Back to Help

Using Spamless

Reviewing & releasing quarantined mail

When a message looks like spam, phishing or malware, Spamless quarantines it instead of delivering it, subject to the configured retention period. Policy may also reject a message rather than retain it.

Open the quarantine

In the dashboard go to Quarantine and pick a domain. You'll see the held messages with subject, sender, date and a colour-coded risk badge (low, medium, high or critical).

See why a message was flagged

Click a message to expand it. You'll see:

  • the sender, recipients and date,
  • why it was flagged — the reasons, plus the spam score out of 100 and the verdict under Details, and
  • a safe text preview of the message body.

Decide what to do

From the expanded message you have three actions:

  • Release — request delivery to your receiving mail server.
  • Release & always allow — request delivery and add a spam-score exception for the sender. Malware and mandatory security checks still apply.
  • Always block sender — add the sender to your block list (future mail from them is rejected).

Release starts a delivery attempt. Delivery is confirmed only after acceptance by your receiving mail server. Unconfirmed can mean queued work, partial acceptance or an unknown outcome requiring support review. Another release stays blocked until the outcome is resolved; do not assume automatic retry. Delivery failed permits Retry delivery where the server confirms it is safe. Confirmed recipients are not sent the same message again.

Find a specific message

Filter with the Sender contains… and Subject contains… boxes, then use the pager to move through results (50 per page).

Don't want to log in to check?

Turn on a quarantine digest email — a periodic summary of held mail with one-click release. See Quarantine digest emails.

Good to know

  • A successfully released message disappears from the quarantine list.
  • Over-quota mail is deferred (senders retry), subject to the sender’s retry policy.
  • Quarantined messages are stored encrypted for a configurable period (30 days by default) and then automatically deleted.

Copies needed to reconcile pending or unknown delivery have a separate retention policy; see Privacy.

Can’t find what you need? Email us at hello@spamless.dev