# SparkPost just suspended the mail account I used with Discourse

**URL:** https://meta.discourse.org/t/sparkpost-just-suspended-the-mail-account-i-used-with-discourse/56398
**Category:** Support
**Created:** [2017年一月26日 14:16 UTC](https://meta.discourse.org/t/sparkpost-just-suspended-the-mail-account-i-used-with-discourse/56398 "2017-01-26T14:16:23Z")
**Posts on this page:** 20
**Page:** 1

<div class="post-metadata">

### Author: ![ChrisBeach](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/chrisbeach/32/214628_2.png) [@ChrisBeach](https://meta.discourse.org/u/ChrisBeach)
#### Post date: [2017年一月26日 14:16 UTC](https://meta.discourse.org/t/sparkpost-just-suspended-the-mail-account-i-used-with-discourse/56398/1 "2017-01-26T14:16:24Z")

</div>

Email received today:

> [@](#):
>
> Your SparkPost account has been suspended due to concern about a possible violation of our Messaging Policy. You may find our policies here: [Unified CRM for Marketing, Service & Payments | Bird](http://www.sparkpost.com/policies)
> 
> To be reinstated, please respond to this email (leaving the subject line intact) describing your opt-in practices and content and our compliance team will follow up to help you get back on track.
> 
> If you reply and do not receive a response within 2 business days, please contact our support team here for an escalation:  
> [https://support.sparkpost.com/customer/portal/emails/new](https://support.sparkpost.com/customer/portal/emails/new)

I’ve replied with the following:

> [@](#):
>
> I’m alarmed by the unexpected suspension of my account.
> 
> I rely on SparkPost, which sends emails for my forum [https://se23.life](https://se23.life), which is built upon the open source Discourse software.
> 
> This software only mails people who have chosen to sign up to the forum. Emails include:
> 
> - A verification email when a new user signs up
> - Optional forgotten password reminders
> - Notifications of updates on topics the user has participated in (see example attached). The user can unsubscribe easily via links in the mail
> - A user-configurable weekly digest email sent to users, which lists recent posts. The user can unsubscribe easily via links in the mail
> 
> Please could you reinstate, or elaborate on the suspension so I can take any remedial action required.
> 
> Note that any complaints you have received may have come from my local competitors.
> 
> I await your reply.

I’ll update when I get a response back

Has anyone else had compliance problems with SparkPost and Discourse?

It’s possible that “junk” reports have been sent by my competitor whose crummy 10-year-old PHP forum was understandably left for dead when I entered the scene with my shiny Discourse-powered forum. He’s been using every trick under the sun (including spuriously reporting the contact details on my whois record) to try to sabotage my forum!

---

<div class="post-metadata">

### Author: ![ChrisBeach](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/chrisbeach/32/214628_2.png) [@ChrisBeach](https://meta.discourse.org/u/ChrisBeach)
#### Post date: [2017年一月26日 14:54 UTC](https://meta.discourse.org/t/sparkpost-just-suspended-the-mail-account-i-used-with-discourse/56398/2 "2017-01-26T14:54:46Z")

</div>

Just in:

> [@](#):
>
> Your account has been suspended for sending suspicious links. Can you please explain why you were sending the following link?
> 
> http: [//linkis.com](https://linkis.com) /abcnews.go.com /Polit/jtQcuT1

So - it’s a user submitted link that they had an issue with. I believe SparkPost inserted spaces in the link deliberately when emailing me.

I responded with this:

> [@](#):
>
> I have checked and a user submitted that link as part of the following forum post on my site:
> 
> [https://se23.life/t/whose-side-are-you-on-trump-inauguration-crowd-photos/2977/41](https://se23.life/t/whose-side-are-you-on-trump-inauguration-crowd-photos/2977/41)
> 
> Those who are “watching” this conversation would have been notified by email of his post, and the email would have contained the link.
> 
> The link in question is a link to an ABC news article, but has been wrapped by [linkis.com](http://linkis.com) - a site that puts a “wrapper” around webpages that shows the social identity of the person who shared the link. See: [Frequently Asked Questions - Linkis.com](http://linkis.com/faq) - I have checked using anti-malware software installed on my computer, and I do not believe [linkis.com](http://linkis.com) is a malicious site, or that there are any malicious payloads in that link.
> 
> The forum software is very defensive with new users who post links - when a new user signs up and creates a forum post with a link without having read other topics, the software will automatically put their post on hold to be reviewed by moderators. And moderators are on the site daily, checking the content of posts. We even have a system for verifying users by meeting them in real life at two local shops (it’s a local area forum), and we show their profile as “verified”. In this case the person who posted the link was a verified user and we have no reason to suspect the link was posted maliciously.
> 
> We can review the sending of external links in notification emails if this is a requirement of SparkPost?

Can we disable user-submitted external links being included in notification / digest emails?

---

<div class="post-metadata">

### Author: ![David\_Collantes](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/david_collantes/32/87919_2.png) [@David\_Collantes](https://meta.discourse.org/u/David_Collantes)
#### Post date: [2017年一月26日 14:58 UTC](https://meta.discourse.org/t/sparkpost-just-suspended-the-mail-account-i-used-with-discourse/56398/3 "2017-01-26T14:58:45Z")

</div>

> [@ChrisBeach](#):
>
> I have checked and a user submitted that link as part of the following forum post on my site:  
> [https://se23.life/t/whose-side-are-you-on-trump-inauguration-crowd-photos/2977/41](https://se23.life/t/whose-side-are-you-on-trump-inauguration-crowd-photos/2977/41)

Sadly can’t see the original post. Nevertheless, it is weird SparkPost is suspending accounts for links you have very little control on.

---

<div class="post-metadata">

### Author: ![ChrisBeach](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/chrisbeach/32/214628_2.png) [@ChrisBeach](https://meta.discourse.org/u/ChrisBeach)
#### Post date: [2017年一月26日 15:04 UTC](https://meta.discourse.org/t/sparkpost-just-suspended-the-mail-account-i-used-with-discourse/56398/4 "2017-01-26T15:04:02Z")

</div>

> [@David\_Collantes](#):
>
> Sadly can’t see the original post.

Ah - that would be because it’s in an opt-in group.

Screenshot of post:

 ![](https://global.discourse-cdn.com/meta/original/3X/6/8/682edde1bbff55d7f25a63878df29a4a542f46eb.png)

The user has submitted a link wrapped by “linkis” - one of those social services that serves up the link in an iframe (I assume that’s how it works), with a header showing the identity of the person that originally shared it, plus some extra navigation options.

---

<div class="post-metadata">

### Author: ![ChrisBeach](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/chrisbeach/32/214628_2.png) [@ChrisBeach](https://meta.discourse.org/u/ChrisBeach)
#### Post date: [2017年一月26日 15:06 UTC](https://meta.discourse.org/t/sparkpost-just-suspended-the-mail-account-i-used-with-discourse/56398/5 "2017-01-26T15:06:24Z")

</div>

Phew 😅

> [@](#):
>
> In an effort to keep our systems free of fraud, we employ automated detection systems that suspend accounts based on certain activity and metrics. Most of the time, we find that our system has acted correctly and prevented bad mail from going out. Unfortunately, this automation also rarely catches good customers, and it appears this happened to your account today. **Upon manual review, we have reactivated your account.** We work hard to maintain high quality mail servers that are free from criminal activity and spam, so we hope you will accept our apologies for any inconvenience this may have caused.

Worth bearing in mind, though - if a user submits an external link that’s genuinely dodgy, your email service provider may pick it up and suspend your account immediately.

---

<div class="post-metadata">

### Author: ![David\_Collantes](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/david_collantes/32/87919_2.png) [@David\_Collantes](https://meta.discourse.org/u/David_Collantes)
#### Post date: [2017年一月26日 15:07 UTC](https://meta.discourse.org/t/sparkpost-just-suspended-the-mail-account-i-used-with-discourse/56398/6 "2017-01-26T15:07:48Z")

</div>

Ah, I see! Although I do not like the practice—and avoid it myself—I don’t see it as problematic, unless the linking site is really degrading and full of malpractice. It seems they (SparkPost) have some very trigger happy algorithms.

---

<div class="post-metadata">

### Author: ![David\_Collantes](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/david_collantes/32/87919_2.png) [@David\_Collantes](https://meta.discourse.org/u/David_Collantes)
#### Post date: [2017年一月26日 15:08 UTC](https://meta.discourse.org/t/sparkpost-just-suspended-the-mail-account-i-used-with-discourse/56398/7 "2017-01-26T15:08:59Z")

</div>

> [@ChrisBeach](#):
>
> Worth bearing in mind, though - if a user submits an external link that’s genuinely dodgy, your email service provider may pick it up and suspend your account immediately.

Scary! One more reason to run a well configured, local SMTP server.

---

<div class="post-metadata">

### Author: ![ChrisBeach](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/chrisbeach/32/214628_2.png) [@ChrisBeach](https://meta.discourse.org/u/ChrisBeach)
#### Post date: [2017年一月26日 15:11 UTC](https://meta.discourse.org/t/sparkpost-just-suspended-the-mail-account-i-used-with-discourse/56398/8 "2017-01-26T15:11:24Z")

</div>

> [@David\_Collantes](#):
>
> One more reason to run a well configured, local SMTP server.

From my point of view it’s a bit of a risk to use my own server for emails - if people submit enough spam reports to Google (or other email mailbox providers), my IP would be blacklisted, and my sent emails would silently fail to be delivered.

This is why deliverability companies like SparkPost exist - they maintain pools of safe IP addresses that haven’t been blacklisted.

---

<div class="post-metadata">

### Author: ![David\_Collantes](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/david_collantes/32/87919_2.png) [@David\_Collantes](https://meta.discourse.org/u/David_Collantes)
#### Post date: [2017年一月26日 15:17 UTC](https://meta.discourse.org/t/sparkpost-just-suspended-the-mail-account-i-used-with-discourse/56398/9 "2017-01-26T15:17:28Z")

</div>

> [@ChrisBeach](#):
>
> This is why deliverability companies like SparkPost exist - they maintain pools of safe IP addresses that haven’t been blacklisted.

Right, until they suspend your account. 🙂

---

<div class="post-metadata">

### Author: ![neil](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/neil/32/102150_2.png) [@neil](https://meta.discourse.org/u/neil)
#### Post date: [2017年一月26日 16:53 UTC](https://meta.discourse.org/t/sparkpost-just-suspended-the-mail-account-i-used-with-discourse/56398/10 "2017-01-26T16:53:07Z")

</div>

I had [my own issues with SparkPost](https://meta.discourse.org/t/discourse-setup-with-digital-ocean-not-sending-sparkpost-activation-email/52687/30), but it’s good to see they cleared your account. Will have to keep this topic in mind if other email providers treat links in notification and summary emails the same way.

---

<div class="post-metadata">

### Author: ![GuyL](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/guyl/32/67521_2.png) [@GuyL](https://meta.discourse.org/u/GuyL)
#### Post date: [2017年二月9日 19:47 UTC](https://meta.discourse.org/t/sparkpost-just-suspended-the-mail-account-i-used-with-discourse/56398/11 "2017-02-09T19:47:45Z")

</div>

Just dumped Sparkpost today… Just 48 hours after they suspended ALL of our outgoing business emails (including eCommerce order notifications).

We only send about 100-200 eMails a day through them, and have been for about the last year. We’ve had No prior issues, no prior warnings, no prior suspensions, etc. Clean as clean gets.

Why did we get suspended without warning. Because of ONE email with a suspicious link (according to them).

We acted immediately. We tried replying to their complaint (right away). We tried again a few hours later. We tried calling their office (they have no telephone help available, only email). We even opened another Case Email… nothing back for 2 full days.

What was the “suspicious link” … it was me personally replying to my brother-in-law who sent me an email for a local gun store sales in his home town… REALLY Sparkpost!!!

Not sure if anyone else is better, but we’re giving Mailgun a try now.

---

<div class="post-metadata">

### Author: ![bholst](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/bholst/32/65051_2.png) [@bholst](https://meta.discourse.org/u/bholst)
#### Post date: [2017年二月9日 19:55 UTC](https://meta.discourse.org/t/sparkpost-just-suspended-the-mail-account-i-used-with-discourse/56398/12 "2017-02-09T19:55:17Z")

</div>

Glad I read this post! Thanks for keeping us updated on it. I’ll definitely have to keep all that in mind as I’m using Sparkpost also.

---

<div class="post-metadata">

### Author: ![roguemat](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/roguemat/32/194867_2.png) [@roguemat](https://meta.discourse.org/u/roguemat)
#### Post date: [2017年二月25日 21:53 UTC](https://meta.discourse.org/t/sparkpost-just-suspended-the-mail-account-i-used-with-discourse/56398/13 "2017-02-25T21:53:25Z")

</div>

A few days ago our SparkPost account was disabled (without warning) because an email was sent with a link to `https://radarr.video/`

I’m assuming it was in a summary email or because of a PM. I replied explaining about Discourse. They then replied that they are closing my account.

If they suspend on the grounds of single links being considered somewhat dodgy - it might not be the best service to recommend in the guide for Discourse.

---

<div class="post-metadata">

### Author: ![ChrisBeach](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/chrisbeach/32/214628_2.png) [@ChrisBeach](https://meta.discourse.org/u/ChrisBeach)
#### Post date: [2017年二月25日 21:58 UTC](https://meta.discourse.org/t/sparkpost-just-suspended-the-mail-account-i-used-with-discourse/56398/14 "2017-02-25T21:58:35Z")

</div>

For ultimate safety I wonder if Discourse ought to strip external links from notification emails?

This is user-generated content and we do have to keep our wits about us.

Perhaps Discourse could use Alexa-style metrics to judge whether an external link is to a “mainstream” domain - and in notification emails, strip any links that aren’t to mainstream domains? Perhaps also strip links submitted by users of low trust level?

---

<div class="post-metadata">

### Author: ![roguemat](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/roguemat/32/194867_2.png) [@roguemat](https://meta.discourse.org/u/roguemat)
#### Post date: [2017年二月26日 06:27 UTC](https://meta.discourse.org/t/sparkpost-just-suspended-the-mail-account-i-used-with-discourse/56398/15 "2017-02-26T06:27:25Z")

</div>

The problem with ranking domains like that is that you’ll never end up blocking the same set that an email provider deems bad (if that is the goal).  
And who defines what is dodgy or not?

In the case of SparkPost, I cannot understand why they consider `http://radarr.video` to be bad enough to suspend an account. Sure, anyone can disagree with the actual software, but that doesn’t mean discussing it is wrong, or the fault of the forum owner.

---

<div class="post-metadata">

### Author: ![ChrisBeach](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/chrisbeach/32/214628_2.png) [@ChrisBeach](https://meta.discourse.org/u/ChrisBeach)
#### Post date: [2017年二月26日 10:08 UTC](https://meta.discourse.org/t/sparkpost-just-suspended-the-mail-account-i-used-with-discourse/56398/16 "2017-02-26T10:08:19Z")

</div>

> [@roguemat](#):
>
> The problem with ranking domains like that is that you’ll never end up blocking the same set that an email provider deems bad (if that is the goal).And who defines what is dodgy or not?

Perhaps that’s the answer - we should reach out to Sparkpost and find out how they source their blacklist/whitelist (it may be public data). Then for those who use Sparkpost with their Discourse instance, set the (proposed) link-stripper to operate on the same blacklist/whitelist.

---

<div class="post-metadata">

### Author: ![wscott](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/wscott/32/120268_2.png) [@wscott](https://meta.discourse.org/u/wscott)
#### Post date: [2017年七月22日 17:32 UTC](https://meta.discourse.org/t/sparkpost-just-suspended-the-mail-account-i-used-with-discourse/56398/17 "2017-07-22T17:32:17Z")

</div>

Just had my site suspended too. The recent post contained a lot of images and links to .mp4 files that were embedded in the post and so are at my forum URL.

No reply from them about what caused the problem yet.

Kinda wondering if SparkPost should be first on the list of [recommended email hosts](https://github.com/discourse/discourse/blob/master/docs/INSTALL-email.md)?

---

<div class="post-metadata">

### Author: ![neil](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/neil/32/102150_2.png) [@neil](https://meta.discourse.org/u/neil)
#### Post date: [2017年七月22日 21:58 UTC](https://meta.discourse.org/t/sparkpost-just-suspended-the-mail-account-i-used-with-discourse/56398/18 "2017-07-22T21:58:27Z")

</div>

I got banned too and SparkPost is dead to me. So I would be happy to stop recommending them.

---

<div class="post-metadata">

### Author: ![tophee](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tophee/32/73406_2.png) [@tophee](https://meta.discourse.org/u/tophee)
#### Post date: [2017年七月22日 23:13 UTC](https://meta.discourse.org/t/sparkpost-just-suspended-the-mail-account-i-used-with-discourse/56398/19 "2017-07-22T23:13:45Z")

</div>

There seem to be a number of complaints on the net about sparkpost terminating/suspending accounts and many of them mention not being told why. The question is: is this unique to sparkpost or do other providers do the same?

I have tried to figure out what might cause sparkmail to suspend accounts used for discourse. Here’s what I found so far:

To start with, they reserve the right to suspend accounts for a number of reasons:

> Some of the ways that can cause your account to be suspended and/or terminated are:
> 
> - A violation of our messaging policy
> - A violation of our terms of use
> - High hard bounce percentages
> - High complaint rates
> - Content that is abusive, harmful, or is identified as spam
> - Failure to collect payment for the service

(Source: [Account Suspension](https://www.sparkpost.com/docs/my-account-and-profile/account-suspension/))

Among these, I suppose the messaging policy is most relevant, so I looked it up at [Unified CRM for Marketing, Service & Payments | Bird](https://www.sparkpost.com/policies/messaging/) and among the long list of requirements I found the following two which, I believe, any discourse instance routinely violates (so I may be misunderstanding something since it would be strange if they really required every single transactional email to comply with these):

> Always include a working “unsubscribe” mechanism in each marketing Digital Message that allows the recipient to opt out from your mailing list (receipt/transactional messages that are exempt from “unsubscribe” requirements of applicable law are exempt from this requirement).

> Include in each Digital Message a link to your then-current privacy policy applicable to that Digital Message.

And the following might become relevant in some cases when users generate inappropriate content (but the problem is that it is up to Sparkpost to decide what is or is not appropriate):

> You must not use the Services to:
> 
> - Store, distribute or transmit any malware or other material that you know, or have reasonable grounds to believe, is or may be tortious, libelous, offensive, infringing, harassing, harmful, disruptive or abusive; or
> 
> - Commit (or promote, aid or abet) any behavior, which you know, or have reasonable grounds to believe, is or may be tortious, libelous, offensive, infringing, harassing, harmful, disruptive or abusive. Examples may include Digital Messages that are themselves are or promote racism, homophobia, or other hate speech

---

<div class="post-metadata">

### Author: ![neil](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/neil/32/102150_2.png) [@neil](https://meta.discourse.org/u/neil)
#### Post date: [2017年七月23日 03:11 UTC](https://meta.discourse.org/t/sparkpost-just-suspended-the-mail-account-i-used-with-discourse/56398/20 "2017-07-23T03:11:44Z")

</div>

Maybe those policies aren’t compatible with forums, although companies in their customers list must be emailing some offensive email notifications (Twitter?). The privacy policy requirement might be the important one for us.

[下一頁](https://meta.discourse.org/t/sparkpost-just-suspended-the-mail-account-i-used-with-discourse/56398.md?page=2)
