Why are emails sent through Apple Private Relay going to spam?

Summary

Emails sent through Apple Private Relay are often delivered to spam folders due to a combination of factors related to authentication, reputation, and deliverability. Apple's rewriting of email headers, use of shared IP addresses, and the potential for forwarding unwanted mail can disrupt SPF, DKIM, and DMARC authentication, leading mail servers to flag these emails as suspicious. The use of relay servers whose IP addresses may not be widely recognized or whitelisted, coupled with the sharing of Apple's IP reputation, also contributes to deliverability issues. Additionally, machine learning filters in email providers are still adapting to the unique patterns of Apple Private Relay, and a potential for different sending patterns due to hidden email addresses can hinder the establishment of trust with mailbox providers.

Key findings

  • Authentication Failures: Apple Private Relay alters email headers, leading to potential failures in SPF, DKIM, and DMARC authentication, as receiving servers may not recognize the relay as an authorized sender.
  • Reputation Sharing: Senders using Apple Private Relay share Apple's IP reputation, which can negatively affect deliverability if Apple's IPs are not fully trusted or have a mixed reputation.
  • IP Address Recognition: Receiving mail servers may not recognize the IP addresses of Apple's relay servers as legitimate senders, causing them to be treated as spam.
  • Machine Learning Adaptation: Email providers' machine learning filters are still learning to differentiate between legitimate senders using Apple Private Relay and spammers, leading to potential misclassification.
  • Forwarding Issues: The 'Hide My Email' feature generates random addresses, and forwarding can trigger spam filters or authentication failures.

Key considerations

  • Monitor Deliverability: Carefully monitor email deliverability rates, especially for users using Apple Private Relay, to identify and address potential issues proactively.
  • Implement Strong Authentication: Ensure strong email authentication protocols (SPF, DKIM, DMARC) are correctly configured to minimize the chances of emails being flagged as spam.
  • Provide User Guidance: Consider informing users who sign up with Apple Private Relay to check their spam or junk folders for your emails and provide instructions on how to whitelist your sending address.
  • Evaluate Relay Impact: Assess the overall impact of Apple Private Relay on your email program and consider whether the benefits outweigh the potential deliverability challenges; if necessary, consider alternate sign-up mechanisms
  • Header Analysis: Compare email headers of messages delivered to the inbox versus those marked as spam to identify any patterns and potential causes of spam classification.
  • Contact Apple: Report issues with Apple Private Relay directly with Apple to help improve service performance.

What email marketers say
11Marketer opinions

Emails sent through Apple Private Relay often end up in spam folders due to several interacting factors. While Apple Private Relay signs emails with SPF and DKIM, authenticating them, some receiving mail servers may not recognize Apple's relay IP addresses as legitimate senders. The relay changes the email's sending path, potentially causing authentication checks (SPF, DKIM, DMARC) to fail, especially with forwarding. This can lead to a poor sender reputation, as email providers assign scores based on sending behavior. The relaying IP address might not be whitelisted, and rewrites email headers causing authentication to fail. Ultimately, factors like sender reputation issues and authentication problems contribute to the deliverability issues with Apple Private Relay.

Key opinions

  • Authentication Issues: Apple Private Relay can cause SPF, DKIM, and DMARC authentication to fail due to header rewriting and altered sending paths.
  • Reputation Problems: Shared IP reputation with Apple Private Relay can negatively impact deliverability if Apple's IPs aren't fully recognized or have mixed reputations.
  • IP Whitelisting: Relaying IP addresses used by Apple Private Relay may not be whitelisted by all ISPs and ESPs.
  • DMARC failures: Forwarding might cause DMARC failures as the email passes through Apple's relay.

Key considerations

  • Monitor Deliverability: Regularly monitor email deliverability metrics, especially for users using Apple Private Relay, to identify and address potential issues.
  • Authentication Setup: Ensure proper email authentication setup (SPF, DKIM, DMARC) to minimize deliverability problems, even when using Apple Private Relay.
  • Check IP Reputation: Continuously check and maintain a good sender reputation to mitigate the risk of emails being filtered as spam.
  • Evaluate Opt-out: Consider whether to discontinue 'Sign in with Apple' if deliverability issues become too problematic, balancing this with user convenience.
Marketer view

Email marketer from Reddit suggests it might be an authentication issue that causes emails sent via Apple Private Relay to go to the spam folder. The poster suggested it has to do with DMARC failures because of the forwarding.

October 2022 - Reddit
Marketer view

Email marketer from Mailjet explains that one reason emails go to spam is due to poor sender reputation. If a sender's IP address or domain has been associated with spam in the past, email providers are more likely to filter their emails as spam. This could be due to sending unsolicited emails, having low engagement rates, or being listed on blocklists.

August 2022 - Mailjet
Marketer view

Email marketer from Litmus notes that with Apple Private Relay, the service rewrites email headers, which can cause authentication protocols like SPF, DKIM, and DMARC to fail if not properly configured. Since the relay effectively becomes the sender, the recipient server may not recognize the email as authorized, leading to spam placement.

August 2022 - Litmus
Marketer view

Email marketer from Reddit suggests that Apple Private Relay emails might be going to spam because the receiving mail server doesn't recognize the relay's IP address as a legitimate sender. This can happen because Apple uses a vast network of relay servers, and not all mail servers have caught up with recognizing them.

January 2022 - Reddit
Marketer view

Email marketer from GlockApps suggests that the relaying IP address may not be whitelisted with some ISPs and ESPs. As the Apple Private Relay changes the originating IP address, it can result in mails failing validation checks that rely on IP allow lists. This will see the messages treated as spam

November 2024 - GlockApps
Marketer view

Email marketer from Sendinblue suggests that emails sent through Apple Private Relay may experience deliverability issues due to the relay's impact on email authentication protocols like SPF, DKIM, and DMARC. The relay changes the email's sending path, which can cause these authentication checks to fail, leading email providers to flag the messages as spam.

September 2024 - Sendinblue
Marketer view

Email marketer from Email Geeks updates that mail going through Apple Private Relay is signed with Apple SPF and DKIM and is therefore passing DMARC. The marketer leans towards a possible Apple reputation issue at Gmail.

January 2025 - Email Geeks
Marketer view

Email marketer from Email Geeks describes a case where emails via Apple Private Relay consistently go to spam in Gmail, even with passing authentication. The client is considering discontinuing the 'sign in via Apple' option.

July 2021 - Email Geeks
Marketer view

Email marketer from Constant Contact explains the content can trigger spam filters. Although it's unlikely in this context, they mention using spam trigger words can cause emails to be sent to spam.

July 2024 - Constant Contact
Marketer view

Email marketer from EmailToolTester explains that sender reputation is a score that email providers assign to each sending IP address and domain, based on their sending behavior. A poor sender reputation can lead to emails being filtered as spam. Factors affecting sender reputation include sending volume, spam complaints, engagement rates, and authentication practices.

October 2021 - EmailToolTester
Marketer view

Email marketer from Validity explains that if the recipient's mail server can't verify that the email is coming from an authorized source, it's more likely to flag the message as spam. This can happen because the sending server's IP address doesn't match the authorized IP addresses in the sender's SPF record, or because the DKIM signature doesn't validate.

June 2022 - Validity

What the experts say
8Expert opinions

Emails sent via Apple Private Relay often land in spam due to a complex interplay of factors. Apple's system rewrites email headers and uses shared IP addresses, impacting authentication protocols like SPF, DKIM, and DMARC. The relay's potential for forwarding unwanted mail can also lead to spam filtering. Senders share Apple's authenticated reputation, making deliverability Apple's responsibility. Machine learning filters may need time to differentiate senders using the relay. Limited sender control exists, and the situation may improve as filters adapt. It's advisable to monitor deliverability and inform users to check their spam folders.

Key opinions

  • Header Rewriting & Authentication: Apple rewrites email headers when using Private Relay, which can disrupt authentication processes like SPF, DKIM, and DMARC, leading to emails being flagged as spam.
  • Shared Reputation: Senders using Apple Private Relay share Apple's IP reputation, making deliverability dependent on Apple's practices and potentially affecting inbox placement.
  • Machine Learning Filters: Email providers' machine learning filters may not yet be fully adapted to distinguish senders using Apple Private Relay, resulting in misclassification as spam.
  • Limited Sender Control: Senders have limited control over deliverability when using Apple Private Relay because Apple handles the authentication and IP reputation.

Key considerations

  • Monitor Deliverability: Carefully monitor deliverability rates, particularly for emails sent through Apple Private Relay, to identify and address potential issues promptly.
  • Inform Users: Consider informing users who sign up with Apple Private Relay to check their spam or junk folders for your emails, as they might be misclassified.
  • Header Analysis: Compare headers of emails delivered to the inbox and those marked as spam to identify differences and potential triggers for spam filters.
  • Reach Out to Apple: If deliverability issues persist, consider contacting Apple's postmaster page to report and seek assistance.
Expert view

Expert from Email Geeks says that it is likely a temporary issue until machine learning filters catch up and differentiate between senders using Apple Private Relay, but this could take months. Reaching the inbox is Apples responsibility with their DKIM signature.

October 2024 - Email Geeks
Expert view

Expert from Email Geeks explains that using Apple Private Relay means sharing the authenticated reputation of every company that uses privaterelay.appleid.com, placing inbox deliverability in Apple's hands. Suggests alerting users to check their bulk folder.

June 2021 - Email Geeks
Expert view

Expert from Email Geeks confirms that Apple is wholly rewriting the headers to cope with the DMARC problem.

May 2023 - Email Geeks
Expert view

Expert from Email Geeks confirms that there is not much senders can do with apple private relay and are at Apple's mercy because they are using a different from address and the machine learning filters don't have a lot to grab on to in order to split out the different senders. Until ML filters catch up, everyone using Apple Private Relay is sharing the same reputation.

March 2022 - Email Geeks
Expert view

Expert from Email Geeks suggests comparing headers between emails sent to the Apple Private Relay address and the actual email address. If nothing is found, reach out to Apple via their postmaster page. Also suggests adjusting DMARC from reject to none, although is doubtful that it would do anything.

November 2022 - Email Geeks
Expert view

Expert from Spamresource.com explains that email deliverability issues are complex. One reason is that Apple hides actual email addresses, leading to potentially different sending patterns. This can lead to messages being filtered as spam since the new address hasn't established a reputation or trust with mailbox providers.

July 2024 - Spamresource.com
Expert view

Expert from Email Geeks suggests that Apple Private Relay might be forwarding mail that users don't want, leading Gmail to filter it as spam. Mentions that Apple might be rewriting headers to not break authentication.

January 2025 - Email Geeks
Expert view

Expert from Word to the Wise, Laura Atkins, explains that email privacy initiatives like Apple's MPP might affect authentication. The article explores how such initiatives change message content, and this alteration of content impacts authentication results (DKIM, SPF, DMARC), potentially causing deliverability issues and raising the likelihood of emails landing in the spam folder.

December 2021 - Word to the Wise

What the documentation says
4Technical articles

Emails sent through Apple Private Relay are often flagged as spam due to issues with email authentication during the forwarding process. The 'Hide My Email' feature generates random email addresses, which, when forwarded, can trigger spam filters. Standard email authentication protocols like SPF, DKIM, and DMARC can fail during forwarding, as the original sender may not be authorized to send on behalf of the forwarded address. These authentication failures can lead email providers to mark the messages as spam or reject them altogether.

Key findings

  • Forwarding Issues: Forwarding emails through Apple Private Relay's 'Hide My Email' can trigger spam filters due to the nature of randomly generated addresses.
  • SPF Failures: Email forwarding can cause SPF checks to fail, as the original sending server may not be authorized for the forwarded domain.
  • DMARC Breakage: Email forwarding often breaks DMARC authentication because SPF and DKIM records may no longer align with the sending server, leading to spam placement or rejection.
  • Authentication Importance: Proper implementation of SPF, DKIM, and DMARC is crucial for preventing emails from being blocked or sent to spam, particularly for Gmail users.

Key considerations

  • Evaluate Authentication: Evaluate your email authentication setup (SPF, DKIM, DMARC) to ensure compliance with email provider requirements.
  • Monitor Deliverability: Continuously monitor email deliverability rates to identify and address issues arising from forwarding or authentication failures.
  • Consider Alternatives: Consider alternative solutions for email forwarding that maintain authentication integrity or inform users about potential deliverability issues with forwarding services.
  • Authentication Validation: Validate that your email authentication methods pass when emails are forwarded through Private Relay, or that any issues are communicated and managed as needed.
Technical article

Documentation from Google explains that to prevent emails from being blocked or sent to spam for Gmail users, senders need to authenticate their email with SPF, DKIM, and DMARC. This helps prove that the email is genuinely from the sender it claims to be, improving deliverability and reducing the chances of being marked as spam.

August 2021 - Google
Technical article

Documentation from RFC Editor explains that forwarding an email can cause SPF to fail. SPF checks if the sending server is authorized to send emails on behalf of the domain in the 'From' address. When an email is forwarded, the original sending server might not be authorized, leading to SPF failure, which can increase the likelihood of the email being marked as spam.

May 2024 - RFC-Editor
Technical article

Documentation from DMARC.org explains that email forwarding often breaks DMARC authentication. DMARC relies on SPF and DKIM to verify the sender's identity. When an email is forwarded, the SPF and DKIM records may no longer align with the sending server, causing DMARC to fail. This can result in the email being rejected or sent to the spam folder, depending on the recipient's DMARC policy.

October 2021 - DMARC.org
Technical article

Documentation from Apple Support indirectly addresses the issue by explaining how 'Hide My Email' works. It creates unique, random email addresses that forward to a user's real inbox. While not explicitly stating the reason for spam filtering, it's implied that the forwarding process or the nature of these randomly generated addresses could trigger spam filters.

April 2021 - Apple Support