Unidentified emails being sent on SES


Hi. I am a little concerned that when i just logged into SES console I saw that my SES account is constantly sending approx 3 emails a day, even when not being used by my team. This has been going back months and also is showing 1.6% bounce rate and 0.9% complains in some cases on these 'unknown' emails. Is this usual? Is there a way I can see WHAT is being sent out exactly? (ie the content of the emails?) Our team can go weeks at a time without sending any SES emails, yet virtually every day it's showing 3 emails being sent out. What is going on ? Many thanks for any help I get.

  • Are you sure these message are truly originating from SES and not from a forged sender? Do you have DMARC configured for your verified domain and any custom MAIL FROM subdomain? If so, what are the DMARC policies (none, quarantine, reject)? How are you processing DMARC reporting?

  • I think i may have got to the bottom of this. My web guy reminded me that one of our other websites use this SES for it's signup notifications & password reset emails. While this doesn't explain the bounce & complaint rate (albiet very low) it does tally with the numbers of emails being sent out. I will see if I can dig a bit deeper for peace of mind. Thanks for the answers though, will digest those links.

asked a year ago49 views
2 Answers


You can setup a SNS notification so that everytime there is a delivery bounce or complaint you will get a notification with all the information, the From:, To:, Subject, etc... that you can then process or just receive on a email address to later processing.

Please take a look on how to enable the SES SNS notifications on your addresses/domains on the link below:

http://docs.aws.amazon.com/ses/latest/DeveloperGuide/configure-sns-notifications.html Also, if you are unaware and feel like your AWS Account is being misused, you pause the Sending: https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ses/update-account-sending-enabled.html

answered a year ago
  • That is really helpful. Thank you so much


Good question! Out of the box, SES Data events like email sends won't be tracked as CloudTrail will record AWS API Management Events.

However, to get more granularity on logging in AWS SES, you can set up more monitoring such as CloudWatch: https://docs.aws.amazon.com/ses/latest/dg/event-publishing-retrieving-cloudwatch.html including event publishing and retrieving.

Check out details here on what's included when you retrieve that information: https://docs.aws.amazon.com/ses/latest/dg/working-with-event-data.html which can include data including the top-level JSON object contains an eventType string, a mail object, and either a Bounce, Complaint, Delivery, Send, Reject, Open, Click, Rendering Failure, or DeliveryDelay object, depending on the type of event.

answered a year ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions