Square Online Store: Confirmation emails are labeled as spam

[erfigge]

The title of this thread has been edited from the original: Square online spf settings

So, all of the order confirmation emails that get sent to me are getting labeled as spam.  I have done some reading and figured out that since Weebly (square online store) is generating the emails using my domain email address they are being marked as spam. 

So, the question is what spf txt record do I need to put in my domain to allow those emails to not get grabbed as spam?

[CColotti]

I mean....the issue does not get ANY clearer than this...

https://app.screencast.com/WwLm3kfZbyM4C 

Weebly emails are NOT showing as DMARC capable...so why is this still a problem in 2024?

Also this is more than disturbing:  https://dmarc.io/source/weebly/

Considering the new rules from google and yahoo that are going into effect.

"The DMARC quarantine policy tells the receiving server to place all emails that fail DMARC checks either in the SPAM/JUNK folder or to flag the suspicious mail as not authentic. In other words: email is still delivered, and it is up to the receiver to determine what quarantine means."

So basically...all DMARC rules just to use Square have to be DISABLED in order to prevent spam or worse non delivery if set to REJECT 

[CColotti]

The ONLY way I can see to even work around this is to use a DIFFERENT domain just for square/weebly, that has a DMARC rule but ZERO authentication.  That way it will pass the new google/yahoo requirements to "have" a DMARC but the rules don't say a strict policy needs to be set just that a record is in place...this is really just unreal that weebly/Square have not started to address this.

[CColotti]

More info on the Google/Yahoo Feb 2024 change:  https://www.brevo.com/blog/gmail-and-yahoo-sender-requirements/

[CColotti]

I setup a different domain with a DMARC record of none and the sendgrid SPF and these weebly emails still go to spam.  the clock is ticking on this from Google/Yahoo.  Why Can't I get any reply from support on this?

[KreativeRides]

I switched to a different platform due to all my emails going to spam and no support. If they don't care enough to help I don't want to give them my money, plus no telling what else they won't help with in the future. 

[BernadetteA]

I'm sorry for the frustration, @KreativeRides and that you had to find an alternative for your service.

I will be forwarding this feedback to the support team.

Best wishes to you with your new provider. 

[CColotti]

I have not changed that was someone else.  However this issue has to be addressed as sending email on behalf of someone’s domain. This is becoming a requirement and yes I need this escalated because your team hasn’t addressed the new requirements.   Iv tried a few workarounds from the domain side and it doesn’t help.  I’d love to speak to a real person about this as I’ve had a lot of experience as an IT person with email delivery.   I’m using square mostly for POS but the online is an add on we plan on using and email deliverability for an online platform is something g I can’t believe has been ignored.  You’re not the only one BTW but it’s amazing to me 

[frances_a]

We understand this is something you need, @CColotti 

If you'd like to speak with an agent on the phone, you can click this link while being logged in to your account. 

Phone support is available Monday-Friday 6:00 AM - 6:00 PM PST. 

Our support agents will be able to escalate your concern so our engineers can take a look. 

Thank you✨

[CColotti]

This is something everyone needs to be compliant for email sending from weebly/Square online.  It's so much bigger than me alone...

[aphatte]

I fully agree! I’ve been having the same issue, with no support. Almost at the stage of changing provider, as this is really a basic function (order emails) that just isn’t here.

[Summer2024]

Hey there @CColotti, I would recommend reaching out to our Square Online support team. They can be reached by phone 6am PST - 6pm PST Monday-Friday and 8am PST - 5pm PST Saturday and Sunday. They will be able to take a deeper look into this issue and escalate to engineers if necessary. 

[CColotti]

I’ll plan on doing that but again this isn’t a “me” problem this is an “everyone” problem 

[CColotti]

here's an update for all those watching this issue:

My sales rep has escalated this internally and said he may have an answer.

At the same time after weeks of back and forth with support just not getting it...I got this reply

"I received the update that, starting today, you will receive an alert email including a link to the values to enter on your domain. Once you have added the records, please let me know so the team in charge can check that your sender profile is correctly set up according to the new requirements."

I have yet to see this magic email.

I also called out to the CTO of weebly on LinkedIn about discussing this issue...with no reply...
https://app.screencast.com/zPESG3OUVBKKO

a dozen other email senders have posted blogs about this including Sendgrid which is the back end provider weebly uses

https://www.feedblitz.com/pulling-back-the-curtain-on-email-deliverability/

https://sendgrid.com/en-us/blog/new-sending-requirements-for-gmail-yahoo

Until I see the magic email or hear back from my sales rep then it's not actually fixed yet until we can insert the proper DKIM records into the domain your weebly email profile is configured to use

[pg11q3]

Has there been any update on this?  I just bought a subscription to square and I’m already regretting it due to this and other shortcomings I’m discovering.  But customer order emails going to spam is totally unacceptable. 

[CColotti]

Absolutely nothing....I was going back and forth and was given records to add, but then never heard back on the next steps and another rep took the case and started all over again with "we don't support this" so I have pretty much given up.  My sales rep was supposed to facilitate a call with someone but that has not happened either.  All of my testing keeps showing the same results...nothing is properly signed...period.

[pg11q3]

Thank you for the reply.  And this is unbelievable. Do they actually not want to have a proper e-commerce solution?  I am so regretting my decision to use square, as I’m sure you are too. 

[CColotti]

I am not completely regretting it, for my food truck it was the best option of all the POS systems.  The square online issue is b/c they bought WEEBLY and the weebly side is clueless about email sending not "square" specifically.  It is insane that nobody understands you can's SEND AS someone's domain anymore just by asking them to put a FROM address into a field. 

Until this is sorted I use a different domain variation with NO DMARC blocking but it still goes to spam..  The unsigned has "the" in front of it so I can use that with Square Online vs my primary domain but it hasn't helped.

[pg11q3]

Although I was a software developer in my previous life, I’m completely clueless about email validation, DMARC, spf, etc.  I’m just setting up as a hobby artist and square POS will be perfect for my in person markets, and I want an online presence and the seamless integration between in person and online sales would be great. I can live with the restrictive shipping profiles but the orders to spam thing I just can’t… feels much too scammy to me. 

[CColotti]

It's not hard there are tools out there but DKIM/SPF and DMARC are not the same thing and I have tried to explain that to the support folks now for months.  Authentication of the domain is done via EITHER SPF or DKIM signing.  Once authenticated then you apply a DMARC POLICY to the domain to tell other providers if it's to be accepted, rejected, etc.  They are used together but they are just not the same thing.  SPF has been around for decades.  DKIM is the newer version of authentication.  DMARC is the policy engine.

[pg11q3]

Thanks for the explanation.  I’m going to send a message to support asking them for DKIM, and when they’re planning to implement DMARC, and see what happens. I’m still with the “30 days no hassle money back guarantee” so I might pull the plug if I don’t make any progress. 

[CColotti]

Well to be clear YOU setup DKIM with settings provided by “someone”.  In the case of mailchimp brevo etc they know how to provide this.  also then DMARC is setup by you on your domain records.  The bottom line is you can’t enforce DMARC without DKIM authentication first which r clearly weekly doesn’t know how to support so around and round we go.