Work out where the email stops. Did your site send it at all? Did your email service accept it? Did the recipient's mail server reject it (a bounce), or accept it and put it in spam? The two most common causes: the site isn't set up to send properly (a contact form using the server's built-in mail with no authentication, or wrong SMTP or API settings), and the sending domain lacks SPF and DKIM records, which Gmail's guidelines require.
What's the problem
Password resets, order confirmations or contact form emails don't arrive, arrive in spam, or your email service shows failures.
Why it happens
- Sending from the web server's own mail function with no authentication, which many inboxes reject or bin.
- Missing SPF, DKIM or DMARC records for your sending domain.
- Wrong SMTP or API settings: wrong host, port, username or API key, or a rotated key.
- The email service blocked or limited your account, for example an unverified domain or too many bounces.
- The recipient address is wrong or no longer exists.
- Your hosting provider blocks outgoing mail ports.
How to fix it
- Check your site's or app's logs for send errors.
- Check your email service's activity log (SendGrid, Mailgun, Postmark, etc.) to see if the message was received, delivered, bounced or blocked.
- Use a proper email service instead of the server's built-in mail, connected by API or authenticated SMTP.
- Add SPF and DKIM records for your sending domain, as your email service instructs, and a DMARC record.
- Verify your domain with your email service.
- Test to a few providers (Gmail, Outlook) and check spam folders.
What Preventionlabs checks
One click runs the full report on your domain. For this problem it shows your email authentication: SPF (and its 10-lookup limit), DMARC and DKIM; whether mail to you must arrive encrypted (MTA-STS) and whether you get reports when it does not; your DNS: nameservers, addresses, DNSSEC, and records pointing at services that no longer exist. It can't see your sending provider's delivery logs, so check bounces there.
Run your free reportYour first report is free, no card needed. Then A$50 a month, up to 10 domains. Read-only: it never changes anything.
Sources
- Google: Email sender guidelineshelp center
Set up SPF or DKIM email authentication for your sending domains.
- Twilio SendGrid: Manage bounced messagesofficial docs
When the receiving mail server rejects a sent message, a bounce occurs.