For the last month I have been receiving emails from an email address "MAILER-DAEMON@shopify.com" with the following message. At the time of receving the message I haven't sent out any emails and in my sent box there is nothing showing as sent.
I have no clue what it means or why it keeps appearing. Has someone got access to my email and sending out spam?
I'd be grateful if someone could let me know whats going on.
FYI I've replaced my details such as store name etc but highlighted in bold where I've done that and it seems shopify has removed some HMTL for it being invalid :/
Also it keeps changing the email recipient every time I get a message (which is about once a week at the moment)
This is the mail system at host smtp.shopify.com.
I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.
For further assistance, please send mail to postmaster.
If you do so, please include this problem report. You can
delete your own text from the attached returned message.
The mail system
<edited>: host mta.service.uci.edu[220.127.116.11] said: 550 5.1.1
<edited>... User unknown (in reply to RCPT TO command)
Reporting-MTA: dns; smtp.shopify.com
X-Postfix-Sender: rfc822; (My stores customer support email)
Arrival-Date: Sat, 4 Jan 2020 13:02:18 +0000 (UTC)
Remote-MTA: dns; mta.service.uci.edu
Diagnostic-Code: smtp; 550 5.1.1 <<edited>>... User unknown
Return-Path: (My stores customer email)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=shopify.com; s=mail;
Date: Sat, 04 Jan 2020 13:02:18 +0000
From: (My stores Name) (My stores Customer support Email)
Subject: (My store name) password reset
Typically these emails would come from using a third-party domain that requires SPF records. The bounce-back occurs when our system attempts to send an email on your behalf (emails found in Settings/Notifications), but the email client rejects the email as we are spoofing the customer email listed in Settings/General.
What you'll want to do is add an SPF record (txt record) to your domain:
Value: v=spf1 include:shops.shopify.com ~all
Once added, it can take up to 24 hours to take effect but should resolve the issue you're seeing.
Let me know if you have any questions!
For security reasons, I have edited out the email shown in your reply
Many thanks to @GreenGiant for posting this up. So I am using Zoho mails and I added the SPF and DKIM records for the emails. And asked by you, I have added an SPF record for Shopify too, but the error persists, as shown by @GreenGiant in their post. Am I supposed to remove the DKIM record too, as quoted in this post:
Also, since I was using Omnisend, I was asked to remove my DMARC records too! If I remove the DKIM as well, am I putting the integrity of my mails to jeopardy? Any help is appreciated!
So I got this resolved but not by the method mentioned above.
Basically if you look in your email list you will have random email addresses that are obviously spammy which have signed up to your website for an account. From what I understand bots sign up to random sites and add random emails in their too.
So the reason your getting a mailer daemon email is that it is a bounce back from the email system when it send a welcome email to these spammy emails.
In order to stop getting these spammy emails signed up to your website, you need to add a recaptcha to your website.
The way I did this was by contacting shopify's customer service and asking them to activate the recaptcha.
I believe they have a setting that allows them to activate the recaptcha on your website which is why its better to ask shopify support to do it than mess around yourself.
Hope that helps.
@GreenGiant thanks for that advise, but I don't think so that is my problem. My store is not live yet, and I was just trying to send a test notification. You see, I am trying to send a test notification from here
Essentially this test mail is going from my support email ID to my admin email ID (from customer email to store contact email, which is specified at the General settings). I am hosting them on my custom domain by Zoho. Henceforth I believe it is not the issue that you have stated. @Peter can suggest something here maybe. @GreenGiant did you face the same issue too, while you were in your testing phases?
Apologies for the delay. Our Community Forums are not a regularly monitored area by Shopify employees so we would recommend reaching out to our support if you require more immediate support with the issue you're having. It is hard to say what the issue could be from here so I have reached out to you via email to verify your store so I can take a look. If you can reply to that email with the requested information then we can work together to get this resolved.
I have the same problem with my mail account. In the message above you wrote, that we need to add an SPF record (txt record) to the domain:
Value: v=spf1 include:shops.shopify.com ~all
But when I try to enter the Name '@' my provider "Strato" says it is impossible to just add an '@'. Can you help me in this case?
If @ doesn't work, then you can likely leave it blank if the system allows it. If not, then I'd recommend reaching out to your provider as they'd be able to provide insight into what value you should enter into this field.