Description of Issue

You send a welcome email from Quickpass to an end-user and the email shows up in their junk email folder or quarantined in their spam filter. 

Cause

Even though Quickpass has implemented the required email security settings and appropriate DNS records for SPF and DKIM some spam filters may interpret the welcome emails from Quickpass as bulk or spam email. 

Resolution

Quickpass recommends as a part of on-boarding a new customer to add the domain getquickpass.com and cyberqp.com to the white list for your customers spam filter. By doing this you will ensure that no important emails from Quickpass will be delivered to a users junk email folder or spam quarantine. 

Please consult the documentation for your spam filter provider for the steps to setup the whitelisting of an email domain.

🛡️ Safelist a Domain in Microsoft 365 (2025 Defender UI)

Ensuring Trusted Emails Never Go to Junk

📘 Overview

This article provides step-by-step instructions for allowlisting a trusted sender domain (e.g., getquickpass.com) using the Anti-spam inbound policy in the Microsoft 365 Defender portal.

This ensures emails from the trusted domain always reach your users’ inboxes — for both current and future users.

🛠️ Prerequisites

You must be signed in with one of the following roles:

• Global Administrator

• Security Administrator

• Exchange Administrator

No additional licensing or billing is required.

▶️ Step 1 — Open Microsoft 365 Defender

1. Go to: https://security.microsoft.com

2. Sign in with your admin account.

▶️ Step 2 — Open Threat Policies

1. In the left navigation pane, select:
   Email & collaboration → Policies & rules → Threat policies

▶️ Step 3 — Open Anti-Spam Policies

Scroll to the Policies section and click:

Anti-spam policies

▶️ Step 4 — Create a New Inbound Policy

1. Click + Create policy → Inbound

2. This starts the anti-spam inbound policy wizard.

▶️ Step 5 — Name the Policy

• Policy name:
  Allow – getquickpass.com

• Add an optional description.

• Click Next.

▶️ Step 6 — Choose Target Users (Users, Groups, and Domains)

This defines who the policy applies to.

✔ Recommended Method

Apply the policy to your organization's email domain.

1. Under Domains, enter your email domain (example):

   yourcompany.com
   

2. Press Enter to add it.

Repeat if you have multiple accepted domains.

Click Next.

▶️ Step 7 — Bulk Email Threshold & Spam Properties

Leave all settings at their defaults unless instructed otherwise.

Click Next.

▶️ Step 8 — Actions

Default actions are recommended for most environments.

Click Next.

▶️ Step 9 — Allow & Block List (Add the Trusted Domain)

This is where you add the sender domain you want to safelist.

1. Under Allowed domains, click Add.

2. Enter:

   getquickpass.com
   cyberqp.com

3. Click Add.

Click Next.

▶️ Step 10 — Review and Create

Review all settings.

You may see this popup:

“Complete organizational setup”

Click YES.
This completes Defender initialization and does not generate any billing.

Click Create.

▶️ Step 11 — Verify Policy Priority

1. Return to Anti-spam policies.

2. Locate your new custom policy under Custom inbound policies.

3. Ensure it has an appropriate priority (lower number = higher priority).

4. Adjust using Edit priority if needed.

🧪 Step 12 — Verify the Safelist Is Working

Send a test email (You can send a welcome email to a user).

In Outlook on the web:

1. Open the message

2. Click … (More actions) → View → View message details

3. Confirm the headers show:

SCL:-1
SFV:SKA

This means the message bypassed spam filtering and is trusted.

🎉 Completed

You have successfully created an Anti-spam inbound allowlist policy for your organization.
Emails from getquickpass.com and cyberqp.com will now consistently land in users’ inboxes — including new users created in the future.

If you experience any other issues related to email delivery with Quickpass emails, please open a support ticket at support@getquickpass.com.