How to Whitelist a Sender So Their Mail Stops Going to Spam

A supplier's invoices keep landing in Junk, or a client's replies are silently filed as spam. Whitelisting tells your mail system to trust that sender in future. Here is how to do it in each app, why the "Not spam" button matters more than a contact entry, and what to do when the problem is on the sender's side.

Quick answer

Open the spam or junk folder, select the message and click Not spam (or Not junk). That trains the filter and usually moves the sender to a safe list automatically. For a permanent guarantee, add the address or the whole domain to your safe senders or allow list, and add the person to your contacts. Do the server-side version in webmail so it applies on every device.

Where the setting lives

• Webmail on a business host: open the message in Spam or Junk, click Not spam. Then look under Settings for Filters or Spam settings and add the address or domain to an allow list, or create a rule "From ends with @supplier.com, never mark as spam, move to Inbox".
• Outlook desktop: Home, Junk, Junk E-mail Options, Safe Senders tab, Add. You can add a whole domain such as @supplier.com. Tick "Also trust email from my Contacts".
• Outlook.com / new Outlook: Settings, Mail, Junk email, Safe senders and domains.
• Apple Mail: Mail, Settings, Junk Mail, and tick "Sender of message is in my contacts" as an exemption. Then add the person to Contacts.
• Gmail: open the message in Spam, click Not spam. For a rule, Settings, Filters and Blocked Addresses, Create filter with From, then tick "Never send it to Spam".
• Thunderbird: junk classification is learned; mark messages Not Junk and add senders to your address book, which is trusted by default.

Step by step for a whole domain

1. Decide whether you trust everyone at that domain. Whitelisting @client.com is fine; whitelisting @gmail.com is not, because anyone can send from it.
2. Add the domain to the safe list in webmail first, then in your desktop app if it has its own junk filter.
3. Add the specific people to Contacts. Contact-based exemptions are the most reliable across apps.
4. Ask the sender for a test message and confirm it lands in Inbox on both webmail and your phone.

When the problem is on the sender side

If mail from one company is flagged everywhere, not just in your mailbox, their domain is probably missing SPF, DKIM or DMARC, or they are sending from a service their records do not cover. Whitelisting on your side works for you but not for their other customers. It is worth telling them: look at authentication (proof that email really comes from your company)-Results in the message headers, and if you see spf=fail or dkim=none, their setup needs fixing. OquMail sets these records up with live DNS verification for domains it hosts, which is why mail from correctly configured business domains rarely needs whitelisting at all.

Pitfalls

• Whitelisting your own domain. Spammers spoof your address to reach you; a blanket allow for @yourcompany.com lets that through. Rely on DMARC instead.
• Adding a safe sender in a desktop app only. Your phone and webmail still file it as spam.
• Whitelisting a big free-mail domain. You open the door to every scammer using that provider.
• Never checking Junk. Even a good filter makes mistakes; glance at it weekly and mark false positives Not spam so the filter learns.

Common questions

Why does mail go to spam after I added the contact?

The desktop app trusts contacts, but the server filter ran first and put the message in Junk before the app saw it. Add the sender on the server side in webmail as well.

Will whitelisting stop legitimate spam warnings?

A safe list bypasses the spam score, so a compromised account at a trusted domain could reach your inbox. That is a reason to whitelist specific addresses where you can, and to keep phishing awareness even for trusted senders.

Can I whitelist for the whole company at once?

Some hosts offer an organisation-wide allow list in the admin panel. If yours does not, each mailbox needs the rule; document the list so new mailboxes get the same setup on day one.