Methods and systems for handling recovery messages

1. A method comprising:

receiving, by a computing device, a recovery message directed to a first account associated with a messaging service provider and a user, wherein the recovery message comprises access information associated with a second account of an online service provider, wherein the second account is associated with the user;

in response to receiving a recovery message, determining whether one or more suspicious events involving the first account have occurred;

in response to determining that one or more suspicious events have occurred, prompting the user to provide authentication information in order to access the recovery message;

receiving one or more responses from the user;

verifying the one or more responses; and

in response to determining that each of the responses is correct, granting access, by the computing device, to the recovery message.

2. The method of claim 1 , wherein determining whether one or more suspicious events involving the first account have occurred comprises determining whether the first account has been accessed from an unrecognized location.

3. The method of claim 1 , wherein determining whether one or more suspicious events involving the first account have occurred comprises determining whether the first account has been accessed from an unrecognized computing device.

4. The method of claim 1 , wherein determining whether one or more suspicious events involving the first account have occurred comprises determining whether one or more failed logins associated with the first account have occurred.

5. The method of claim 1 , wherein determining whether one or more suspicious events involving the first account have occurred comprises determining whether a computing device used to access the first account has accessed one or more other accounts of the messaging service provider within a time period.

6. The method of claim 1 , wherein prompting a user to provide authentication information in order to access the recovery message comprises prompting a user to answer one or more security questions associated with the first account.

7. The method of claim 1 , wherein prompting a user to provide authentication information in order to access the recovery message comprises prompting a user to answer one or more knowledge test questions associated with the first account.

8. A method comprising:

receiving, by a computing device, a recovery message directed to a first account associated with a messaging service provider and a user, wherein the recovery message comprises access information associated with a second account of an online service provider, wherein the second account is associated with the user;

in response to receiving a recovery message, determining whether one or more suspicious events involving the first account have occurred;

in response to determining that one or more suspicious events have occurred, prompting the user to provide authentication information in order to access the recovery message;

receiving one or more responses from the user;

verifying the one or more responses; and

in response to determining that one or more of the responses is incorrect, performing one or more remedial actions.

9. The method of claim 8 , wherein determining whether one or more suspicious events involving the first account have occurred comprises determining whether the first account has been accessed from an unrecognized location.

10. The method of claim 8 , wherein determining whether one or more suspicious events involving the first account have occurred comprises determining whether the first account has been accessed from an unrecognized computing device.

11. The method of claim 8 , wherein determining whether one or more suspicious events involving the first account have occurred comprises determining whether one or more failed login associated with the first account have occurred.

12. The method of claim 8 , wherein determining whether one or more suspicious events involving the first account have occurred comprises determining whether a computing device used to access the first account has accessed one or more other accounts of the messaging service provider within a time period.

13. The method of claim 8 , wherein prompting a user to provide authentication information in order to access the recovery message comprises prompting a user to answer one or more security questions associated with the first account.

14. The method of claim 8 , wherein prompting a user to provide authentication information in order to access the recovery message comprises prompting a user to answer one or more knowledge test questions associated with the first account.

15. The method of claim 8 , wherein performing one or more remedial actions comprises restricting access to the recovery message.

16. The method of claim 8 , wherein performing one or more remedial actions comprises temporarily restricting access to the first account.

17. The method of claim 8 , wherein performing one or more remedial actions comprises notifying the user that suspicious account activity has occurred.

18. A system comprising:

a computing device; and

a computer-readable storage medium in communication with the computing device, wherein the computer-readable storage medium comprises one or more programming instructions that, when executed, cause the computing device to:

receive a recovery message directed to a first account associated with a messaging service provider and a user, wherein the recovery message comprises access information associated with a first account of an online service provider, wherein the second account is associated with the user,

in response to receiving a recovery message, determine whether one or more suspicious events involving the first account have occurred,

in response to determining that one or more suspicious events have occurred, prompt a user to provide authentication information in order to access the recovery message,

receive one or more responses from a user,

verify the one or more responses, and

in response to determining that each of the responses is correct, granting access to the recovery message.

19. The system of claim 18 , wherein the one or more programming instructions that, when executed, cause the computing device to determine whether one or more suspicious events involving the first account have occurred comprise one or more programming instructions that, when executed, cause the computing device to perform one or more of the following:

determine whether the first account has been accessed from an unrecognized location;

determine whether the first account has been accessed from an unrecognized computing device;

determine whether one or more failed login associated with the first account have occurred; and

determine whether a computing device used to access the first account has accessed one or more other accounts of the messaging service provider within a time period.

20. The system of claim 18 , wherein the one or more programming instructions that, when executed, cause the computing device to prompt a user to provide authentication information comprise one or more programming instructions that, when executed, cause the computing device to perform one or more of the following:

prompt a user to answer one or more security questions associated with the first account; and

prompt a user to answer one or more knowledge test questions associated with the first account.

21. A system, comprising:

a computing device; and

a computer-readable storage medium in communication with the computing device, wherein the computer-readable storage medium comprises one or more programming instructions that, when executed, cause the computing device to:

receive a recovery message directed to a first account associated with a messaging service provider and a user, wherein the recovery message comprises access information associated with an account of an online service provider, wherein the second account is associated with the user,

in response to receiving a recovery message, determine whether one or more suspicious events involving the first account have occurred,

in response to determining that one or more suspicious events have occurred, prompt a user to provide authentication information in order to access the recovery message,

receive one or more responses from a user,

verify the one or more responses, and

in response to determining that one or more of the responses is incorrect, perform one or more remedial actions.

22. The system of claim 21 , wherein the one or more programming instructions that, when executed, cause the computing device to determine whether one or more suspicious events involving the email account have occurred comprise one or more programming instructions that, when executed, cause the computing device to perform one or more of the following:

determine whether the first account has been accessed from an unrecognized location;

determine whether the first account has been accessed from an unrecognized computing device;

determine whether one or more failed login associated with the first account have occurred; and

determine whether a computing device used to access the first account has accessed one or more other accounts of the messaging service provider within a time period.

23. The system of claim 21 , wherein the one or more programming instructions that, when executed, cause the computing device to prompt a user to provide authentication information comprise one or more programming instructions that, when executed, cause the computing device to perform one or more of the following:

prompt a user to answer one or more security questions associated with the first account; and

prompt a user to answer one or more knowledge test questions associated with the first account.

24. The system of claim 21 , wherein the one or more programming instructions that, when executed, cause the computing device to perform one or more remedial actions comprise one or more programming instructions that, when executed, cause the computing device to perform one or more of the following:

restrict access to the recovery message;

temporarily restrict access to the first account; and

notify the user that suspicious account activity has occurred.