# Error: From address does not match a verified Sender Identity (SendGrid)

Source: https://catalystgroup.gg/docs/email-delivery/error-sendgrid-sender-identity-mismatch/
Updated: 2026-10-19 · By Duane Garner

SendGrid refuses mail from an address it has not verified. Verify the sender or authenticate the domain, then use that address as the From Email.

This article is for sites using the **SendGrid** mailer where a send fails because the From address is not a verified Sender Identity.

 

> **The error as you see it:** `The from address does not match a verified Sender Identity. Mail cannot be sent until this error is resolved.`
>  
> Shown by the **SendGrid** mailer, in the failed-send banner, in **Tools → Debug Events** and in the **Email Log**. SendGrid returns it with HTTP status 403.

 

## What this error means

 

SendGrid will only send mail "from" an address you have proved you control. You can prove it in two ways: verify one address (a *Single Sender*), or authenticate a whole domain with DNS records (*Domain Authentication*). Your API key works, but the From address in this email is covered by neither.

 

## Common causes

 
- **The From Email was never verified**, or verification is still pending because the confirmation email was not opened.
- **Another plugin changed the From address**, for example to `wordpress@yoursite`, because **Force From Email** is off.
- **The domain was authenticated for a different subdomain** (for example `mail.example.com`) than the one in the From address (`example.com`).
- **The verification was made in another SendGrid account** or subuser.
- **The domain's DNS records were removed** after authenticating, so SendGrid marked the domain as failed.

 

## How to fix

 
1. See which address was used
  Open **CRM-NG SMTP → Settings → Email Log** (with logging on) and check the **From** of the failed email, or note the **From Email** on **CRM-NG SMTP → Settings → General**.
2. Open Sender Authentication
  Sign in to `https://app.sendgrid.com/` and go to **Settings → Sender Authentication**.
3. Authenticate the domain (recommended)
  Under **Domain Authentication**, choose **Authenticate Your Domain**, follow the steps, and add the DNS records SendGrid shows at your DNS host. Return and press **Verify**. All addresses on the domain then count as verified.
4. Or verify one address
  Under **Single Sender Verification**, create a sender with exactly the From Email, then open the confirmation email SendGrid sends to it and confirm.
5. Match the plugin
  In **CRM-NG SMTP → Settings → General**, set **From Email** to an address on the authenticated domain (or the verified single sender). Tick **Force From Email** so other plugins cannot replace it. If you authenticated a subdomain, enter it in **Sending Domain**. Press **Save Settings**.
6. Send a test
  Go to **CRM-NG SMTP → Tools → Email Test**, fill in **Send To** and press **Send Email**.

 

## Verify it worked

 

The test page shows "Test email sent successfully! Check your inbox to confirm delivery." In SendGrid, the domain shows *Verified* under **Sender Authentication**, and **Activity Feed** shows the test message as delivered.

 

## Notes

 
- Domain authentication also signs your mail with DKIM, which improves inbox placement. After adding it, run a test and check the "Deliverability and domain authentication" section on the test page.
- Single Sender verification is fine for trying SendGrid, but a domain is better for a live site.

 

## Related

 
- [SendGrid](https://catalystgroup.gg/docs/email-delivery/mailer-sendgrid/)
- [Sender name, address and the Force settings](https://catalystgroup.gg/docs/email-delivery/sender-name-and-address/)
- [Adding DNS records: SPF, DKIM and DMARC](https://catalystgroup.gg/docs/email-delivery/dns-records/)
- [Troubleshooting email delivery](https://catalystgroup.gg/docs/email-delivery/troubleshooting/)