Continuous Email generated from Ex employee's account

[mhan1]

We have a user who left the company. His password was changed, but account isn't disabled yet due to potential breakage of flows.

Since he left, his account has been spamming error emails to himself with the Subject/Body saying "There is an error with {business unit} apps. Please check the flow." Then there are 3 options to choose from that submit some parameter to the power automate. It ends with the typical 'sent with power automate' footer.

These emails are sending every minute (60x per hour). 

We went through their flows, and their shared flows, but cannot find any that are recurring triggered, or sending an email of that type. Is there a way we can trace the email to the Flow that triggered it?

There's also another email (clearly sent from "Send email from shared mailbox") thats sent every minute to a distribution group, annoying many users.

[DamoBird365]

Hi @mhan1 

If you've got the Power Platform Admin Role, check out the Cloud Flow Activity under Monitor.

It will hopefully help identify which flow, especially if it is that frequent.

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
Cheers,
Damien

P.S. take a look at my new blog here