Top
Best
New

Posted by thatha7777 15 hours ago

Major European payment processor can't send email to Google Workspace users(atha.io)
468 points | 314 commentspage 5
lasgawe 13 hours ago|
literally everything is tough when comes to emails
amelius 15 hours ago||
Gripe only related to email in general: what annoys me to no end is that if my boss forwards me an email and asks me to reply to it (to everybody in the original email) then I have to type in or copy+paste all the addresses from the Fwd attachment (using Fastmail, but this problem exists everywhere). Instead, there should be a button to make that easy.
fy20 14 hours ago|
There's actually nothing that prevents that, if you craft the right headers you can reply to a thread you were not included in, and have it show up as a reply in the thread of common clients (tested Gmail and Outlook).

We added this feature at my $dayjob and I was quite surprised there is no authentication. But thinking about it, this is how mailing lists work (you aren't explicitly specified in "To:") so it makes sense you can do this.

kotaKat 14 hours ago||
Sudden realization that one of my American banks must be having email problems with this too because I use a Google custom email and recently got an in-app notification from my bank saying "we're unable to email you" (and a letter) yet my email works perfectly fine... switching to consumer gmail worked.
OkayPhysicist 12 hours ago||
Do you actually not receive their emails? Fidelity uses tracker dots to check email receipt, which drives me nuts, because like any sane person I don't allow emails to load images without damn good reason. My brokerage should not be sending me cute dog photos, thus I have no need of their images.

So they send me an email, send me another email saying they can't reach me by email, then mail me a letter with the same content as the original letter, and mail me an additional letter saying they can't reach me by email.

kotaKat 10 hours ago||
For some reason the announcement they sent me didn't show up in my email, which was odd. I've had other bank notifications come through unopened before, even after that announcement.
iso1631 15 hours ago||
> Their support team's response to my detailed bug report: "your account has a verified email, so there's no problem."

Sadly I doubt their system is xkcd806 compatible ether.

This isn't an engineering problem, it's an ITIL problem. To be fair 99% of these complaints will be dealt with by the flow chart. Sadly people on the front line are either not knowledgable enough or not empowered enough to bust out of that straightjacket.

tracker1 13 hours ago||
I usually reply with snark dialed up about 50% asking if anyone had actually read the original message. And include detail about how it is not, in fact, "ok"

The other day, I literally had trouble signing into a website... then I tried filling the contact us form, about the bug... only to have that fail... call in, have the person on the other end schedule my appointment, then almost drop the call without actually logging my bug report/complaint about the whole issue that had me calling in the first place.

thatha7777 13 hours ago||
SHIBBOLEET. I was seriously thinking of this when I contacted them :)
eduction 8 hours ago||
I’m sorry but in the context of a 50 year old technology like email, 2008 was yesterday. Gmail is in the wrong, you don’t get to just update the standard for email like it’s TikTok content or a Roblox update or whatever.

Email was here long before Gmail and will be here long after Google abandons it.

This is why I don’t use Gmail.

Also, get off my lawn.

wiredpancake 6 hours ago|
[dead]
reeddev42 14 hours ago||
Email deliverability is the reason I gave up on email entirely for my side project and built on Telegram instead. Setting up SPF, DKIM, DMARC, warming up a domain, monitoring reputation, dealing with bounces and complaints... all of that just to maybe land in someone's inbox.

With Telegram you send a message via the Bot API and it arrives. 100% deliverability. No spam filters. No authentication chain. The message just shows up with a notification on their phone.

Obviously Telegram has its own limitations (smaller user base in the US, less formal). But for anything where you need reliable message delivery to people who opted in, messaging platforms have a massive advantage over email in 2026.

basilikum 14 hours ago||
Unless you are running a more complex setup SPF, DKIM and DMARC really aren't that complicated. They are annoying and additional checkboxes you have to go trough that are hard to fully automate because they require access to DNS, but they are more busywork than difficult.

Domain and IP reputation and all the other quirks of deliverability are much more of a headache. DMARC is setup, test and done. But deliverability in praxis is something you cannot just test and can break at any time. The second worst are email providers that do whitelisting for email and require you to go through their process to even be allowed to send emails to their customers. The worst are providers that randomly decide to drop your emails without informing you or giving you a proper way to appeal as a small sender. If you're not a large email provider they have no problem just dropping you and the fault is on you because your service is the only one that is not working.

And then there are so many more intricacies of the ancient email protocol. Compatibility with horrendously outdated and misconfigured mail infrastructure is particular frustrating to me. I'm running a modern, properly configured, state of the art email server, but get ghosted by large email providers, yet have to deal with the broken mess, much bigger providers than myself are, which of course have no trouble delivering their broken spoofable email just because they are large enough.

pbhjpbhj 13 hours ago||
I found it maddening that I couldn't whitelist a sender (MS Outlook web, Gmail); well I could, but they still blocked the messages.

In my case, it was reportedly (for MS) an IP associated with mine (same hosting provider) had previously been used to send spam.

My domain is decades old, never sent any spam, and I whitelisted it .. but nope, my host wasn't perfect.

This was some time ago now, but it looks like they've still not adopted proper whitelisting.

jmuguy 14 hours ago|||
Most of that can be mitigated, or at least centrally managed, using an ESP like Mailgun or Sendgrid.

It is a pain in the ass though, coming from someone that had to dig their domain out of "low" reputation with Google Postmaster.

newsoftheday 13 hours ago|||
Some of us selfhost email, like me for 30+ years, and have 100% deliverability.
bossyTeacher 14 hours ago||
Until the platform owner bans for whatever reason and if communication by way of the platform was your only means of communication with your customer base, that's the platform owner having the power to destroy your business. No different that businesses that rely on the neverending goodwill of the mobile app store owners. One misstep and your business is gone with no recourse whatsoever. Protocols > Platforms. Always.
qualitylearing 11 hours ago||
[dead]
that_guy_iain 15 hours ago||
> Viva.com, one of Europe's largest payment processors, sends verification emails without a Message-ID header — a basic requirement of RFC 5322 since 2008. Google Workspace rejects them outright. Their support team's response to my detailed bug report: "your account has a verified email, so there's no problem."

Their emails do arrive tho? It was your email that didn't arrive? I find it unbelievable that a payment provider ignored customer complaining about no emails being delivered since it would breach their SLAs with their customers and their customers' customers would have complained. Especially since at the top you say Google says you got the verified email.

Dude, you may be liable for damages on this. This is an extremely serious allegation to be making in my opinion. I would delete this asap.

Edit: I think Ycombinator needs to realise they're liable for spreading this too. Holy crap, it's bad. They're lying through their teeth saying an email bounced but ended up in their logs. That's not now emails bounce is it? They bounce because it wasn't found. How was he able to verify his email if he didn't get the code?

flerchin 15 hours ago||
Interesting, your take away is that Google is the one with the bug here?
jandrese 15 hours ago|||
If Gmail rejects emails from your domain it is up to you to fix it. Google is not going to change, and enough of your users will be interacting with people on Gmail that you have to fix it. It doesn't help that Google has been pushing people away from running their own email and into Google's services by ever tightening what it accepts over the years. More than one person has given up on their email server because it was a constant battle with Google, Microsoft, and company to not have important emails disappear into the void.
jeroenhd 14 hours ago|||
Their @gmail.com servers accept the messages (as said in the post) so it's not a problem for 99% of Google users either.

If you choose to host your email with Google, it's up to you to fix your email delivery settings (or find a better provider) for your domain.

sylos 14 hours ago|||
An attempt no doubt to extenguish a standard google doesn't control
that_guy_iain 15 hours ago|||
My takeaway is there is no bug. My takeaway is that his test email bounced because he didn't have the reputation Viva does. Emails are handled on a reputation basis, this is why we use email service providers like Sendgrid, Mailgun, Postmark, etc.
Johnny555 15 hours ago|||
It always amazes me how people can read a blog post like this one that has a clear description of the problem with a log excerpts demonstrating the problem, and then people will confidently make up a completely different scenario that was not mentioned at all and blame the problem on that.
that_guy_iain 8 hours ago|||
It amazes me people read that in this community and don't know for an email to bounce it means it didn't find an inbox. If it didn't find an inbox how did he check the logs?
renewiltord 11 hours ago||||
User is clearly mentally disturbed. Read his other comment: https://news.ycombinator.com/item?id=46992022

Social network is not good for the poor guy. I already regret replying to him in the first place but I cannot delete.

that_guy_iain 7 hours ago||
WTF you talking about? Rene, this is defamation and I'm probably going to take action because honestly, enough is enough. I'm fed up of folk like you who lack basic technical knowledge or any knowledge making up bullshit. Your hourly rate makes me like you have money to take.
renewiltord 6 hours ago||
Iain, I say this with the best of intentions. Please put down the keyboard. It is serving you poorly.
that_guy_iain 14 hours ago|||
A log that clearly was from them and not the service provider. It amazes me you think you're so smart but haven't realised he doesn't have access to the logs you think he is showing.

Comments like this are why he's just landed himself with a major liability and I bet he'll be getting sued over this.

PaulDavisThe1st 14 hours ago|||
Pretty certain that you're wrong.

TFA shows an excerpt from the email log for his google workspace account, showing the bounce of email sent from viva.com.

Then, TFA states that he switched "the account" (his viva.com account) from using his GWorkspace address to a personal @gmail.com address, and asked viva to send another verification email. That one arrived.

At no point does TFA describe the author themselves sending a test email.

thatha7777 13 hours ago||
I've added a screenshot at the end of the blog post just to clarify that.
thatha7777 13 hours ago||||
Would you mind scrolling to the end of the post? Or, if you're in a hurry: https://atha.io/_next/image?url=%2Fstatic%2Fblog%2F2026%2Fvi...

https://support.google.com/a/answer/2618874?hl=en

that_guy_iain 7 hours ago||
Would you mind looking into what an email bouncing is?
udlwjfhos 14 hours ago||||
> I decided to dig into Google Workspace's Email Log Search to see what was happening on the receiving end.

It amazes me that you can read an article and draw the exact wrong conclusions

bn-usd-mistake 14 hours ago||||
I wish I had your confidence in life
basilikum 14 hours ago|||
Please read the blog post you are making such strong claims about.
that_guy_iain 13 hours ago||
What that is liable? That is a very small claim.
flerchin 15 hours ago||||
I think that's a misunderstanding of the tale. Viva sent a "click here to verify your email" to OP. That email never arrived because Google rejected it for missing a header. OP tried to tell viva, but they don't wanna hear it because OP worked around it.
yatac42 15 hours ago||||
> My takeaway is that his test email bounced

What test email? I see no mention of a test email in the blog post. The mail that bounced was the one with the verification link from Viva.

that_guy_iain 14 hours ago||
So you think he had access to Viva's email servers to see the response? No, he clearly tested it himself and used his credentials to send it.
bn-usd-mistake 14 hours ago||
The log line is from Google Workspace which exposes it to its customers for incoming mail
thatha7777 13 hours ago||
Thank you! I added a screenshot of the Google Workspace Admin log screen... just becuase.
thatha7777 13 hours ago||||
What test email?

https://atha.io/_next/image?url=%2Fstatic%2Fblog%2F2026%2Fvi...

xp84 15 hours ago|||
Yeah. I think email receiving is a game of exceptions… the email receivers (In the business world it’s essentially just MSFT and GOOG of course) answer to the addressees because they are the customer, and those customers will start to shriek if their inbox doesn’t receive “Important Messages.” But GOOG or MS have no leverage over the senders in this case so they just add an exception: “if IP range is just right and message fault ___ is present, fix message” (or otherwise allow)

Of course, they do have leverage over “marketing email” senders since they can block it and no one will complain, so those senders always have impeccable compliance with every year’s new “anti-spam standard.”

patja 14 hours ago||
Apple is another major player in the email receiving game for consumers. And they are awful, by far the worst of all the big providers. They do not send dmarc reports and they make it very difficult to tell why they accept some email and not others.
basilikum 15 hours ago|||
If you read two paragraphs further than the Tl;Dr:

> To unblock myself, I switched to a personal @gmail.com address for the account. Gmail's own receiving infrastructure is apparently more lenient with messages, or perhaps routes them differently. The verification email came through.

renewiltord 13 hours ago|||
1. Email didn’t arrive in his inbox of his Google workspace

2. He checked workspace email logs (with admin you can do this on gsuite)

3. It showed the intentional non-accept

4. Comprehending the problem, he switched to personal Gmail

5. The email arrived

6. He informed the sender of the original problem which he worked around

7. Sender is tech-illiterate and did not realize what the problem is. This is common with first line customer support so that happens.

The question to ask is whether you are literate in English or you skimmed too fast. Because I did a 30 s read of the article and got that.

iso1631 15 hours ago|||
It does seem unlikely that there are no customers on google workspace who have tried to use viva. I don't do payment processing, and my email is via zoho, so I've no idea how large either of those groups are.

I wonder what google workspace support said.

thatha7777 13 hours ago||
I suspect that Google going out of their way to make this required had a very reasonable and thought-out process, while the sender's omission was on oversight, so I haven't contacted Google Workspace support.

What's truly iffy is that GMail doesn't have the same strict requirements, and there's no way (at least that I found) to turn it off for my Google Workspace domain.

iso1631 13 hours ago||
Wikipedia says Viva.com is a multi-billion dollar startup

It seems unlikely you're the first company using viva.com and using google workspace.

Clearly the problem here is that viva.com emails aren't arriving on your google workspace, despite what their support process says.

viva.com emails do arrive on other email providers, so seems unlikely to be problem with your viva.com account

It seems unlikely workplace blocks all viva.com emails otherwise more than you would have complained.

Whether that's viva's problem or google's problem is a separate problem.

johnnyfaehell 12 hours ago||
So, I've got to use my old account. I just found out via sources that he verified this account with the code from his main email. It was in his spam which is how he was able to see that the email headers weren't what he wanted. Which is why there was a log for a "bounced" email. I can't believe people don't realise bouncing means the mail server couldn't find an inbox.

And I think Viva is going to be pissed that I'm being stopped from pointing out the absolute lie here.

Lovingly yours that_guy_iain.

Dang, honestly, this is going to blow back big time because someone has clearly decided to stop me from editing my comments which means you're liable for damages and in breach of EU laws. YC is big enough and has enough interests in the EU to qualify. And it's the fact you've removed my ability to redress if your lawyers want to deal with it. And I'm pretty sure someone at YC is going to know how much money I'm going to get and who I'm getting it from which is the most impressive thing. And what my tagline is in certain circles.

Dylan16807 8 hours ago||
EU doesn't require edits, what the hell?

And nobody "decided to stop you" if you just hit the end of the 2 hour edit window.

But go on, what's your tagline.

that_guy_iain 8 hours ago||
It's called the right to redress. Read up on EU laws.

It's a if you know you, you know. If you don't you're not in the know. :D

Dylan16807 6 hours ago||
> It's called the right to redress.

You don't have the right to complain to random websites without punishment. And nobody punished you. And "ability to redress" is something you still have. And there are no damages.

> It's a if you know you, you know.

You brought it up. Though it's pretty obvious you're a liar.

gethly 13 hours ago||
Google NOT following the spec is not surprising. SHOULD does not mean MUST and they are completely in the wrong here.
thatha7777 9 hours ago|
The definition of SHOULD is "This word, or the adjective "RECOMMENDED", mean that there may exist valid reasons in particular circumstances to ignore a particular item, but the full implications must be understood and carefully weighed before choosing a different course."

I suspect viva.com didn't consider the full implications, and I suspect Google did some hard math on hours saved for their customers

shevy-java 14 hours ago|
The bigger issue here is that Europe depends way too much on the USA in so many areas. This is not good - you can be constantly blackmailed when you have people such as Trump in charge. I don't think the EU can be fixed, but at the same time I also think the less Europeans depend on outside factors (in particular the USA) the better. Canada kind of showed how to do it. Granted, Canada is also dependent on the USA in numerous ways and most of this is hard to fix (most Canadians live in the south aka close to the USA and trade is primarily done via the USA; security has also been largely outsourced onto the USA and so forth). The sooner people in Canada and Europe get moving away towards more independence from the USA, the better. And more cooperation would not harm either.
thatha7777 13 hours ago|
As a European (who spent 15 years in the US), I coudln't agree more. And while I agree, at the end of the day, I just want the better product for me.
More comments...