A customer places an order on your website. The order confirmation never shows up. They email you asking if the order went through, or worse, they call their bank and dispute the charge.
Most of the time, the email was sent. It just landed in their spam folder. Gmail, Outlook, and Yahoo have gotten much stricter about mail that cannot prove where it came from, and most small business websites were never set up to prove it.
I found this on my own sites. When I moved eight of my domains behind a new security service this summer, I checked every one of them. My own online print shop was missing one of the three records that tell Gmail "yes, this email is really from us." Every receipt it sent was going out with one leg of its ID missing. The off-the-shelf fixes I found either wanted full access to my domain account, which is a security risk, or assumed I already knew what all of this meant. So I built a simpler path.
How the System Works
Email providers check three short records attached to your domain name. You may hear an IT person call them SPF, DKIM, and DMARC. In plain English, they work like this:
- The Guest List: The first record lists every service allowed to send email on your behalf, like your website, your newsletter tool, and your office email. Mail from anyone not on the list looks suspicious.
- The Wax Seal: The second record lets your email service sign every message with a signature that cannot be faked. The receiving inbox checks the seal against the one on file.
- The House Rules: The third record tells Gmail and Outlook what to do with mail that fails the first two checks, and where to send a report about it.
The tool I built walks a shop owner through all three. You pick the email services you use from a list, and it writes out the exact records you need. If you already have a guest list, it adds to it instead of overwriting it. Then it checks your domain to confirm the records are live, and it can read the hidden "report card" Gmail attaches to every message so you can see a real pass or fail.
Overcoming the Friction
1. Fixing One Thing Without Breaking Another
The most common mistake I see is someone adding a new guest list that replaces the old one. Their website receipts start arriving again, but now their office email lands in spam. The tool reads the existing list first and merges the new entries into it, so turning on one service never quietly locks out another.
2. Not Asking for the Keys to Everything
The easy way to automate this is to ask the business owner for full login access to their domain account. I decided against it. That login can redirect your website and your email anywhere, and no small plugin should be holding it. Instead, the tool gives you copy-and-paste instructions, then double-checks your work from the outside. It takes a few extra minutes, and nothing sensitive is stored.
3. Proof, Not Guesswork
"It should work now" is not good enough when customer receipts are on the line. The final step has you send yourself a test email and paste in Gmail's behind-the-scenes report. The tool reads it and tells you plainly which of the three checks passed and which did not.
The Business Win
- Receipts That Arrive: Order confirmations and password resets reach the inbox, which means fewer "did my order go through?" calls.
- Caught on My Own Shop First: The missing record on my print shop was fixed the same day I found it.
- Set It Once: For most small businesses this is a one-time setup. Once the records are in place, they keep working without anyone touching them.
If you want to check your own business right now, send an email from your business address to a Gmail account, open it, and choose "Show original." If you do not see three lines that say PASS near the top, your customers' spam folders are probably getting some of your mail. The next step for the tool is testing it on a few more live shops before I offer it to other businesses.
Curious what this looks like for something you need built? See more of these side by side on the case studies page.
Top comments (0)