices.
• Enable two-step verification. This adds an extra layer of security, making future flags less likely. You can set it up in the same security settings page.
• Update your recovery info. Make sure your recovery email and phone number are current. This is your lifeline if you get locked out again.
• Use the Outlook mobile app. Sometimes the error is specific to the desktop client. Try logging in via the Outlook app on your phone to see if your account is actually accessible.

Troubleshooting

If the steps above don’t work, try these alternatives:

• If you don’t have access to your recovery email/phone: Use the “I don’t have any of these” link on the recovery page. You’ll be asked to fill out a form with details like your name, previous passwords, and subject lines of recent emails. This takes longer (up to 24 hours) but is the official route.
• If the error persists after password reset: Wait 15-30 minutes. Sometimes the flag takes time to clear. If it doesn’t, try signing in on the web at outlook.com with your new password. If that works, close and reopen the desktop app.
• If you’re in a shared or corporate environment: Your organization’s IT policy might be triggering the flag. Contact your IT administrator for help—they may need to unblock your account from their side.
• If the page shows an error after entering the code: Clear your browser cache and cookies, then try again. Also try a different browser or an incognito/private window.
• If you suspect your account was actually hacked: After regaining access, immediately change your password and review forwarding rules (in Outlook, go to Settings > Mail > Forwarding). Hackers sometimes set up forwarding to steal your emails.

Frequently Asked Questions

Why did my account get flagged?

Microsoft’s security system flags accounts when it detects unusual sign-in patterns, such as logging in from a new device, a different country, or after a long period of inactivity. It’s a protective measure, not an accusation.

Can I fix this without resetting my password?

Usually no. The password reset is part of the verification process to prove you’re the account owner. If you’re sure you know your password, you can try signing in on the web first; if that works, the desktop app might sync after a few minutes.

How long does the flag last?

It depends on the trigger. If you complete the verification steps, it clears immediately. If you use the offline recovery form, it can take up to 24 hours.

Will I lose my emails?

No. The flag only temporarily blocks access. Your emails, contacts, and folders remain intact.

What if I have two-step verification already enabled?

Then you might be asked for a code from your authenticator app instead of a recovery email. Follow the prompts—the process is similar.

Can I avoid this error in the future?

Yes: keep your recovery info updated, enable two-step verification, and avoid using public Wi-Fi or VPNs that change your apparent location. Also, sign in regularly to prevent inactivity flags.

Related

• Number Formatting in Excel: A How-To Guide
• Fix Inverted Colors on Windows 10
• App Store Error 1009: Fixes That Work