Auto-Forward Email Rules: Conditional Forwarding Explained

What are auto-forward email rules?#

An auto-forward email rule is a standing instruction that copies incoming mail to another address without you touching anything. It can forward everything, or only messages that match a condition such as a sender or subject. In Gmail you set it up with a verified address plus an optional filter; in Outlook you build an inbox rule with a forward action. The original stays in your mailbox unless you tell the rule otherwise.

The right setup depends on the job, so start by picking yours:

• Forward everything (consolidating your own addresses or retiring an old one) -- see the Gmail and Outlook setup sections below.
• Forward only some mail (invoices to finance, one client to an assistant) -- see conditional forwarding in Gmail and the Outlook rule steps.
• Forward to a team -- forwarding is usually the wrong tool; see the team section.
• Forwarding is blocked or says 'system-controlled' -- jump to the two Microsoft 365 admin sections.
• Stop a forward you no longer want -- see the last how-to section.

Forward everything or forward only matching mail?#

Decide this before opening any settings screen, because the two kinds live in different places and fail in different ways. A forward-everything rule has no condition: if mail lands in the mailbox, it is copied. A conditional forward fires only when a message matches a rule you define (sender, subject phrase, recipient address, attachment) and leaves everything else alone.

In Gmail they are separate features: the Forwarding setting forwards everything, Filters forward what matches. In Outlook both are inbox rules; a forward-everything rule is just a rule with no condition.

How do you set up auto-forwarding in Gmail?#

Gmail will not forward to any address until that address is verified. This is a deliberate anti-abuse step: Google emails a confirmation link to the destination and refuses to forward until someone clicks it. The short version for forwarding everything is below; the full walk-through, including troubleshooting, is in set up forwarding in Gmail.

1. 1

   Open Forwarding settings

   In Gmail on your computer, click Settings, then See all settings, then the Forwarding and POP/IMAP tab. The forwarding settings are not in the mobile app.

2. 2

   Add and verify the address

   Click Add a forwarding address, enter the destination, and confirm. Open the verification email in that inbox and click the link. Then refresh Gmail and reopen the tab.

3. 3

   Turn forwarding on

   Select Forward a copy of incoming mail to, pick the verified address, choose what happens to Gmail's copy (Google recommends keeping it in the Inbox), and click Save Changes. Only new mail is forwarded.

Gmail conditional forwarding: how do you forward only certain emails?#

To forward only some mail, skip the blanket setting and build a filter. The destination still has to be a verified address (add it in the Forwarding tab first). This is the part most Gmail guides gloss over, and it is the part you actually want.

1. 1

   Define the condition

   Click Show search options in the search box and fill in From, Subject or Has the words. Use the most specific field you can: an exact sender address is far safer than a loose keyword. Click Search first to check what matches.

2. 2

   Create the filter

   At the bottom of the search options, click Create filter to move to the actions step.

3. 3

   Choose the forward action

   Tick the Forward it option and select your verified address from the dropdown. Optionally add companion actions such as applying a label or archiving.

4. 4

   Save

   Click Create filter. Tick 'Also apply filter to matching conversations' only if you want the rule run once over existing mail.

How to set up auto forward in Outlook (rule steps)#

Outlook does everything through inbox rules. An Outlook rule to forward email needs three parts: a condition, a forward action, and a destination. These steps match the new Outlook, Outlook on the web and Outlook.com; classic desktop Outlook uses Rules > Manage Rules & Alerts with a wizard instead. For the full walk-through see auto forward emails in Outlook.

1. 1

   Open Rules

   Select Settings, then Mail > Rules, then Add rule.

2. 2

   Name the rule

   Use a name you will recognise later, like 'Forward invoices to finance', not 'Rule 1'. You will need to audit this.

3. 3

   Add a condition

   Pick From, Subject includes, or similar for a conditional forward. Choose Apply to all messages only if you genuinely want to forward everything.

4. 4

   Choose the forward action

   Under actions, choose Forward to (or Forward as attachment) and enter the destination address.

5. 5

   Save and order it

   Optionally add Stop processing more rules, then Save. Rules run top to bottom, so drag this one into the right place.

How do you forward emails from a specific sender or subject only?#

A rule to automatically forward certain emails is only as safe as its condition. A condition that matches an exact sender address forwards only that sender. A condition that matches the word 'order' anywhere will forward your colleague's note about reordering office supplies too. Specificity is safety. Build the condition on the signal that actually identifies the mail:

• By sender: the cleanest condition. 'From [email protected]' forwards exactly that vendor's mail.
• By recipient address: with plus-addressing ([email protected]) or a catch-all, forward by the address the mail was sent to.
• By subject phrase: match a distinctive multi-word phrase, not a single common word.
• By attachment: useful for routing PDFs to a document inbox, but it casts a wide net, so pair it with a sender where you can.

Forward vs redirect: what is the difference?#

Microsoft documents the difference this way: a forwarded message appears to come from you and replies go to the forwarding address, while a redirected message appears to come from the original sender and replies go to the original sender. Redirect when the next person should own the conversation; forward when you want to stay in the loop.

Redirect is offered in classic Outlook rules; the newer rule builder may only list Forward to and Forward as attachment, so check your action list. Gmail filters only offer forward, with no true redirect.

What does 'automatic forwarding is system-controlled' mean in Microsoft 365?#

If you searched for how to set automatic email forwarding rules to be system controlled, you have probably met the Automatic forwarding rules dropdown in the Microsoft Defender portal. It sits in the outbound spam policy and has three options: Automatic - System-controlled, On - Forwarding is enabled, and Off - Forwarding is disabled.

Automatic - System-controlled is the default, but it is not a setting that does one fixed thing. Microsoft explains that it was originally equivalent to On. In 2021 it changed to Off for new organisations and for existing ones that were not actively using the value, while organisations already relying on it can stay equivalent to On. Because behaviour differs by organisation, Microsoft recommends setting On or Off explicitly instead of leaving it on Automatic.

In practice, that means two things. If a user in your tenant cannot forward outside the company, the policy is probably resolving to Off. And you cannot fix it from your own mailbox: the setting is controlled by an admin, and it applies to cloud mailboxes and to Inbox rules and mailbox forwarding alike.

How admins block or allow auto-forwarding rules#

If you are the admin, there are three controls, and the block usually wins when they disagree. In the Microsoft Defender portal, open Email & collaboration > Policies & rules > Threat policies > Anti-spam, open the outbound policy, edit its protection settings, and set Automatic forwarding rules. You need a role such as Security Administrator or Organization Management, or Global Administrator. In Exchange Online PowerShell the same setting is the AutoForwardingMode parameter of Set-HostedOutboundSpamFilterPolicy, with values Automatic, On and Off.

The other two controls are remote domains, which allow or block automatic forwarding to some or all external domains, and mail flow rules (transport rules), which can detect and block messages forwarded to external recipients by Inbox rules. Microsoft notes that if one setting allows forwarding and another blocks it, the block typically wins. That is how an admin can set the policy to On and still restrict forwarding to approved domains.

To find out who is forwarding, Microsoft points to the Auto forwarded messages report in mail flow reports for cloud accounts. Google Workspace has an equivalent switch: in the Admin console, Apps > Google Workspace > Gmail > End User Access, the setting Allow users to automatically forward incoming email is on by default, and admins can limit it to internal addresses only or turn it off, which removes the forwarding option from Gmail settings. Users can set up only one forwarding address.

Why is my external forwarding blocked (550 5.7.520)?#

When the outbound spam policy blocks a forward, the message is returned to the original sender as a bounce, not to you. Microsoft documents the text as: 5.7.520 Access denied, Your organization does not allow external forwarding. Please contact your administrator for further assistance. So the person who emailed you sees the error, and you may not notice for days that nothing is arriving. The error code has its own page: 550 5.7.520 external forwarding blocked.

If you see 'you cannot set auto-forward email' or the forward simply never fires, ask your admin which of the three controls is blocking you. Do not look for a workaround: the fix is a policy decision, not a mailbox setting.

How do you forward email to a team?#

Start by questioning whether forwarding is the right tool. If a group of people handles support@ or sales@, a rule that copies each message to several inboxes gives everyone their own copy, nobody can see who already replied, and two people answer the same customer. A shared mailbox that everyone opens and replies from is the right structure for collaborative mail. Forwarding to many suits pure broadcast, where nobody replies as a team.

What are the deliverability and security risks of auto-forwarding?#

Forwarding quietly undermines the three systems that decide whether mail lands in the inbox: SPF (which servers may send for a domain), DKIM (a cryptographic signature on the message) and DMARC (what receivers do when those checks disagree with the From address). When your mailbox forwards a message, it goes out from your forwarding server, which is not on the original sender's SPF list, while the From address is unchanged. To the receiver that looks like spoofing, so SPF fails and, under a strict DMARC policy, the copy can be rejected or junked.

DKIM can survive forwarding because the signature travels with the message, but only if the forwarder does not alter signed content or headers. SRS (Sender Rewriting Scheme) rewrites the envelope sender so SPF can pass, and ARC (Authenticated Received Chain, RFC 8617, an experimental protocol) lets each handler record the authentication results it saw, so the next one can see the message's handling history. Both have to be implemented by the forwarding service, and a receiver chooses whether to trust them. For the details see ARC and email forwarding.

The security problem is the bigger one. A quiet forward is a common thing attackers install after breaking into an account, because it lets them read future mail without logging in again. Audit your own forwarding rules every few months: a forward you do not recognise, especially to an outside address, is a red flag. Remove it and change your password. See checking for a hidden forwarding rule.

How do you stop or disable email forwarding?#

Forwarding can come from more than one place, so if mail still forwards after you thought you stopped it, the cause is almost always a second rule or a different feature than the one you disabled.

1. 1

   Disable Gmail forward-everything

   Settings > Forwarding and POP/IMAP > Disable forwarding > Save Changes. This leaves filters untouched.

2. 2

   Remove Gmail forwarding filters

   Settings > Filters and Blocked Addresses. Edit or delete any filter whose action forwards.

3. 3

   Delete Outlook forward and redirect rules

   Settings > Mail > Rules. Turn off or delete any rule with a forward or redirect action, and check desktop Outlook for client-only rules.

4. 4

   Check for an admin-set forward

   If mail still forwards, a mailbox-level forward may have been set by IT. Ask your administrator to check it in Exchange or your admin console.

Where does AI Emaily fit in?#

Many people forward only to see two inboxes in one place. AI Emaily connects Gmail, Outlook and Microsoft 365, iCloud and other IMAP accounts into a single unified inbox, so consolidating your own accounts needs no forwarding: nothing is copied, so nothing is re-sent from a server the sender never authorised, and replies go from the right address. It does not replace admin controls, and it does not forward your mail to third addresses.

For routine routing, AI Emaily Rules let you match on conditions like sender, domain, subject and account, then apply actions such as labelling, filing or archiving, or hand the message to the agent to draft a reply for you to approve. Rules do not have a forward action, so a true handoff to another person is still a deliberate forward from your mail provider or a one-off forward of a single message. AI Emaily offers a 7-day free trial; Pro is $12.42/mo billed annually ($14.99 monthly). See pricing for current plans.