Trace the message through four stages
- Submission: did the form accept and record the enquiry?
- Generation: did WordPress create the expected message with valid addresses?
- Transport: did an authorised mail service accept and send it?
- Delivery: did the recipient server accept, filter, quarantine or reject it?
“Form sent” may only confirm the first or second stage. It does not prove arrival in the recipient's inbox.
Confirm the form is working
Submit a controlled test using a unique subject. Check form logs or stored entries if available. Verify that the recipient address is correct and that validation or anti-spam rules are not silently discarding the request.
Use an authorised sending service
WordPress commonly relies on the hosting server's mail configuration. A transactional mail provider or authenticated mailbox can provide clearer delivery logs and align the sender with the domain. Choose a method appropriate to volume and data sensitivity, then store credentials securely.
Fix the message identity
The From address should normally use a domain the sending service is authorised to send. Put the visitor's address in Reply-To rather than pretending the message was sent directly from their external domain. This avoids authentication conflicts and still allows a normal reply.
Configure SPF, DKIM and DMARC
Inventory every service that sends as the domain, including Microsoft 365, the website, accounting and newsletters. Configure the records using each provider's instructions. Do not create multiple independent SPF records, and do not move DMARC to a strict policy until legitimate sources have been identified and tested.
Check delivery evidence
- Transactional provider logs and message identifiers
- Hosting or application error logs
- Bounce messages and rejection codes
- Spam, quarantine and inbox rules at the recipient
- Domain authentication results in received-message headers
Protect enquiry data
Forms may contain personal or confidential information. Collect only what is needed, restrict access to stored entries, set retention expectations and avoid exposing secrets in logs. Test the privacy information and any consent wording as well as the mail transport.
Keep monitoring after the fix
Run a scheduled form test, keep an alternate contact route visible and monitor provider failures. WordPress's troubleshooting documentation explains that mail delivery depends on server configuration; your mail provider supplies the authoritative authentication instructions.
Need help applying this to your business?
Vengera can assess the current setup, explain the priorities and scope any practical improvements.