A note for portal operators and blocklist maintainers

Who runs ZeyMail

ZeyMail is operated by ZeyMail Inc., which provides managed mailboxes on the zeymail.com domain to consultancies that register their clients on portals which confirm an email address with a one-time code — contractor registration, procurement, licensing and similar systems. The service is in a closed pilot with one consultancy; we are not opening accounts to the public.

Questions from an operator or a list maintainer go to abuse@zeymail.com or postmaster@zeymail.com, and are answered by a person.

What a zeymail.com address is

• Issued by a named consultancy, under an account we open by hand. There is no public sign-up. Every mailbox is created by a signed-in, named account that belongs to a consultancy we know, and every mailbox carries an audit trail of who created it and when. Verification of the business behind an account is a condition of every account opened at launch.
• Created for one client’s registration. A consultancy issues a mailbox so that a specific client can be registered on a portal without lending out the client’s personal inbox. The consultancy reads the portal’s confirmation code there; once the registration is live, the client changes the address on the portal to their own.
• Kept for one to two years, then handed over. A mailbox stays on file for the life of the registration and its renewals and is retired only at the consultancy’s request. Mail inside it is retained for the whole time. Nothing is dropped after minutes or hours, and a retired address is never reissued.
• Not anonymous. Behind every address stands a consultancy with a named account, and behind that account a person we can contact. That is the opposite of a disposable or temporary email service, and it is the reason this page exists.

What it cannot do

• It cannot send. ZeyMail mailboxes only receive. No mail originates from zeymail.com apart from account notifications we send ourselves from noreply@zeymail.com.
• It cannot be created by the public. There is no public registration form, no API open to anyone without an account, and no way to obtain an address without a consultancy issuing it.
• It cannot be created in bulk by strangers. Only a signed-in consultancy account creates mailboxes, and every creation is logged against that account.

How we prevent abuse

• Closed access: accounts are opened by us, one at a time, for consultancies we have spoken to.
• An audit log records who created and retired each mailbox, and when.
• The domain publishes a DMARC reject policy with aligned SPF, so mail pretending to come from zeymail.com is refused by receiving servers.
• We check the domain against public disposable-domain lists every day, and act the same day if it appears on one.
• Reports to abuse@zeymail.com are read and answered by a person. A mailbox used against our Acceptable Use Policy is retired, and the account that issued it is suspended.

How to verify an address

Write to abuse@zeymail.com with the address in question. We will confirm whether it is active and which category of consultancy holds it — for example, a licensed contractor-registration agent. We do not disclose the client’s identity, and we do not disclose mail contents.

How to request removal

If you believe an address is being used against your terms, tell us which address and what happened. We retire the mailbox the same working day when the report is substantiated, and tell you what we did. If your list has placed zeymail.com on it, we would like to hear what evidence led there, and we will answer with the facts on this page and the records behind them.