Payments are experiencing issues due to temporary restrictions in Russia. If your payment does not go through, please submit a support request.Our support team is available 24/7 — we are always here to help with hosting and server issues.We are now accepting requests for dedicated server rental and colocation services in our data center.Reminder: we recommend enabling backups for additional data protection.A new VPS/VDS lineup with NVMe storage and improved performance is now available.Maintenance work on some servers has been completed. All services are operating normally.
Article6 min readViews0

The Path of an Order Email from the Store to the Inbox

A green status in the sending panel may only confirm part of the route. Where to look for a lost notification, how SPF, DKIM, and DMARC are related, and what a test email actually checks.

Comments 0

Unsigned envelopes in separate compartments of a metal mailbox. Generated illustration.
In this article

The store has an order, but the buyer has not received a confirmation email. Yet the sending panel may show a green status. To find the cause, you must first determine exactly what this status confirms: message creation, acceptance by a mail service, or transfer to the recipient server. The final stage also does not guarantee delivery to the inbox.

Start with one specific case: order time, expected send time, recipient address, and message ID in the available log. You must match a single attempt, not all emails sent that day. When sharing details with a developer or provider, use an authorized channel and remove order content if it is not required for diagnostics.

First, find the last confirmed segment

If a record for the email never appeared, checking the email reputation is premature. Perhaps the store event did not generate a notification, the template does not match the selected site, or queue processing has stopped. In a 1C-Bitrix store, it is critical to link the order event to its intended email template and the actual sending mechanism. An additional module may use its own routing path.

If the message was created but not passed to the sending service, you need the connection error, the service response, and the queue status. Expired credentials, exceeding limits, or network unavailability are distinct causes. Restarting the entire site does not explain any of them. It may only alter the situation before the team saves useful data.

If the sending service accepted the message, check the result of the next transition to the recipient's mail system. Temporary failures and permanent rejections require different handling. Save the full error code and explanation: the same everyday description 'not delivered' can hide a busy server, a non-existent mailbox, or a rejection due to security policies.

Acceptance of a message by the receiving system means transferring responsibility for further processing to it, but not human reading. The message could have ended up in spam, a separate category, corporate mail quarantine, or under a user rule. Therefore, the provider's status must be interpreted according to their documentation, not by translating the word 'delivered' as 'the buyer saw it'.

Three authentication checks answer different questions

SPF checks whether the sending server is authorized for the technical sender's domain. DKIM allows verification of the message signature from a specific domain. DMARC links the authentication result to the domain in the visible sender field. It is this link that is often lost after connecting a new mailing service or migrating a website.

A message may have different domains: the one visible to the human, the technical return domain, and the signature domain. Therefore, a successful SPF check alone does not prove a successful DMARC check for the visible sender. To pass DMARC, a successful and aligned path through either SPF or DKIM is sufficient. The alignment mode determines whether an exact domain match is required or if alignment at the organizational domain level is permitted.

DMARC matches the visible sender's domain with a successful SPF or DKIM check.
Simplified domain alignment scheme. Passing the check does not guarantee the message will land in the inbox.

Hypothetical example: the email shows the store as the sender, and SPF confirms only the provider's technical domain, which does not match the store's domain. Meanwhile, the provider correctly signed the email with the store's domain, and the DKIM check is successful. Such a path can pass DMARC via DKIM. Requiring all domain names in the envelope to be identical would be incorrect.

Focus on the results added by the trusted receiving system, not an arbitrary string within the message. Different email services present this information differently. In particular, the Yandex KIT documentation notes that the separate DMARC result line may be absent in Yandex Mail. The mere absence of the familiar label does not prove a failed check: you must analyze the signature, domains, and the active policy.

Do not copy a ready-made DNS record from instructions intended for another provider. A store may simultaneously send emails from its website, CRM, and employee mailboxes. The configuration must account for these actual sources. Changing the policy without inventorying them can disrupt existing correspondence. This section describes the diagnostic procedure; modifying DNS requires a separate plan tailored to the specific domain.

If authentication succeeds, the investigation continues

Mail systems evaluate not only sender authenticity. Reputation, complaints, sending patterns, and content matter. Successful SPF, DKIM, and DMARC are not a guaranteed pass to the inbox. Official Gmail guidelines do not explicitly guarantee that emails from external providers will bypass spam filters.

Check whether order confirmation shares a queue with a large promotional blast. Even without a complete failure, delays can render the message useless: the buyer may have already contacted support or placed a duplicate order. Service notifications should be monitored separately by processing time and errors, while maintaining a clear link to the order. This does not mean that changing the domain alone will fix the reputation.

Also examine the email itself. The sender must be recognizable, the subject line must match the action, and the content must explain the order status. The promise "order paid" cannot be sent based solely on order creation. Links to personal data and internal secrets must not appear in general diagnostic logs. The full email source often contains more information than is needed for an initial support inquiry.

A low open rate also does not prove non-delivery. Email clients restrict image loading, and open measurement depends on the mechanism used. To investigate a specific loss, an event chain and server responses are more useful. To monitor the flow, use the failure rate and latency by recipient mail systems, if such data is available.

The test email must follow the same route

An email sent manually by an employee may travel through a different infrastructure. It does not verify the notification route from the online store. For a control scenario, you need an authorized test order or a standard check of the exact mechanism serving customers. Do not send test messages to the customer base.

After the fix, send a new message to the controlled test mailboxes and compare all available stages. An old email will not acquire a new signature, nor will it be re-verified just because the DNS record has been corrected. The result from one mailbox is useful, but it does not confirm delivery to all mail systems.

On the store side, a lost notification must not hide the order itself. The customer needs a clear checkout result and an accessible way to check the status, while the employee needs an order record regardless of email delivery. This allows the investigation to end with a specific conclusion: for example, the message was created, accepted by the sending service, and rejected by the receiving system for a defined reason. Such a conclusion enables fixing a single component instead of endlessly changing email templates.

Discussion 0

Share your experience and ask questions. Comments without links appear after editorial review.

No comments yet. Start the discussion.