How to Check Outlook Forwarding Rules
If email suddenly starts disappearing, Outlook forwarding rules are often the first place to look.
This guide explains how to check Outlook forwarding rules in Outlook desktop, Outlook on the web, and Microsoft 365 admin settings so you can spot automatic redirects quickly.
Forwarding can be legitimate, but it can also be caused by a misconfigured rule, a shared mailbox setup, or a compromised account.
Knowing exactly where to inspect these settings helps you confirm whether mail is going where it should—or somewhere it should not.
What Outlook forwarding rules do
Outlook forwarding rules automatically send incoming messages to another address, folder, or mailbox based on conditions you define.
They may apply to all mail or only messages that match specific criteria, such as messages from a sender, messages with certain words in the subject, or messages marked as important.
In Microsoft 365 environments, forwarding may also be configured outside of Outlook rules.
For example, Exchange mailbox forwarding, inbox rules, transport rules, and tenant-level mail flow rules can all affect where mail ends up.
That is why a complete check should cover both the Outlook interface and admin-level settings.
How to check Outlook forwarding rules in Outlook desktop
In the classic Outlook desktop app, rules are typically stored in the mailbox profile and can be reviewed from the Rules and Alerts window.
- Open Outlook.
- Go to File in the top-left corner.
- Select Manage Rules & Alerts.
- Review the list of rules under the Email Rules tab.
Look for any rule that contains actions such as forward it to people or public group, redirect it to people or public group, or forward to another mailbox.
Also check whether a rule is enabled, since an active rule can process mail immediately when it arrives.
Pay attention to rule order.
Outlook evaluates rules from top to bottom, and an earlier rule may move or forward messages before a later rule gets a chance to run.
If a rule seems suspicious, open it and review the conditions, exceptions, and destination address carefully.
How to check Outlook forwarding rules in Outlook on the web
Outlook on the web, also called Outlook Web App or Outlook for Microsoft 365, stores inbox rules in the mailbox and makes them easy to review from the Settings panel.
- Sign in to Outlook on the web.
- Select the Settings gear icon.
- Choose Mail, then Rules.
- Inspect each listed rule for forwarding or redirect actions.
In Outlook on the web, a rule may say it forwards, redirects, or moves mail to a folder.
A forwarding rule can be obvious, but some rules are more subtle.
For example, a rule might move mail to another folder first and then trigger a second rule that forwards it, so review the entire rule list rather than stopping at the first match.
You should also check the Forwarding section in the web settings.
This is separate from inbox rules and may send all incoming messages to another address even if no rule appears to do that.
How to check mailbox forwarding in Microsoft 365 admin center
If you have admin access, the Microsoft 365 admin center and Exchange admin center provide deeper visibility into mailbox-level forwarding.
This is important because forwarding can exist without a visible Outlook rule.
To check a user mailbox:
- Open the Microsoft 365 admin center.
- Go to Users and select Active users.
- Open the user’s mailbox details.
- Look for Email forwarding or related mailbox settings.
In the Exchange admin center, you can also review mailbox properties for forwarding addresses and delivery options.
Verify whether mail is being delivered both to the original mailbox and to the forwarded destination, or only forwarded.
The difference matters when troubleshooting missing email.
For security teams, it is also worth checking sign-in activity and recent rule changes through Microsoft 365 audit logs.
A newly created forwarding rule, especially one created outside normal business hours, can be a sign of account compromise.
How to check if Outlook forwarding rules are hidden or unexpected
Some forwarding behavior is not obvious from the inbox rules screen alone.
To catch hidden or unexpected routing, review these common places:
- Inbox rules in Outlook desktop and Outlook on the web
- Mailbox forwarding in Microsoft 365 or Exchange settings
- Delegated access or shared mailbox permissions
- Mobile device rules or client-side rules
- Mail flow rules in the Exchange admin center
If a user says mail is forwarding but no inbox rule is visible, check whether the forwarding was configured at the mailbox level instead of through Outlook.
Also verify whether the mailbox has an automatic reply with a different address, because users sometimes confuse reply-to changes with true forwarding.
How to review a rule safely
When you find a rule that appears to forward email, inspect it methodically before changing anything.
This helps avoid breaking legitimate business workflows.
- Check the rule name for clues about who created it.
- Confirm the destination address is trusted and correct.
- Review the conditions to see which messages are affected.
- Look at exceptions that may reduce the rule’s scope.
- Note whether the rule is enabled or set to run automatically.
If the rule forwards all mail to an external address, treat it as high priority.
In enterprise environments, external auto-forwarding is often restricted because it can expose sensitive data outside the organization.
How to disable forwarding rules in Outlook
After confirming a forwarding rule is unnecessary or unsafe, disable it rather than deleting it immediately if you want to preserve evidence for troubleshooting.
In Outlook desktop, open Manage Rules & Alerts and clear the check box next to the rule.
In Outlook on the web, toggle the rule off or remove it from the Rules list.
If the forwarding is configured at the mailbox level, disable forwarding in the admin portal or Exchange settings instead.
After changes, send a test message to confirm delivery stays in the intended mailbox.
Ask the user to check their inbox, junk folder, and any redirected destination if mail had already been routed elsewhere.
Why Outlook forwarding rules appear without warning
Forwarding rules can appear for several legitimate reasons.
A user may have created one to route client mail to a team address, a support desk may use forwarding for ticket triage, or a migration from one mailbox to another may leave temporary forwarding in place.
Unexpected forwarding can also result from phishing, credential theft, or malicious OAuth app consent.
In these cases, the attacker may create a rule that hides security alerts, archives certain messages, or forwards copies of mail to an external account.
That is why reviewing rule history and recent account activity is just as important as checking the rule itself.
Quick checklist for how to check Outlook forwarding rules
- Review inbox rules in Outlook desktop.
- Check rules in Outlook on the web.
- Inspect mailbox-level forwarding in Microsoft 365 or Exchange.
- Look for external forwarding addresses.
- Confirm rule order, conditions, and exceptions.
- Check audit logs for recent rule creation or changes.
- Test delivery after making adjustments.
Using this checklist makes it easier to identify whether mail is being forwarded intentionally, accidentally, or by someone who should not have access.
The key is to verify both the visible Outlook rules and the deeper mailbox settings that can route messages behind the scenes.