There is a particular moment in every side project's life: you have a domain, you want hello@yourdomain.com to work, and you do not want to pay a per-seat suite for a company of one. Free email forwarding exists precisely for that moment — and the market has noticed. Cloudflare Email Routing did not exist before 2021; as of the 2026-07-05 snapshot of our nightly DNS scan, it already handles inbound mail for 1.60% of the Tranco top-1M domains with MX records, up from 1.44% when it first entered our classification dictionary in April 2026. No other mailbox provider in the dataset has gone from zero to that share this fast.
That growth is deserved: for what forwarding does, it does it well. The problem is what it does not do — and the failure is silent, which is the worst kind.
What forwarding actually is
A forwarding service (Cloudflare Email Routing being the largest free example) sets your domain's MX records to its servers, receives mail addressed to you@yourdomain.com, and relays it to a mailbox you already own — usually a personal Gmail. There is no mailbox at your domain. There is no outbound infrastructure. It is a pipe, inbound only.
For receiving, this is genuinely fine. Mail arrives, spam filtering happens at your destination mailbox, and you paid nothing. The trap is on the other side of the conversation.
The reply path is where credibility dies
When you hit Reply in your personal Gmail to a forwarded message, the mail goes out from yourname@gmail.com — not from your domain. Your customer wrote to a business and got an answer from a personal address. For a founder selling to consumers this is a cosmetic wobble; for anyone selling B2B it reads as "this company is one person who has not set up email yet," which is exactly the impression the custom domain was supposed to prevent.
The usual workaround is Gmail's "send mail as" feature, which rewrites the From header to your domain. That fixes the cosmetics and breaks the plumbing:
- SPF misalignment. The message physically leaves Google's (or another provider's) servers on behalf of a domain whose SPF record may not authorise that path — and even when it passes, it often passes for the wrong domain in the eyes of DMARC alignment.
- DKIM signed by the wrong party, or not at all. Without a DKIM key published for your domain and used by the sending service, your mail carries no aligned signature. With 47.16% of DMARC-publishing domains now enforcing their policies, unaligned mail is increasingly rejected or quarantined outright, not just eyebrow-raised.
- Reputation you cannot build. Mailbox providers score sending domains over time. Mail scattered across a personal mailbox's infrastructure builds no history for your domain — so the day you do upgrade and start sending properly, you start from zero anyway.
When forwarding is genuinely enough
Forwarding is the right call — not a compromise — when all of these hold:
- Email is inbound-only for you: receipts, notifications, domain-verification codes, the occasional inquiry.
- You reply rarely, and the people you reply to already know you.
- Nobody's buying decision hinges on your email looking like a company.
- You are pre-revenue and every recurring dollar matters.
That describes a lot of parked projects, personal domains, and very early experiments — which is exactly why the Cloudflare series is growing. Its presence in a domain's MX is such a reliable small-team signal that salespeople use it to profile prospects.
The upgrade triggers
Move to a real mailbox provider the week any of these becomes true:
- You start outbound. Sales sequences, investor updates, customer onboarding — anything where a reply is the point. This is the hard trigger; ignore the others if you like, not this one.
- A second person joins. Shared inboxes, delegation, and "who answered this?" do not work over forwarding.
- You need to pass someone's security review. DMARC enforcement on your own domain effectively requires controlling your outbound path.
Upgrading is undramatic
The migration is one afternoon: pick a suite (the market has largely picked two winners), create the mailbox, swap MX records, publish the provider's SPF and DKIM records, add a DMARC record, and keep the forwarding rules as a catch-all if your provider supports it.
After upgrading, do not assume the plumbing works — verify it. Send a test to seed mailboxes at Gmail, Microsoft 365, Yahoo and beyond, and confirm SPF/DKIM/DMARC all pass and the mail lands in the inbox. Our free placement test does this in a minute, and the daily email infrastructure report shows which filters you are actually up against.