wiki/knowledge/email-marketing/php-mail-smtp-upgrade.md · 668 words · 2026-04-05

PHP Mail vs Professional SMTP — Email Deliverability

Overview

WordPress ships with a built-in email capability that uses PHP's mail() function. While functional in isolation, PHP mail is treated as spam by virtually all major email providers and should never be used in production. Any WordPress site sending form notifications, lead confirmations, or transactional emails via PHP mail is likely losing a significant portion of those messages before they reach the inbox.

This is a silent failure — the site appears to send email, the WordPress dashboard may even show a sent count, but deliverability is near zero.

"If you send an email using PHP, the internet says, oh, this looks like spam, and it blocks it."
— Mark Hope


The Problem: PHP Mail

This is especially damaging when clients are running paid ad campaigns and expecting form leads to arrive via email notification.


The Solution: WP Mail SMTP Pro + SMTP.com

Plugin: WP Mail SMTP Pro

Provider: SMTP.com

Asymmetric's standard choice for client sites. Routes all WordPress email through a dedicated mail server with full authentication:

Authentication Purpose
DKIM Cryptographically signs outbound mail to verify sender identity
DMARC Policy layer that tells receivers how to handle unauthenticated mail
SPF Authorizes specific servers to send mail on behalf of the domain

Together these signals tell receiving mail servers the message is legitimate, dramatically improving inbox placement.

Setup Summary

  1. Install WP Mail SMTP Pro on the WordPress site
  2. Navigate to WP Mail SMTP → Settings
  3. Select SMTP.com as the mailer
  4. Enter the API key (stored in LastPass under the Asymmetric account)
  5. Verify with a test send
  6. Review the Email Log to confirm delivery

Diagnosing an Affected Site

Signs a site is using PHP mail and suffering from poor deliverability:

Recommended check: Visit the site's WordPress admin → WP Mail SMTP → Email Log. If the plugin isn't installed, check Gravity Forms entries directly to see if leads are accumulating unseen.


Client Communication Guidance

When recommending this upgrade to a client:

  1. Frame it as a lead recovery issue, not a technical nicety — they are likely missing real inquiries right now
  2. Recommend a weekly Gravity Forms entry review as an interim measure: clients should log in, scan entries, and mark spam to train the filter — this also ensures no legitimate lead goes unnoticed while the email issue is being resolved
  3. Pair the SMTP upgrade recommendation with any [1] work — both address the same symptom (unreliable lead flow) from different angles

Sources

  1. Form Spam
  2. Akismet Gravity Forms Spam
  3. Clickcease Fraud Protection
  4. Wordfence Considerations