Hey everyone! I run a website where users receive emails for actions like registration and password resets. However, with a surge in spammers trying to create accounts, I end up sending hundreds of emails daily, which is raising red flags with major email providers and causing them to block my IP. I have all the security measures like DKIM, SPF, and DMARC in place, but those don't seem to help because the emails are technically legitimate. When I check my IP's status, it's flagged as suspicious, which baffles me because my email server is separate from my web server. I've made sure I'm not compromised, and I'm not running any proxy services. I'm wondering what actions I should take to prevent this from happening. Should I consider requiring phone numbers to filter out bots? How do other providers manage high email traffic without getting blocked?
1 Answer
Your issue probably stems from the spam signups. Those fake email addresses can really hurt your sender reputation. The best thing you can do is find a way to limit those spammers from signing up in the first place. Alternatively, you might want to use a service like Amazon SES or Mailchannels, which rotate IPs and can improve your deliverability.
I get your point, but how can we still send confirmation emails without relying too much on those services? Captchas are already in place, but they aren't foolproof anymore.