1. Test it now, like a customer
Fill in the form on your phone, using a personal Gmail address. Check the inbox that should receive it, the spam folder and, if there is one, the confirmation the “customer” gets. Note how long it took.
2. Read the message’s report card
In Gmail, open the message, click the three dots and choose “Show original”. At the top you see the result for SPF, DKIM and DMARC. All three should say PASS. A FAIL, or a missing line, tells you exactly what’s wrong.
3. Send through SMTP
In WordPress, install an SMTP plugin and connect it to the mailbox on your domain: SMTP server, port 587 with TLS or 465 with SSL, username and password. Your host or email provider gives you these details. Then send a test email from the plugin.
4. Set the right sender
In the form’s notification settings, the sender must be an address on your own domain, for example hello@yourbusiness.com. The visitor’s address goes in the Reply-To field, so you can still answer with one click.
5. Add SPF, DKIM and DMARC
In your domain’s DNS settings: one single SPF record, with the value your email provider gives you (two SPF records break it). Enable DKIM with your provider and copy the record it gives you. For DMARC, add a record at _dmarc starting with v=DMARC1; p=none, so you monitor first without blocking anything. Then repeat the test from step 2.
6. Add a safety net
If your form plugin can store entries on the site, switch that on, so nothing is lost even if the email fails. Mark any messages found in spam as “Not spam”. And test the form once a month.