Why Are Some Emails Delayed on cPanel Mail Servers?
Overview
Some messages may take longer than expected to arrive when using a cPanel-hosted email service. These delays may be caused by spam filtering, attachment scanning, rate limiting, server workload or temporary communication issues between mail servers.
The cause can vary between messages, so a high spam score should be treated as an indicator rather than automatic proof of why an email was delayed.
How spam scoring works
cPanel mail servers can use Apache SpamAssassin to assess incoming messages. SpamAssassin assigns each message a score based on characteristics commonly associated with unsolicited or unsafe email.
Factors that can influence the score include:
The sender’s reputation
The sending server’s IP reputation
SPF, DKIM and DMARC authentication
Message wording and formatting
Links contained in the message
Attachments and file types
Patterns commonly associated with spam
Blocklist and reputation-database results
A higher score means the message is more likely to be classified as spam. The score required to mark a message as spam is configurable and may differ between servers and hosting providers.
Does a high spam score cause a delay?
Not necessarily.
Depending on the server configuration, a high-scoring message may be:
Marked as spam
Delivered to the junk or spam folder
Redirected by an email filter
Rejected by the mail server
Automatically deleted
Subjected to additional processing
Rate-limited or temporarily held
A spam score of approximately 7 may be significant on one server but treated differently on another. The configured spam threshold, rate-limiting rules and filtering policies must be reviewed before confirming that the score caused the delay.
Other possible causes of delayed email
Email delays can also result from:
Attachment or malware scanning
Temporary mail-server congestion
High server resource usage
Greylisting
DNS lookup delays
Sender reputation checks
Blocklist checks
Temporary communication problems between mail servers
The sending server retrying after a temporary rejection
Mailbox storage or quota issues
Misconfigured SPF, DKIM, DMARC or MX records
Reviewing the mail-delivery logs and message headers is generally required to identify the exact cause.
Are all emails affected?
Usually, no.
Messages with low spam scores and no attachments may be delivered normally, while messages requiring additional filtering or security checks may take longer. This can make the issue appear intermittent or limited to certain senders.
False positives
Automated spam filters are not always exact. A legitimate message can occasionally be classified as suspicious. This is known as a false positive.
False positives can be influenced by the message content, sender configuration, server reputation or the filtering rules used by the receiving mail server.
Adjusting spam thresholds or allowlisting trusted senders may help in some situations. However, lowering security controls too far can increase the amount of genuine spam or malicious email received.
Recommended long-term options
Organisations that depend heavily on reliable business email may benefit from moving their email hosting to a dedicated cloud email platform such as Google Workspace or Microsoft 365.
The existing domain and branded email addresses can be retained. The domain’s DNS and MX records are updated so that email is delivered through the selected provider.
Although no email platform can completely eliminate delays or false positives, these services provide centrally managed business email, security controls and collaboration tools.
Option 1: Google Workspace
Google Workspace provides business email through Gmail while allowing users to retain addresses such as name@yourdomain.com.au.
Depending on the selected package, features can include:
Business email hosted through Gmail
Custom-domain email addresses
Google Calendar
Google Drive
Google Meet
Google Docs, Sheets and Slides
Centralised account administration
Security and spam-filtering controls
Cloud storage and collaboration tools
View Google Workspace packages and pricing
Option 2: Microsoft 365 and Exchange Online
Microsoft provides business email through Exchange Online, commonly accessed using Outlook.
Depending on the selected package, features can include:
Exchange Online email hosting
Custom-domain email addresses
Outlook integration
Shared calendars and contacts
OneDrive and SharePoint
Microsoft Teams
Web or desktop versions of Microsoft applications
Centralised account and security management
Additional security and device-management controls
Common options include:
Exchange Online Plan 1 or Plan 2 — Hosted business email without the complete Microsoft 365 application suite
Microsoft 365 Business Basic — Business email, cloud storage and web-based Microsoft 365 applications
Microsoft 365 Business Standard — Business email with web, mobile and desktop Microsoft 365 applications
Microsoft 365 Business Premium — Business email and applications with additional security and device-management capabilities
View Microsoft Exchange Online packages
View Microsoft 365 business packages
Which platform should you choose?
Google Workspace may be suitable for organisations that prefer Gmail and Google’s browser-based collaboration tools.
Microsoft 365 may be suitable for organisations that already use Outlook, Word, Excel, Teams or other Microsoft services.
The most appropriate platform and package will depend on:
The number of users
Required mailbox storage
Existing business applications
Security and compliance requirements
Shared mailbox requirements
Desktop application requirements
Preferred email interface
Available budget
Both platforms generally charge a recurring licence fee per user. Package names, inclusions and prices can change, so current details should be confirmed with the provider before purchasing.
Migration requirements
Before migrating, the following should be reviewed:
Existing mailboxes and mailbox sizes
Email aliases
Shared mailboxes
Forwarding rules
Distribution lists
Calendars and contacts
Email applications and mobile devices
DNS access
SPF, DKIM and DMARC records
Backup and retention requirements
A planned migration can move existing email to Google Workspace or Microsoft 365 while retaining the organisation’s domain and branded email addresses. DNS and mail-routing records must be updated and tested as part of the migration.