user blocked from sending emails

one of my users was restricted from sending emails as her account was used as spam.

but i dont see her being on the restricted users lists in security & compliance.

we received email from mailto:spamalert@microsoft.com saying that her account was locked as it was being spam.

after 4 hours, her account is still being blocked.

"This is an automated notice from Exchange Online Protection.

Your outbound spam filter policy is configured to notify you when a user is restricted for sending outbound spam. We've detected a high volume of outbound spam or other suspicious behavior from the user(s) listed below.

You can fix the issue by completing the following steps:

1. Change the password of the account. For other recommendations, see https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Faka.ms%2FO365-compromise&data=02%7C01%7Ckinmunyeow%40goldenvillage.com.sg%7C99a6f45c5dba4dccf86f08d80b67bcb5%7C12afcae5277f45e79ee76261a1f697d4%7C0%7C0%7C637271887473195247&sdata=AGmT6eJw3AYcKxdR99vEBoqZtQjtyn1lK4cfSKEusQE%3D&reserved=0.
• We also recommend that you use https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgo.microsoft.com%2Ffwlink%2F%3Flinkid%3D2114451&data=02%7C01%7Ckinmunyeow%40goldenvillage.com.sg%7C99a6f45c5dba4dccf86f08d80b67bcb5%7C12afcae5277f45e79ee76261a1f697d4%7C0%7C0%7C637271887473205241&sdata=N%2FOdVrUpsoaMpyddXpktfRnYkzemaQReSn3ZIz%2F7V5I%3D&reserved=0, one of the easiest and most effective ways to increase the security of your organization.
2. To let the user send email again, locate the account in the Restricted Users portal and unblock the user. For more information, see https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgo.microsoft.com%2Ffwlink%2F%3Flinkid%3D2015593&data=02%7C01%7Ckinmunyeow%40goldenvillage.com.sg%7C99a6f45c5dba4dccf86f08d80b67bcb5%7C12afcae5277f45e79ee76261a1f697d4%7C0%7C0%7C637271887473205241&sdata=xZpseGXZYyHiqc8OJYnrdyKPyX7l5zajyUF%2BAODwTrU%3D&reserved=0.
3. Use https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgo.microsoft.com%2Ffwlink%2F%3Flinkid%3D2114262&data=02%7C01%7Ckinmunyeow%40goldenvillage.com.sg%7C99a6f45c5dba4dccf86f08d80b67bcb5%7C12afcae5277f45e79ee76261a1f697d4%7C0%7C0%7C637271887473215235&sdata=y43S2OrCja1u8dZqgFoFV1L4G38u%2B6cyH1GiST%2BNLcw%3D&reserved=0 to better protect your organization against sophisticated threats such as phishing and zero-day malware. Office 365 ATP can be configured to automatically investigate and remediate attacks."