Spam filtering and email security
How myPandos filters the mail coming into your inbox, what to do when the filter gets it wrong, and how to keep your own domain from being used to send spam.
Anti-spam is included with myPandos hosting and mail services — it is part of the standard security suite on our hosting plans, and messages are filtered before they reach you.
What happens to incoming mail
Every message is scanned for spam and malware and checked against reputation lists before it lands in your inbox. Clearly malicious mail is refused at the door: the server rejects it during delivery, so the sender gets a bounce and it never reaches your mailbox at all. Borderline mail is delivered but filed in your Junk / Spam folder, where you can review it. Nothing is quietly deleted behind your back — but if a message was rejected outright, it will not be sitting in Junk either.
When good mail lands in Junk
- Mark it as “not junk”. Filters learn from this, and a few corrections usually settle a recurring sender.
- Add the sender to your contacts or address book.
- If it keeps happening for the same sender, open a ticket from the Support section of your dashboard and attach the message including its full headers. Headers are what let us see why it scored as spam — without them we are guessing.
If you have just moved your domain to myPandos, expect a short settling-in period while sending and receiving reputation is re-established.
When spam reaches your inbox
- Mark it as junk so the filter learns.
- Do not reply, and do not click “unsubscribe” in obvious spam — on a genuinely malicious message that only confirms your address is live.
- Never open attachments you were not expecting, even from an address you recognise.
Phishing that pretends to be myPandos
Attackers know which provider you use because it is public information. Be sceptical of any message that creates urgency about your account.
- We will never ask you for your password — not by email, not on WhatsApp, not on the phone.
- Do not act on a link in a mail about your account. Type dash.mypandos.io into your browser yourself and check from there. If something genuinely needs your attention, it will be in the dashboard.
- Check the sender's real address, not the display name.
- If you are unsure, forward the message to us and ask. We would far rather answer a false alarm than clean up afterwards.
Protecting your own domain's mail
Mail services provisioned by myPandos come with SPF, DKIM and DMARC records. We write them for you when your domain's DNS is managed by us; if your domain uses another provider's nameservers, we show you the exact records and you add them there. These let receiving servers verify that mail claiming to be from you really is, which reduces spoofing and improves your deliverability.
- If you also send mail through another service (a newsletter tool, a CRM, a website contact form using an external provider), that service needs to be authorised in your SPF record — otherwise its mail may be rejected.
- Do not remove or hand-edit these records unless you know exactly what you are changing. If in doubt, ask us before you save.
A compromised mailbox is the usual cause of trouble
Most domains that suddenly start sending spam were not “hacked” at the server level — one mailbox password leaked. If you see unexplained sent mail, bounce messages for mail you never sent, or a sudden deliverability collapse: change that mailbox password immediately and tell us, so we can stop the outbound flow before your domain's reputation is damaged.