Few things are more frustrating than discovering that enquiries from your website never reached your inbox. When WordPress emails go to spam, or disappear entirely, the cause is almost always the way they are sent rather than the form plugin itself.
Why it happens
- PHP mail without authentication: WordPress uses the server’s mail function by default. Messages are not authenticated for your domain.
- Missing SPF, DKIM or DMARC records for your domain.
- Wrong From address: sending “from” the visitor’s Gmail address fails authentication checks.
- Shared server reputation: other sites on the same server may have damaged the IP’s reputation.
How to fix it, step by step
1. Send through SMTP or a transactional email service
Connect WordPress to your mailbox provider or a transactional email service through SMTP or an API. Messages then leave from a server that is authorised and monitored.
2. Publish SPF
Your SPF record lists the services allowed to send for your domain. Include your mailbox provider and any transactional service, and keep a single SPF record.
3. Enable DKIM
Turn on DKIM signing in your email provider and publish the DKIM key in DNS. Signed messages prove they were not altered in transit.
4. Add DMARC
Start with a monitoring policy and reporting address, review the reports, then move to a stricter policy once legitimate senders pass.
5. Use the right From and Reply-To
Send from an address on your domain such as [email protected] and put the visitor’s address in Reply-To.
6. Monitor delivery
Keep an email log, watch bounces and test forms regularly. Our maintenance checklist includes a weekly form test.
Quick diagnostic table
| Symptom | Likely cause |
|---|---|
| Form emails always in spam | No SMTP, missing SPF/DKIM |
| Some providers reject mail | DMARC failing or wrong From address |
| Emails stopped suddenly | SMTP password changed, provider limits or server block |
| Only order emails missing | Store plugin email settings or template errors |
WP Care includes SMTP setup and monitoring in every plan. Learn more about our email deliverability service or contact us.
Frequently asked questions
Why are my WordPress contact form emails going to spam?
By default WordPress sends email through the web server’s PHP mail function, without proper authentication for your domain. Mail providers treat these messages as suspicious and filter them.
What are SPF, DKIM and DMARC?
They are DNS records that prove which servers may send email for your domain (SPF), sign messages cryptographically (DKIM) and tell receivers what to do with messages that fail these checks (DMARC).
Should the From address be the visitor’s email?
No. The From address should be an address on your own domain. Put the visitor’s address in Reply-To so you can answer them directly.