After recovering a compromised Google Account, missing Gmail messages may reflect changes made during the intrusion. Regaining sign-in access does not automatically restore deleted mail or undo forwarding and filters. Secure the account and inspect mailbox changes as separate parts of recovery.
Check access before reorganizing mail
- Use Google’s official account-security process to review unfamiliar devices and activity.
- Check recovery information and verification methods.
- Review authorized apps and remove access that you do not recognize.
- Keep a private record of relevant activity times and suspicious settings.
Do not rely solely on a password change to establish that every unauthorized access route or mailbox setting has been removed. Avoid sharing recovery codes or screenshots containing private mail with unsolicited support contacts.
Inspect changes that can hide incoming mail
In Gmail settings, review forwarding destinations, delegates, Send mail as entries, and filters. Look especially for Delete it, Skip the Inbox, Mark as read, or forwarding actions you did not authorize.
Search for missing messages across All Mail, Spam, and Trash, and inspect the individual messages in conversations. A malicious rule can hide security alerts without deleting every message, so location and read state both matter.
Pursue bounded recovery and verify future delivery
Restore legitimate messages still in Trash while the normal recovery window remains. Use the official recovery option presented by Google’s missing-mail help where applicable; do not describe that request as guaranteed.
For managed work or school accounts, notify the administrator promptly. They may have limited recovery or retention options and may need to inspect logs and other affected services. Consumer Gmail does not have the same administrator tools.
After removing the unauthorized changes, use a harmless new incoming message to verify delivery and location. Check important external accounts for password resets or transactions that may have been concealed. Do not import a large archive, clear local data, or delete suspicious evidence before the recovery and investigation plan is understood.
Browse Gmail & Google Account help
References
- Secure a hacked or compromised Google Account
- Gmail security tips
- Gmail messages are missing
- Restore a user's permanently deleted email | Support & troubleshooting | Google Workspace Help
Reviewed against the linked product guidance, standards, and identified vendor or public-authority guidance on October 29, 2026. Available options and screen labels can vary by account, device, region, and organization policy.