yasunoriQ: Spoofed Incoming Emails Incorrectly Classified as Sent
I received a spoofed extortion email with my address in both From and To. Thunderbird confirms it is in my IMAP INBOX, but AI Emaily incorrectly shows it in Sent.
The headers show SPF softfail and DMARC fail.
Does AI Emaily determine Sent status based on the From address rather than the actual IMAP folder? If so, could this be fixed?
Nafiul_Hasan
Oct 10, 2026A: Hi, thank you for such a precise report.
AI Emaily marks a message as "sent by you" when it comes from your Sent folder, and also when the From address matches your own mailbox address. Your spoofed email had your address in From, so it was treated as your own mail even though it arrived in your INBOX. That's also why it showed under Sent. It shouldn't trust the From address alone, especially when SPF and DMARC failed, as in your headers.
We will look into that and if we found the issue we will resolve it for sure.
— Nafiul