How to Whitelist an Email Address to Prevent It Going to Spam

Stop legitimate emails from being marked as spam by whitelisting sender addresses in cPanel's SpamAssassin spam filter and Roundcube Webmail contacts.

How-To 5 min read Updated 2026-03-11 Beginner Cynet Support

Quick Answer

Method 1 (SpamAssassin): cPanel → Spam Filters → Additional Configurations → Whitelist → Add the sender's address (e.g., [email protected] or *@example.com) → Save. Method 2 (Roundcube): Log in to Webmail → Roundcube → Contacts → Add the sender to your address book. Emails from contacts are not flagged as spam.

If emails from a trusted sender keep ending up in your Spam or Junk folder, you can whitelist their address so the server always delivers their messages to your inbox. There are two places to do this: the SpamAssassin spam filter in cPanel (server-level, applies before delivery) and Roundcube Webmail (account-level, manages your personal contacts).

Method 1: Whitelist in SpamAssassin (cPanel)

This is the most effective method because it works at the server level — emails from whitelisted addresses bypass spam scoring entirely before they reach any mailbox.

Step 1: Log in to cPanel

Navigate to yourdomain.com/cpanel or log in via the Cynet client area at manage.cynet.com.my.

Step 2: Open Spam Filters

In the cPanel dashboard, scroll to the Email section and click Spam Filters.

Step 3: Open Additional Configurations

Click Additional Configurations (or "Show Additional Configurations"). You'll see whitelist and blacklist sections.

Step 4: Add to Whitelist

  1. In the Whitelist section (also labelled "Allowed"), enter the email address or domain you want to whitelist:
FormatExampleEffect
Specific address[email protected]Whitelists only that address
Entire domain@company.comWhitelists all addresses from that domain
Subdomain@mail.company.comWhitelists all addresses from that subdomain
  1. Click Update Whitelist or Save

Step 5: Verify

Ask the sender to send you a test email. It should now arrive in your inbox instead of the Spam/Junk folder.

Important Notes

  • SpamAssassin whitelist applies to all email accounts on your domain
  • You can add multiple addresses — enter one per line
  • The whitelist overrides the spam score, so whitelisted emails will never be flagged as spam regardless of their content
  • This does not override server-level security blocks (e.g., blacklisted IPs or malware-detected emails)

Method 2: Whitelist in Roundcube Webmail

Adding a sender to your Roundcube address book ensures their emails are treated as trusted. This method works on a per-account basis — each email user manages their own contacts.

Step 1: Log in to Roundcube Webmail

  1. Go to yourdomain.com/webmail in your browser
  2. Enter your full email address and password
  3. Select Roundcube as your webmail application

Step 2: Open Contacts

Click the Contacts icon in the left sidebar (or from the top navigation menu).

Step 3: Add the Sender as a Contact

Option A: Add From an Existing Email

If you already have an email from the sender (even in the Spam folder):

  1. Open the email
  2. Right-click the sender's email address (or click the sender name)
  3. Select Add to Address Book or Save to Contacts
  4. Confirm and save

Option B: Add Manually

  1. In the Contacts section, click the Create New Contact button (+ icon)
  2. Fill in the details:
- Display Name: The sender's name (e.g., "John Smith") - Email: The sender's email address (e.g., [email protected])
  1. Click Save

Step 4: Move Existing Emails to Inbox

If the sender's previous emails are in your Spam/Junk folder:

  1. Go to the Junk or Spam folder
  2. Select the emails from the whitelisted sender
  3. Click Move toInbox (or drag and drop them to the Inbox folder)
  4. Right-click and select Mark → As Not Spam if the option is available

Step 5: Create a Filter Rule (Optional — Advanced)

For extra reliability, create a Roundcube filter rule to always move emails from the sender to your inbox:

  1. In Roundcube, go to Settings (gear icon) → Filters
  2. Click Create (+ icon) to add a new filter
  3. Configure the rule:
- Filter name: e.g., "Whitelist Company XYZ" - Condition: "From" → "contains" → company.com - Action: "Move message to" → Inbox
  1. Click Save
This filter runs on every incoming email and ensures matching messages always land in your inbox, even if SpamAssassin flags them.

Which Method Should I Use?

MethodScopeBest For
SpamAssassin (cPanel)All email accounts on the domainDomain administrators who want to whitelist a sender for the entire organisation
Roundcube (Webmail)Individual email account onlyIndividual users who want to manage their own trusted senders
For the most reliable results, use both methods — whitelist in SpamAssassin to prevent spam scoring, and add to Roundcube contacts for client-side trust.

Common Scenarios

Whitelisting a business partner

You regularly email with a client or supplier, but their messages keep going to spam:

  1. Whitelist @theircompany.com in SpamAssassin (covers the whole domain)
  2. Add their individual contacts in Roundcube

Whitelisting a newsletter or service

Transactional emails from services like invoicing platforms, CRMs, or booking systems are being flagged:

  1. Whitelist the service's sending domain in SpamAssassin (e.g., @notifications.service.com)
  2. Check the email headers to find the actual sending address — it may differ from the display address

Whitelisting your own domain

Emails between colleagues on the same domain are going to spam:

  1. Whitelist @yourdomain.com in SpamAssassin
  2. This ensures internal emails are never flagged

Troubleshooting

Emails still going to spam after whitelisting

  • Verify the exact sender address: Check the email headers — the "From" address shown may differ from the actual sending address. Whitelist the actual sending address.
  • Check for typos: Ensure the whitelisted address is spelled correctly
  • Clear spam folder: Move existing emails from Spam to Inbox and mark as "Not Spam"
  • Check auto-delete: If SpamAssassin's auto-delete is enabled, emails may be deleted before the whitelist is checked. Consider disabling auto-delete (see Adjust Spam Filter Sensitivity)
  • Email client rules: Your desktop email client (Outlook, Thunderbird) may have its own spam/junk filter. Check the client's whitelist settings as well

Whitelisted sender's emails bounce

Whitelisting does not override server-level rejections. If an email bounces (as opposed to going to spam), the issue is at the mail server level — contact Cynet support for assistance.

Too many senders to whitelist

If you're whitelisting many individual addresses, consider:

  • Raising the SpamAssassin threshold score instead (see Adjust Spam Filter Sensitivity)
  • Whitelisting entire domains (@domain.com) rather than individual addresses

whitelist spam email SpamAssassin Roundcube webmail cPanel

Need our team to handle this?

Need help setting up or troubleshooting your email? Submit a request and our team will assist you.

Was this article helpful?

Not sure which hosting plan is right for you?

Get a personalized recommendation in under 60 seconds.

Find the Right Plan