Sendgrid itself is a major source of spam, and simply using them can result in mails getting filtered. There are even Spamassassin rules (3rd party) that specifically add spam score to mails, if they are sent through Sendgrid.

The 3% may very well be ignorant users who are using the Junk button as a way to remove the mails from the inbox (yeah, people actually do that), but for good measure, things like signup forms and password reset forms really should be protected with a captcha, as any form able to send any form of email whatsoever will be abused by bots trying to send spam.

> Sendgrid itself is a major source of spam

so is gmail by the way.

Definitely, and so are most free email services. Try blocking Gmail, on the other hand, and your users will be somewhat upset. Sendgrid doesn't have that kind of weight behind them.

Of course, but it very much a "do as I say, not as I do". i.e. google applies a zero tolerance policy to receiving spam from any domain, but is likely way above any absolute threshold they impose on incoming messages for the spam they emit.

It is what it is.

I'm in favour of anti-trust action against Google and Microsoft for their outright anti-competitive anti-spam practices, but that's going to be a long and hard up-hill battle for anyone attempting it.

Meanwhile, the rest of us will have to accept things for what they are and deal with them as well as we can.

> password reset forms

well we do have a user existence checks

Doesn't really help when people's initial reaction to unexpected mails is to press "Junk". A random spambot entering a user's email address in a random form is enough to trigger a complaint. It's ridiculous but it is what it is.