Why am I getting emails from MAILER-DAEMON@shopify.com about a password reset?

Highlighted
New Member
2 0 1

Hi All,

 

For the last month I have been receiving emails from an email address "MAILER-DAEMON@shopify.com" with the following message. At the time of receving the message I haven't sent out any emails and in my sent box there is nothing showing as sent. 

 

I have no clue what it means or why it keeps appearing. Has someone got access to my email and sending out spam? 

 

I'd be grateful if someone could let me know whats going on.

 

FYI I've replaced my details such as store name etc but highlighted in bold where I've done that and it seems shopify has removed some HMTL for it being invalid :/ 

 

Also it keeps changing the email recipient every time I get a message (which is about once a week at the moment)

 

____________________________

This is the mail system at host smtp.shopify.com.

I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

The mail system

<edited>: host mta.service.uci.edu[128.200.91.69] said: 550 5.1.1
<edited>... User unknown (in reply to RCPT TO command)
Reporting-MTA: dns; smtp.shopify.com
X-Postfix-Queue-ID: E9BE1E525C
X-Postfix-Sender: rfc822; (My stores customer support email)
Arrival-Date: Sat, 4 Jan 2020 13:02:18 +0000 (UTC)

Final-Recipient: rfc822;<edited>
Original-Recipient: rfc822;<edited>
Action: failed
Status: 5.1.1
Remote-MTA: dns; mta.service.uci.edu
Diagnostic-Code: smtp; 550 5.1.1 <<edited>>... User unknown

Return-Path: (My stores customer email)
X-Path-Id: E9BE1E525C
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=shopify.com; s=mail;
    t=1578142938; bh=W+5RMXAWceJmlZaFoUbj5J/1vecjmrrBJFWppv5JeSE=;
    h=Date:From:To:Message-ID:Subject;
    b=Rew5o8DE4G/1mQhXUtTmZi4/tnItejtUs3AUMD/PJO0d21wznbxw+q5+R46flep+h
     NK+SV7Sago37+WvJYOVkYtNr7Udtp0rTzWCfkgaLqpCrmyuAaHE16pyPfwtY3mC+wb
     XatI2NUMOVloVVapWtScor4fJQ+zxcK5bwLaj/V8=
X-Path-Id: DB5FE2A0002
Date: Sat, 04 Jan 2020 13:02:18 +0000
From: (My stores Name) (My stores Customer support Email)
To:<edited>
Message-ID: <5e108cdad55fa_15aa93f9010acd9a86053f@shopify.com>
Subject: (My store name) password reset
Mime-Version: 1.0
Content-Type: multipart/alternative;
boundary="--==_mimepart_5e108cdad521b_15aa93f9010acd9a860490";
charset=UTF-8
Content-Transfer-Encoding: 7bit

 

 

Highlighted
Shopify Staff
Shopify Staff
1649 100 361

Hey, @GreenGiant.

 

Typically these emails would come from using a third-party domain that requires SPF records. The bounce-back occurs when our system attempts to send an email on your behalf (emails found in Settings/Notifications), but the email client rejects the email as we are spoofing the customer email listed in Settings/General. 

 

What you'll want to do is add an SPF record (txt record) to your domain: 

 

Name: @ 

Value: v=spf1 include:shops.shopify.com ~all20-01-hkqwx-zz2dj

 

Once added, it can take up to 24 hours to take effect but should resolve the issue you're seeing. 

 

Let me know if you have any questions!

For security reasons, I have edited out the email shown in your reply

Peter | Social Care @ Shopify
 - Was my reply helpful? Click Like to let me know! 
 - Was your question answered? Mark it as an Accepted Solution
 

To learn more visit the Shopify Help Center or the Shopify Blog

Highlighted
Tourist
11 0 2

I have been getting them to and I just updated my TXT so we will see if it works.

 

Thanks

0 Likes
Highlighted
Tourist
3 0 0

Many thanks to @GreenGiant for posting this up. So I am using Zoho mails and I added the SPF and DKIM records for the emails. And asked by you, I have added an SPF record for Shopify too, but the error persists, as shown by @GreenGiant in their post. Am I supposed to remove the DKIM record too, as quoted in this post:

 

https://community.shopify.com/c/Shopify-Discussion/Shopify-DNS-Zoho-Mail-Configuration/td-p/600938

 

Also, since I was using Omnisend, I was asked to remove my DMARC records too! If I remove the DKIM as well, am I putting the integrity of my mails to jeopardy? Any help is appreciated!

0 Likes
Highlighted
New Member
2 0 1

Hi,

So I got this resolved but not by the method mentioned above.

Basically if you look in your email list you will have random email addresses that are obviously spammy which have signed up to your website for an account. From what I understand bots sign up to random sites and add random emails in their too.

So the reason your getting a mailer daemon email is that it is a bounce back from the email system when it send a welcome email to these spammy emails.

In order to stop getting these spammy emails signed up to your website, you need to add a recaptcha to your website.

The way I did this was by contacting shopify's customer service and asking them to activate the recaptcha. 

I believe they have a setting that allows them to activate the recaptcha on your website which is why its better to ask shopify support to do it than mess around yourself.

Hope that helps.

@guy_fawkes @Fabologist 

0 Likes
Highlighted
Tourist
3 0 0

Hi again

 

@GreenGiant thanks for that advise, but I don't think so that is my problem. My store is not live yet, and I was just trying to send a test notification. You see, I am trying to send a test notification from here

Capture_1.PNG

 

Essentially this test mail is going from my support email ID to my admin email ID (from customer email to store contact email, which is specified at the General settings). I am hosting them on my custom domain by Zoho. Henceforth I believe it is not the issue that you have stated. @Peter can suggest something here maybe. @GreenGiant did you face the same issue too, while you were in your testing phases?

0 Likes
Highlighted
Tourist
3 0 0

Does anyone take responsibility of posts made here, or do they just lie around for nobody to answer them?  

0 Likes
Highlighted
Shopify Staff
Shopify Staff
1649 100 361

@guy_fawkes 

Apologies for the delay. Our Community Forums are not a regularly monitored area by Shopify employees so we would recommend reaching out to our support if you require more immediate support with the issue you're having. It is hard to say what the issue could be from here so I have reached out to you via email to verify your store so I can take a look. If you can reply to that email with the requested information then we can work together to get this resolved. 

Peter | Social Care @ Shopify
 - Was my reply helpful? Click Like to let me know! 
 - Was your question answered? Mark it as an Accepted Solution
 

To learn more visit the Shopify Help Center or the Shopify Blog

0 Likes
Highlighted
New Member
4 0 0

Hello @Peter

I have the same problem with my mail account. In the message above you wrote, that we need to add an SPF record (txt record) to the domain: 

Name: @ 

Value: v=spf1 include:shops.shopify.com ~all

But when I try to enter the Name '@' my provider "Strato" says it is impossible to just add an '@'. Can you help me in this case?

Best regards. 
Isabelle 

0 Likes
Highlighted
Shopify Staff
Shopify Staff
1649 100 361

@easy2 

If @ doesn't work, then you can likely leave it blank if the system allows it. If not, then I'd recommend reaching out to your provider as they'd be able to provide insight into what value you should enter into this field. 

Peter | Social Care @ Shopify
 - Was my reply helpful? Click Like to let me know! 
 - Was your question answered? Mark it as an Accepted Solution
 

To learn more visit the Shopify Help Center or the Shopify Blog

0 Likes