If Gmail is sending messages you did not write or forwarding mail to an unfamiliar address, treat it as a possible account takeover. Change your Google Account password, run Security Checkup, then remove both Gmail’s automatic-forwarding setting and any filter that contains a forwarding action. Finally, audit delegation, alternate mail access, sent and scheduled messages, and connected apps before enabling stronger sign-in protection.
The labels below describe Gmail in a desktop browser. Google can change wording or hide controls for work, school, or other managed accounts, so involve the administrator if a setting is locked or unavailable.
As an Amazon Associate I earn from qualifying purchases.
Why Gmail can send or forward mail you did not approve
There are several separate ways mail can leave a Gmail account. Automatic forwarding sends all new messages, while a filter can forward only messages matching a condition such as a sender, subject, or keyword. A person with access can also use a delegated account, a configured “Send mail as” address, POP3 retrieval, or an approved third-party app. A rule that deletes messages or skips the inbox may hide evidence without forwarding anything.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesUnexpected mail in Sent, reports from contacts that they received strange messages, missing incoming mail, or a forwarding notice you never created are warning signs. They do not prove which pathway is responsible, so check each one instead of disabling only the visible forwarding switch.
#1 Best Overall
- Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
- Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
- Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
- Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
- 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
How the pathways differ
Automatic forwarding is broad: it can route newly received messages regardless of sender. A filter is selective and may affect only invoices, password-reset messages, or mail containing a particular word. Delegation gives another account access to the mailbox itself. “Send mail as” changes the identity shown when someone sends. POP3 and IMAP let a mail program retrieve or synchronize messages, while a connected app may use Google permissions to read or send mail. These controls are independent, so closing one route does not close the others.
A filter that only archives or deletes messages can be just as important as a forwarding rule. It can prevent security warnings and replies from appearing in the inbox, making an intrusion harder to notice. Review the condition and every action rather than judging a rule by its name.
Do this first if the activity is unfamiliar
- Change the Google Account password immediately. Use a new password that is not reused on another service. If you cannot sign in or the attacker keeps regaining access, use Google’s compromised-account recovery process rather than repeatedly changing settings in an unsecured session.
- Run Security Checkup. Confirm recent sign-ins, recovery phone numbers and email addresses, 2-Step Verification methods, and account permissions. Remove recovery options or devices you do not recognize.
- Use a trusted device and connection. If the computer or browser may be infected, perform the cleanup from a device you control, and sign out of other active sessions when Security Checkup offers that option.
- Then inspect Gmail’s mail-routing settings. Password changes protect the account but do not automatically delete an existing forwarding rule or filter. Those rules must be removed separately.
Google’s Gmail security guidance says to reset your password immediately when you think someone has unauthorized access. If Gmail displays a forwarding notice that you did not set up, Google likewise directs you to change the password immediately and turn off forwarding.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Make a brief record of unfamiliar addresses, dates, devices, and messages before deleting evidence. This is useful for a work, school, legal, or financial account and helps you recognize whether the same activity returns after cleanup. Do not confront a suspected person through the compromised mailbox; secure access first.
Turn off automatic forwarding
Automatic forwarding is the account-wide control that can send new incoming mail to another mailbox. It is independent of filter rules, so disabling it does not remove a filter that forwards selected messages.
- Open Gmail in a computer browser.
- Select the Settings gear, then See all settings.
- Open Forwarding and POP/IMAP. Some accounts show a shorter Forwarding tab.
- In the Forwarding section, select Disable forwarding.
- Scroll to the bottom and choose Save Changes.
Stay on the page long enough to confirm that the change was saved. Closing the tab or navigating away before selecting Save Changes can leave the old setting active.
If the forwarding address, notice, or confirmation is unfamiliar, do not leave the setting enabled while investigating. Disable it, save the change, and continue with the filter and account-access audit below. Interface labels can vary by account type or platform.
Recommended Free Tools
Automatic forwarding affects incoming mail; it does not explain every unfamiliar message in Sent. If outgoing mail continues after forwarding is disabled, investigate delegation, filters, connected apps, POP/IMAP clients, and active sessions.
Find and remove filter-based forwarding
A filter can forward only a subset of messages and can also delete them or skip the inbox. This is why an account may appear to have no blanket forwarding while selected mail still reaches someone else.
Rank #2
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
- In Gmail, open Settings and choose See all settings.
- Open Filters and Blocked Addresses.
- Read each filter’s conditions and actions. Pay particular attention to Forward to, Delete it, and Skip the Inbox (Archive it).
- Edit a rule you created but no longer want, or select Delete for a rule you do not recognize.
- Return to the inbox and test with a harmless message if you need to confirm that the unwanted route has stopped.
Do not assume a filter is safe because its name looks ordinary. Examine the actual recipient address and every action attached to it. A filter that only archives or deletes mail can conceal account activity even when no forwarding action is present.
Check for multiple rules that overlap. Removing one unfamiliar rule may not stop forwarding if a second rule targets the same sender or subject. Compare the complete address, not just the display name, and inspect both the conditions and actions before editing a rule you recognize.
If a rule is legitimate but too broad, edit its conditions instead of creating a second rule that could conflict with it. If you did not create it, deleting it is safer than trying to work around it with another filter.
Audit the other Gmail access paths
Use the Accounts and Import and Forwarding and POP/IMAP areas to check the less visible ways another person or service can read or send mail.
Send mail as
Under Accounts and Import, inspect Send mail as. Remove an address, alias, or identity you did not add. An unfamiliar identity can make messages appear to come from an address other than the account’s primary address.
Review the complete address, including punctuation and the domain. A familiar display name does not establish ownership. Keep identities that match your actual work or personal workflow, but remove anything you cannot explain.
Account delegation
In the same settings area, review Grant access to your account. Delegates can read messages and, depending on the permission, send mail from the account. Revoke any delegate you do not recognize. If the account belongs to an organization, delegation may be controlled by an administrator.
Delegation is different from sharing a password: the delegate may appear as a separate account or address in the settings. Treat an unknown delegate as an access event and check recent account activity as well as Gmail settings.
Check mail from other accounts (POP3)
Under Accounts and Import, inspect Check mail from other accounts (POP3). Remove an unfamiliar external mailbox or disable a retrieval arrangement you did not configure. POP3 can create a second route for importing messages that is easy to miss if you look only at forwarding.
Rank #3
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
Keep only retrieval arrangements that correspond to a mailbox you still control and intentionally use. If you are unsure why an entry exists, document it, remove or disable it, and check whether unexpected activity stops.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →POP and IMAP access
In Forwarding and POP/IMAP, review whether POP or IMAP access is enabled and whether the configuration matches how you use Gmail. An unknown mail client or service can use these protocols to retrieve messages. Disable access you do not need, following your organization’s policy if this is a managed account.
After changing these settings, review phones, tablets, desktop mail programs, scanners, and automation tools that legitimately connect to Gmail. Removing protocol access can stop a legitimate client, so restore it only after identifying the device and confirming that its use is authorized.
Forwarding addresses and confirmation details
Check every listed forwarding address for spelling and ownership. An address that differs by one character can still send private mail to the wrong person. Do not treat a familiar-looking display name as proof that the mailbox is yours; compare the complete address.
Look for evidence of messages already sent or hidden
After removing routes, determine what the account may have done while another person or app had access.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11- Sent: Search for messages you did not write, especially messages to many recipients, password-reset links, financial services, or your own contacts. Check the send time and recipients before deleting anything that may be needed as evidence.
- Scheduled: Open the Scheduled folder and cancel messages you did not create. A scheduled message can be waiting even when nothing has appeared in Sent recently.
- Trash and Spam: Look for legitimate security alerts or replies that a filter or intruder may have removed. Restore anything needed for recovery, then empty these folders only after documenting the activity.
- Contact reports: Ask recipients what they received and when. Their copies can reveal the subject, links, or sender identity even if the message was deleted from your account.
- Account activity: Security Checkup and Google Account activity can show unfamiliar devices, locations, or sign-ins. Treat an unknown event as a reason to review access, not as proof of a particular person’s identity; network locations can be approximate.
Preserve useful details such as timestamps, recipient lists, and screenshots before cleanup if the account is used for work, legal matters, or an incident investigation.
Search for replies from people who received suspicious mail. A reply may be the only remaining indication that a message was sent. Also check whether expected security notifications are missing; deletion or inbox-skipping rules can hide them without changing the forwarding setting.
Do not click links in suspicious messages while investigating. Open account security pages directly through Google’s normal sign-in route, and use a trusted device for password and recovery changes.
Remove unfamiliar connected apps and services
Open your Google Account’s security settings and review connected third-party apps and services. Revoke access for anything you do not recognize or no longer use. An app may be able to read or send mail through granted permissions even when Gmail’s own forwarding controls are off.
Free tools Windows power users keep installed
One-click scans. No signup required.
Rank #4
- Dual Converters, Infinite Potential：Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
- Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
- Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
- Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
- Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
Only reconnect an app after verifying its publisher and the permissions it requests. A calendar, mail client, scanner, or automation service may legitimately need limited access, but its presence should match a device or workflow you actually use. Removing access does not necessarily delete data the service already copied; review that service separately if sensitive mail may have been stored there.
Consider both recent and older connections. An app that was once trusted may no longer be needed, and an unfamiliar connection can remain useful to an intruder even after you remove a Gmail filter. Revoke first, then monitor whether new sent messages or settings reappear.
Strengthen sign-in protection after cleanup
Once unwanted routes, delegates, apps, and sessions are removed, return to Security Checkup and add a stronger second factor. Google documents several options:
- 2-Step Verification: Adds a second sign-in step after the password. Keep recovery methods current so you are not locked out.
- Passkeys: Use a compatible device’s biometric or screen-lock protection for sign-in. Enroll only on devices you control.
- Hardware security keys: Physical FIDO-compatible keys can be used with 2-Step Verification. Google supports FIDO1 and FIDO2 security keys; check that the key’s connector or wireless method works with each device you use.
A hardware key is an optional preventive measure, not a cleanup tool. It will not remove a forwarding rule, delete a filter, or cancel a scheduled email that already exists. If you choose keys, keep a registered backup and preserve another recovery method in a secure place.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
When comparing a hardware key with other sign-in options, focus on whether it supports FIDO1 or FIDO2, works with the ports or wireless connections on your devices, and can be backed up. Google identifies Titan Security Keys as one option, but no particular model is required to remove forwarding or repair Gmail settings.
Stronger sign-in protection helps prevent future unauthorized sign-ins; it does not prove that existing mail routes are gone. Always complete the settings audit first or do both tasks in sequence.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What to do when a setting is missing or locked
The forwarding tab is not visible
Use Gmail in a desktop browser and open Settings → See all settings. Depending on the account, the tab may be named Forwarding rather than Forwarding and POP/IMAP. A mobile Gmail app does not expose every administrative control, so switch to the browser interface.
You cannot delete a filter or delegate
The account may be managed by a school, employer, or other organization. Contact the administrator and provide the unfamiliar address, rule, delegate, or sign-in event. Do not create duplicate personal rules to work around an organizational policy; that can leave the unauthorized route active.
The rule disappears but mail still leaves
Recheck filters, delegation, Send mail as, POP3 retrieval, POP/IMAP access, scheduled messages, and connected apps. Also inspect other devices and mail clients that may have their own local rules. If a new rule or sent message reappears after you remove it, secure the Google Account again from a trusted device and use Google’s compromised-account recovery guidance.
Best Value
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
You cannot sign in
Use Google’s account-recovery flow from a familiar device and location, provide the requested recovery information, and secure the recovery email account as well. If the mailbox is organizational, notify the administrator immediately because they may be able to revoke sessions or investigate logs unavailable to an individual user.
You changed settings but the problem returns
A recurring rule or sent message suggests that an attacker, device, recovery method, or connected service still has access. Repeat Security Checkup, verify recovery details, remove unfamiliar sessions and apps, and inspect every Gmail pathway again. Do not assume the recurrence is a delayed copy of an old rule.
A complete cleanup checklist
- Google Account password changed to a unique value.
- Security Checkup completed; recovery details and active sessions verified.
- Automatic forwarding disabled and the change saved.
- Unknown filter-based Forward to, delete, and skip-inbox rules edited or removed.
- Unfamiliar Send mail as identities removed.
- Unknown delegates removed from Grant access to your account.
- Unrecognized POP3 accounts reviewed and removed or disabled.
- POP/IMAP access matched to your actual mail clients.
- Sent, Scheduled, Trash, and Spam reviewed for unauthorized activity.
- Unknown third-party app and service access revoked.
- 2-Step Verification, a passkey, or a compatible hardware key enabled, with recovery methods available.
Completing the checklist closes the common Gmail paths for unauthorized forwarding and sending. Continue watching account activity and contact reports for several days; a recurrence indicates that an account, device, recovery method, or connected service still needs investigation.
Frequently Asked Questions
How do I stop Gmail from forwarding my emails?
In Gmail on a computer, open Settings, choose See all settings, open Forwarding or Forwarding and POP/IMAP, select Disable forwarding, and save the change. Then inspect Filters and Blocked Addresses because a filter can forward selected messages even when automatic forwarding is disabled.
Why is Gmail sending emails I did not write?
Possible routes include account access, delegation, a connected app, a mail client using POP or IMAP, or a filter. Change your Google Account password, run Security Checkup, review Sent and Scheduled, and audit each Gmail access pathway.
How can I tell if someone has access to my Gmail?
Check Security Checkup and Google Account activity for unfamiliar devices, locations, or sign-ins. Also look for unknown delegates, recovery options, connected apps, Send mail as identities, forwarding rules, filters, and messages in Sent that you did not create.
Will turning on 2-Step Verification remove a forwarding rule?
No. 2-Step Verification, passkeys, and hardware security keys help prevent future unauthorized sign-ins, but they do not delete forwarding settings, filters, delegates, or scheduled emails. Remove those items separately.
What if Gmail will not let me remove a forwarding rule or delegate?
The account may be managed by an employer, school, or another organization. Contact its administrator with the unfamiliar address or rule. Organization-level controls can restrict settings that an individual user cannot change.
Can a security key fix Gmail forwarding?
No. A compatible FIDO1 or FIDO2 hardware key is an optional sign-in protection measure. It does not clean Gmail settings. If you use one, check device compatibility and keep a backup key or another recovery method.
The Bottom Line
Change the Google Account password and complete Security Checkup first. Disable automatic forwarding, remove unfamiliar forwarding filters, then audit delegation, Send mail as, POP3, POP/IMAP, scheduled mail, and connected apps. After the routes are gone, enable 2-Step Verification, a passkey, or a compatible hardware key and keep monitoring for recurring activity.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
