user blocked from sending emails

one of my users was restricted from sending emails as her account was used as spam.

but i dont see her being on the restricted users lists in security & compliance.

we received email from spamalert@microsoft.com saying that her account was locked as it was being spam.

after 4 hours, her account is still being blocked.

"This is an automated notice from Exchange Online Protection.

Your outbound spam filter policy is configured to notify you when a user is restricted for sending outbound spam. We've detected a high volume of outbound spam or other suspicious behavior from the user(s) listed below.

You can fix the issue by completing the following steps:

1. Change the password of the account. For other recommendations, see Responding to a Compromised Email Account in Office 365.
• We also recommend that you use multi-factor authentication (MFA), one of the easiest and most effective ways to increase the security of your organization.
2. To let the user send email again, locate the account in the Restricted Users portal and unblock the user. For more information, see Removing a user from the Restricted Users portal after sending spam email.
3. Use Office 365 Advanced Threat Protection (ATP) to better protect your organization against sophisticated threats such as phishing and zero-day malware. Office 365 ATP can be configured to automatically investigate and remediate attacks."