A Gmail forwarding notice you did not authorize can indicate that someone changed your account settings. Treat it as a reason to inspect the account directly. Do not click an unfamiliar removal or verification link in a separate email claiming to fix the problem.
Inspect the actual forwarding routes
- Open Gmail through a known bookmark or its official website.
- Review the active destination under Forwarding or Forwarding and POP/IMAP.
- Check Filters and blocked addresses for Forward to actions.
- Record unfamiliar destinations and relevant times privately.
For a shared or managed mailbox, confirm with the authorized owner or administrator whether the route belongs to an approved workflow. Do not remove a legitimate business route solely because its address is unfamiliar to one user.
Secure unauthorized changes
If you did not authorize the route, follow Google’s compromised-account guidance. Change an exposed or compromised password through the official account controls, review devices and activity, and inspect recovery information, delegates, and app authorizations.
Disable the unauthorized forwarding and remove associated malicious filters. A password change alone does not establish that all mailbox changes were reversed. Preserve evidence required by the organization’s security process before altering it.
Check what the notice does and does not prove
Google’s forwarding reminder normally appears for the first week after setup. Its disappearance later is not proof that forwarding stopped, and its presence does not identify every message already disclosed.
Review important external accounts for security alerts, password resets, or transactions that may have been hidden or forwarded. Ask an administrator or trusted support team to help assess the scope where necessary.
After securing the account, use a harmless new message to verify the intended route and location. Do not send sensitive test content to the suspicious destination or contact its owner to ask for reassurance. Copies already delivered elsewhere are not recalled by disabling forwarding. Keep account repair, recovery of missing mail, and assessment of possible disclosure as separate tasks.
Browse Gmail & Google Account help
References
- Automatically forward Gmail messages to another account
- Gmail security tips
- Secure a hacked or compromised Google Account
Reviewed against the linked product guidance, standards, and identified vendor or public-authority guidance on October 29, 2026. Available options and screen labels can vary by account, device, region, and organization policy.