We recently found our own contact form sending messages straight to spam. The form said “Thank you, your message was sent.” Technically it was. It just landed where nobody would see it.
If it happened to us, it may be happening to you. Here’s how to check in five minutes, and what to do if your form has the same problem.
The five-minute check
- Open your website in a private browser window and fill out your contact form, using a personal Gmail or Outlook address that isn’t your business address.
- Check your business inbox. Then check spam, junk, and Gmail’s Promotions and Updates tabs.
- If the message shows up in spam or doesn’t show up at all, you have a problem worth fixing today.
A “message sent” confirmation on the website doesn’t prove anything. It only means your site handed the email off. Whether it arrived is a separate question.
Why form emails end up in spam
Out of the box, most WordPress sites send form notifications straight from the web server, often from an address like wordpress@yourdomain.com. Your email provider has no record of that server being allowed to send mail for your domain, so it looks a lot like someone pretending to be you.
Gmail, Outlook and Yahoo check three things to decide whether an email is legitimate:
- SPF: is this server allowed to send email for this domain?
- DKIM: was the message signed by the domain it claims to be from?
- DMARC: what should happen if those checks fail?
Messages that fail these checks get filtered, and the big providers have gotten noticeably stricter in the past couple of years.
How to see what’s going wrong
If you use Gmail, open the test message, click the three-dot menu and choose Show original. Near the top you’ll see SPF, DKIM and DMARC, each marked PASS or FAIL. Any FAIL, or a missing DKIM line, explains the spam folder.
To check your domain’s settings directly, run it through a free tool like Google Admin Toolbox’s Check MX or MXToolbox.
How to fix it
1. Send form email through your real email provider
Install an SMTP plugin like FluentSMTP or WP Mail SMTP and connect it to the service you already use for email, such as Google Workspace or Microsoft 365. Your form messages then go out through the same trusted system as your everyday email. This is what fixed ours.
2. Send from a real address on your domain
Set the form to send from an address you actually own, like hello@yourbusiness.com, and set the reply-to to the visitor’s email so you can answer with one click.
3. Make sure your DNS records are in place
Your domain needs an SPF record that includes your email provider, DKIM turned on in your email provider’s settings, and a basic DMARC record. These are short text entries added where you manage your domain, like Namecheap, GoDaddy or Cloudflare. Your email provider’s help pages walk through the exact values.
4. Test again, then keep testing
Send another test from a personal address and confirm it lands in your inbox. Then put a reminder on your calendar to test the form once a month. Plugins update, settings change, and you won’t know the form broke until a customer mentions it, if they ever do.
The short version
Fill out your own contact form right now and see where the message lands. If it’s in spam, the fix is usually an SMTP plugin connected to your real email account plus a few DNS records. It takes an hour, and it might be the most valuable hour you spend on your website this year.
Want a second pair of eyes on it? Book a free 20-minute call and we’ll take a look.
