Verification Email or OTP Not Arriving? A Step-by-Step Troubleshooting Guide
You've entered your email, clicked "Send code," and now you're staring at an empty inbox. It's one of the most common frustrations online, and the cause is usually one of a handful of predictable problems.
This guide walks through why verification emails and one-time passcodes (OTPs) go missing, how to diagnose which problem you have, and what to do next. It covers regular inboxes like Gmail and Outlook as well as temporary addresses.
How a verification email actually travels
It helps to know the path a message takes:
- The website generates the code and hands the email to a sending service (often a transactional email provider).
- The sending service queues it. Busy services may hold messages for seconds or minutes.
- The receiving mail server accepts or rejects it after checking the sender's reputation and authentication (SPF, DKIM, DMARC).
- Filters sort it into the inbox, spam, promotions, or quarantine.
- Your mail app shows it, if it's refreshed.
A failure at any step looks the same to you: no email. The checklist below goes through those steps in order.
Step 1: Check the address you entered
It sounds obvious, but this is the most common cause. Look for:
- typos (
gmial.com,outlok.com, a missing letter) - autofill inserting an old address
- extra spaces before or after the address
- the wrong address in a copy-paste, if you're juggling several
If the site shows the address it sent to ("We sent a code to j***@example.com"), compare it carefully.
Step 2: Wait, then refresh properly
Many services send within seconds, but queues happen, especially during sales, product launches, or outages. Give it two to five minutes.
Then refresh the inbox itself, not just the page you're on. Mobile apps in particular may only sync every few minutes; pulling down to refresh forces a check.
Don't press "Resend" five times in a row. Many systems invalidate the earlier code each time you resend, and some rate-limit you after a few attempts. If an email then arrives late, it may contain a code that no longer works. Resend once, wait, and always use the most recent code.
Step 3: Look in spam, junk, and other tabs
Automated emails with short messages and links are exactly what spam filters look for. Check:
- Spam / Junk
- Gmail's Promotions and Updates tabs
- Outlook's "Other" tab (in Focused Inbox)
- Quarantine, if you use a work account; your IT team may need to release it
If you find it there, mark it "Not spam" so future messages from that sender arrive normally.
Step 4: Check filters and forwarding rules
If you set up email rules long ago, one might be quietly moving or deleting messages. Look for rules that:
- archive messages from "no-reply" senders
- move anything containing "verify" or "code"
- forward mail to another account
Also check whether your account has a blocked-senders list that includes the service.
Step 5: Consider whether the sender is blocking your domain
Some websites refuse to send to certain domains:
- Disposable or temporary email domains are commonly suppressed to prevent trial abuse.
- Some regional or small providers can be blocked by overcautious sending services.
- Company domains may reject external automated mail.
A telling sign: the site accepted your address without error, but nothing ever arrives, even after waiting and checking spam. If you're using a temporary address, try a different domain or a permanent address. Our guide on why websites block disposable email explains how this works.
Step 6: Is your inbox full?
A mailbox that has hit its storage limit will bounce new messages. Free accounts that share storage with photos and files (like Google accounts) fill up faster than people expect. Delete large attachments or old mail and try again.
Step 7: Check the service's status
If the website's email system is down, nothing you do on your side will help. Search for "[service name] status" or check the company's status page or social accounts. Outages usually clear within an hour.
Special notes for temporary inboxes
Temporary addresses are handy for one-off signups, but a few things work differently:
- Keep the inbox tab open. If you close it and your address can't be restored, you lose access to anything that arrives later.
- Expiry windows matter. A 10 minute email inbox can expire before a slow verification email arrives. Longer windows (Inboxflip keeps inboxes for 24 hours) handle delayed sends better.
- Receive-only is normal. Temporary inboxes typically can't send replies, so "reply to confirm" flows won't work.
- Don't use them for accounts you need to keep. If you ever need a password reset, you won't be able to receive it once the inbox is gone.
Special notes for SMS and authenticator codes
If a site offers several ways to get a code, your email may not be the problem at all:
- SMS codes can be delayed by carriers, blocked by roaming settings, or filtered as spam on some phones.
- Authenticator app codes are time-based. If your phone's clock is wrong, the codes won't match. Turn on automatic time in your phone settings.
A quick diagnostic table
| Symptom | Likely cause | What to try |
|---|---|---|
| Nothing arrives, no error shown | Queue delay, spam filter, or domain suppression | Wait 5 minutes, check spam, then try another address |
| Error says "invalid email" | Typo or domain blocked at signup | Recheck spelling; use a different domain |
| Code arrives but "doesn't work" | Older code after a resend, or code expired | Use the newest email only; request one fresh code |
| Arrives hours later | Sender queue or greylisting | Request a new code; avoid repeated resends |
| Work email gets nothing | Corporate quarantine | Ask IT to release or allowlist the sender |
For site owners: make codes easier to receive
If you run a site and your users complain about missing codes:
- authenticate your sending domain with SPF, DKIM, and DMARC
- use a reputable transactional email provider, separate from marketing mail
- keep verification emails short, with a clear subject such as "Your code: 482913"
- let codes stay valid for at least 10 minutes and don't invalidate them too aggressively
- show a "didn't get it?" help link that mentions checking spam
Frequently asked questions
How long should a verification email take? Usually under a minute. Anything over five minutes suggests a queue, a filter, or a block.
Why does the code say it's expired when I just got it? You probably pressed resend, which invalidated the earlier code, and then used the older email. Always use the latest message.
Can I use a temporary email for OTP codes? For one-time signups, yes. For ongoing two-factor authentication, no. You'd lose access when the inbox expires.
Why does Gmail put verification emails in Promotions? Gmail classifies based on content and sender patterns. Some transactional senders get misfiled. Check the tab and move the message to Primary.
Need a quick inbox for a one-time code? Get a free temporary address that stays active for 24 hours. For more on this use case, read our OTP verification guide.