Last updated: 24 April 2026
Strange messages in your Sent folder? Repeated login errors? Your BT Email account might have been compromised.
If we detect suspicious activity, we’ll block access immediately. You’ll see an error message in webmail or the BT Email app. If you use an email app like Outlook, you’ll notice repeated login failures.
What happens when your account is protected
When we block access, it’s to keep your account safe. Here’s what to do next:
- Run an antivirus scan on all devices you use for email. All BT broadband customers have BT Virus Protect included as standard in their plans. It includes real-time protection against ransomware, viruses, spyware, malware and other online threats, keeping your devices safe. Simply open your My BT App, head to Your security, and turn it on.
- Download the BT Virus Protect app and follow the on-screen steps to install protection on your devices.
- Change your password at bt.com: Log in, then select the Email link on the top bar. If you don’t have a BT ID, create one when prompted. Choose a strong password and update it on all devices.
- Follow the security checks below to make sure your account is fully secure.
Recommended security checks
| 1. Check your contacts | Hackers sometimes delete or add contacts to hide their activity.
|
| 2. Check for unknown email addresses linked to your account | Hackers create extra addresses to reset your password.
|
| 3. Check mailbox rules | Hackers use rules to forward or hide emails.
|
| 4. Check auto-reply settings | Hackers set auto-replies to trick your contacts.
|
| 5. Check auto-forwarding | Hackers create forwarding rules to steal password reset emails.
|
| 6. Check alternative contact email addresses | Hackers add addresses to regain access later.
|
| 7. Check your personal security details | Hackers change security questions to lock you out.
|
How to keep your BT Email account secure
- Install BT Virus Protect, Web Threat Protect and Hub Threat Protect.
- Run antivirus checks regularly.
- Never reply to emails asking for personal details. They're likely phishing attempts.
- Avoid using public Wi-Fi for email.
- Always sign out on shared computers.
- Use different passwords for different sites.
- Create strong passwords that are hard to guess.