Delivery facts
Check the task response, queue status, recipient address, actual arrival time, and duplicate sends. If nothing arrives, start with evidence from the sending side.
Cross-reference email types with validation dimensions instead of testing whatever comes to mind. The matrix works for verification codes, signup confirmations, notifications, and marketing templates.
| Email type | Delivery | Content | Interaction | Failure path |
|---|---|---|---|---|
| Login verification code | Exactly one email per trigger | Six-digit code and expiration match | Verification succeeds after copying | Old code expires; request rate is controlled |
| Signup confirmation | Correct destination and environment | Correct product name and account details | Confirmation link works only once | Expired link gives clear feedback |
| Security alert | Arrives promptly after the event | Time, device, and location can be verified | Security entry points to the correct domain | Clear steps exist for unauthorized activity |
| Product notification | Subscription status determines whether it sends | Subject matches the actual version | Deep link opens the target page | No further sends after unsubscribing |
A matrix is not about mechanically running every combination. It makes sure critical risks are not hidden behind polished screenshots.
Check the task response, queue status, recipient address, actual arrival time, and duplicate sends. If nothing arrives, start with evidence from the sending side.
The subject, sender, preheader, body, amounts, dates, and expiration must match the product interface and event data.
After copying a code, opening a confirmation link, replying, or unsubscribing, users should get a clear result they can recover from.
Cover expiration, repeated clicks, incorrect accounts, rate limiting, oversized attachments, and already-used links—not just successful flows.
Check both desktop and narrow reading areas to ensure long subjects, buttons, tables, and URLs do not break the message layout.
Use a newly marked address for every round to keep old messages, caches, or shared test inboxes from distorting the results.
Prioritize by impact and likelihood. For login, security, and payment emails, cover success, expiration, and duplicate actions first, then expand across clients.
The address, template, trigger, time, and result must connect. Conclusions that cannot be reproduced should not directly determine release decisions.