Reply to the visitor
Use a validated visitor email as Reply-To without impersonating it as the sender.
Choose the reply field
Map Reply-To to a published email field. If the value is missing or invalid, omit Reply-To rather than constructing an unsafe header.
Verify a real reply
Open the received notification in a controlled inbox, use Reply, and confirm the resulting destination before relying on the workflow.
Reply-To is not the sender
Send from a domain the service controls and verifies. Using a visitor's address as From can fail authentication checks and misrepresent the sender.
Documentation reviewed on October 20, 2026Suggest an improvement →