HireWebDeveloper.net

Your website form emails never arrive: the deliverability guide

Why website form notifications land in spam or vanish: PHP mail, SPF, DKIM, DMARC, transactional email. The fix, INR costs, and how to test it yourself today.

The silent killer of Indian small-business websites

The form works. The thank-you message shows. The email never arrives. Weeks pass, leads vanish, and nobody connects the dots. This is the single most common silent failure this desk fixes, and it is almost always the same root cause: the website sends mail the way spammers do, so the world treats it like spam.

The root causes, in order of frequency

  • PHP mail() from shared hosting. The default WordPress/PHP mail path sends from an unauthenticated server. Gmail and Outlook filter it. Sometimes it arrives; often it does not; always it is unreliable.
  • Missing SPF record. Your domain does not declare which servers may send its mail. Receivers guess, and guess spam.
  • Missing DKIM signing. No cryptographic signature, so nothing proves the mail was not forged.
  • No DMARC policy. No instruction on what receivers should do with failures. Gmail and Microsoft increasingly require all three for bulk senders.
  • Reply-to mismatches, free-mail from addresses (the form sending from gmail.com on your domain's behalf), or no from address at all.

The fix, in order

  • Stop sending site mail from your own server. Route form notifications through a transactional provider. Indian-friendly options: Brevo, SendGrid, Amazon SES, Postmark, Zoho Transactional. Free tiers cover most small sites; paid tiers run ₹800–₹3,000/month.
  • Authenticate your domain: add the provider's SPF, DKIM and DMARC records to your DNS. The provider gives you the exact values; this is a 30-minute DNS edit.
  • Send from a real address on your domain (forms@yourbusiness.in), with reply-to set to the inbox you actually read.
  • Verify with a real test: submit your own form, check the inbox, check spam, then send to Gmail, Outlook and a corporate address. Mail-tester tools grade the result.

What it costs, honestly

DIY with a free transactional tier: ₹0 plus a weekend of careful DNS work. Professional setup (provider, DNS, form rewiring, testing, spam protection on the form itself): ₹10,000–₹40,000 one time from a senior, and it permanently ends the "did anyone fill the form?" mystery. Compare that to one lost project: see the lost-leads audit for the arithmetic.

The deeper fix: stop depending on email alone

Email is one leg. Serious lead handling routes every submission to three places: an inbox, a store (a sheet or CRM), and where possible a WhatsApp notification, see the lead routing guide. This desk's builds store every submission in a database as the source of truth, so even if email fails, the lead exists and can be exported. That pattern has saved more businesses than any spam filter.

Test your own site right now

Fill your own form. Wait ten minutes. Check the inbox, the spam folder, and then ask: where would I look if I had not just tested? If the answer is uncertain, the fix above is this week's highest-return spend. Or send the form URL to this desk and get the deliverability fix scoped.

Quarterly, and only when the numbers move

Get the rate report before you negotiate.

Updated rate bands across the major stacks and regions, plus what changed and why. No other email.

Read the current edition →

Ready to put this guide to work?

Six-question brief, scoped quote within two business days, and every term from the contract guide, in the actual contract.