Key Takeaways
- Email deliverability and email delivery are two different things and confusing them is the root of most email marketing problems. Email delivery is getting an email from your platform to the receiving mail server. Email deliverability is about what happens after it is accepted whether it lands in the inbox, spam, or promotions tab.
- Roughly 1 in 6 legitimate marketing emails never reaches the inbox. Validity’s 2025 benchmark put global average inbox placement at 83.5%, meaning roughly one in six legitimate marketing emails never reaches the inbox and Microsoft mailboxes ran hardest at 75.6%.
- Authentication (SPF, DKIM, DMARC) is now mandatory, not optional. Since November 2025, Gmail permanently rejects non-compliant bulk mail with hard 5xx SMTP errors. Microsoft followed in May 2025 covering Outlook, Hotmail, and Live.com. Together, these three providers cover roughly 90% of consumer and business email users globally.
- Authentication alone does not guarantee inbox placement. Fully authenticated mail valid SPF, DKIM, and DMARC still experienced spam placement rates above 30% in 2025. Authentication is the price of admission, not the prize.
- Sender reputation is built on engagement, not just technical setup. Once authentication confirms who you are, mailbox providers shift to a behavioral question: do the people you mail actually want it? They answer that with engagement signals opens, clicks, replies, time spent reading, and the inverse signals of delete-without-reading and spam complaints.
- The complaint rate is the engagement signal that damages reputation fastest. Spam complaint rates must stay below 0.3% to meet Gmail and Yahoo bulk sender requirements. Exceeding this threshold triggers immediate inbox placement penalties.
- List hygiene regularly removing inactive, invalid, and unengaged subscribers is as important as technical configuration** for maintaining long-term deliverability.
Introduction
You spent hours writing the perfect email. The subject line is compelling. The content is genuinely useful. The design looks clean on every device. You hit send.
And it lands in spam.
Or worse it never arrives at all.
Deliverability is whether the messages you send reach the inbox instead of spam or a silent block. Get it right and most mail lands. Get it wrong and no subject-line trick will save you.
The frustrating truth is that email deliverability has nothing to do with how good your email is. It is determined by a combination of technical infrastructure signals, sender reputation scores, and behavioral engagement data all evaluated by sophisticated filtering systems at Gmail, Outlook, and Yahoo before a single human eye ever sees your message.
In 2026, Google, Yahoo, and Microsoft have all moved from politely delaying non-compliant bulk mail to rejecting it outright. The bar to clear keeps rising past authentication into how real people engage with what you send.
This guide explains exactly how those filtering systems work in plain English and gives you the complete framework for getting your emails to the inbox consistently.
What You Will Learn
In this guide, you’ll learn:
- The exact difference between email delivery and email deliverability
- How mailbox providers decide where your email goes the full filtering process
- What SPF, DKIM, and DMARC actually do and how to set them up correctly
- What sender reputation is and the specific signals that build or destroy it
- How engagement metrics (opens, clicks, complaints) affect your inbox placement
- What list hygiene means and why it matters more in 2026 than ever before
- The 9 most common reasons emails land in spam with fixes for each
- How to test your deliverability before sending to your full list
- What BIMI is and why it matters for open rates in 2026
- The 12-point deliverability checklist to implement before your next campaign
Email Delivery vs Email Deliverability – The Critical Difference
These two terms are used interchangeably incorrectly. The distinction between them reveals where most email marketing problems actually live.
Email delivery is getting an email from your email marketing platform to the receiving mail server of your recipient for example, from ConvertKit to Gmail’s servers. Email deliverability is about what happens after it is accepted, and is also known as inbox placement. Email deliverability is the ability for your emails to successfully land in your subscribers’ inbox instead of spam or junk.
| Email Metric | What It Measures | Healthy Benchmark |
|---|---|---|
| Delivery Rate | The percentage of emails successfully accepted by recipients’ mail servers. This measures whether your emails are delivered rather than rejected or bounced. | 98% or higher |
| Inbox Placement Rate | The percentage of delivered emails that reach the Primary Inbox instead of the Spam or Promotions folder. This is one of the most important indicators of email deliverability. | 85% or higher |
| Open Rate | The percentage of recipients who open your email. Open rates vary by industry, audience quality, subject line effectiveness, and whether image tracking is enabled. | 20–40% (industry-dependent) |
| Click-Through Rate (CTR) | The percentage of recipients who click at least one link within your email. This measures how engaging and relevant your content and call-to-action are. | 2–5% on average |
| Spam Complaint Rate | The percentage of recipients who mark your email as spam or junk. High complaint rates can seriously damage your sender reputation and future deliverability. | Below 0.1% is excellent; below 0.3% is generally considered acceptable |
You can hit 99% delivery and still have a serious problem. A delivered email that sits in spam is, for practical purposes, not delivered.
This is why your email platform’s dashboard showing “delivered” does not mean your subscribers are actually seeing your emails. Delivery rate and inbox placement rate are completely different measurements and only inbox placement actually drives revenue.
How Spam Filters Actually Work
When you hit Send, your email does not go directly to your subscriber’s inbox. It passes through a multi-layered filtering system that runs in milliseconds. Here is what happens in order:
Layer 1 Connection-Level Filtering
The receiving mail server checks whether your sending IP address is on a known blocklist. If yes, the connection is rejected immediately and the email never arrives at all not even in spam.
Layer 2 Authentication Checks
The server verifies your SPF, DKIM, and DMARC records. In 2026, if your SPF, DKIM, and DMARC are not all passing and aligned, your email goes to spam. Receivers check authentication before they even look at what you wrote.
Layer 3 Sender Reputation Analysis
The server queries its reputation database for your sending domain and IP. This score is built from your full sending history complaint rates, bounce rates, engagement patterns, and blocklist appearances.
Layer 4 Content Analysis
The message content is analyzed for spam signals suspicious links, misleading subject lines, poor text-to-image ratio, spam trigger words, and HTML structure issues.
Layer 5 Behavioral / Engagement Signals
Gmail prioritizes user engagement and behavioral signals. Its filtering system is heavily influenced by machine learning and adapts dynamically to user actions. Outlook is generally more sensitive to authentication and reputation signals and tends to apply stricter filtering rules.</cite>
Layer 6 Inbox vs Spam Placement Decision
Based on all of the above, the filtering system routes the email to: the inbox, the promotions or social tab, the spam folder, or rejects it entirely.
Every layer must be cleared. Passing authentication but having a poor sender reputation still lands you in spam. Having a great reputation but broken authentication means rejection before your content is even read.
The Two Pillars of Deliverability: Authentication and Reputation
All deliverability problems trace back to one of two root causes:
Pillar 1 Authentication (Technical Trust)
Can the receiving server verify that you are who you claim to be? This is controlled by SPF, DKIM, and DMARC configuration. Authentication is binary either it passes or it fails. Failing authentication means spam or rejection, regardless of everything else.
Pillar 2 Sender Reputation (Behavioral Trust)
Even after passing authentication, do mailbox providers trust you enough to put you in the inbox? This is built over time through consistent, engaged sending to people who want to hear from you.
Authentication is the price of admission, not the prize. Fully authenticated mail still experienced spam placement rates above 30% in 2025. Once authentication confirms who you are, mailbox providers shift to a behavioral question: do the people you mail actually want it?
Think of authentication as getting through the door. Reputation is what determines whether you get a seat at the table.
SPF Explained: Who Is Allowed to Send Your Email?
SPF (Sender Policy Framework) is a DNS record that tells receiving mail servers which IP addresses and services are authorized to send email on behalf of your domain.
Without SPF, any server in the world can claim to send email from your domain and receiving servers have no way to verify whether it is legitimate. SPF fixes this by publishing an authorized list in your DNS.
How SPF works:
1. You publish an SPF record in your domain’s DNS settings (a TXT record)
2. When someone receives an email claiming to be from your domain, their mail server looks up your SPF record
3. It checks whether the sending server’s IP address is listed as authorized
4. If yes SPF passes. If no SPF fails, and the email is treated with suspicion or rejected
What an SPF record looks like:
“`
v=spf1 include:mailgun.org include:sendgrid.net ~all
“`
Breaking this down:
– `v=spf1` declares this is an SPF record
– `include:mailgun.org` authorizes Mailgun’s servers to send from your domain
– `include:sendgrid.net` authorizes SendGrid’s servers
– `~all` treat all other senders as suspicious (softfail)
The critical SPF rule to know:
SPF fails most often when businesses keep adding tools without cleaning up old records. A bloated or duplicated SPF record exceeding 10 DNS lookups causes messages to fail authentication entirely, even when the sending IP is listed.
SPF has a hard limit of 10 DNS lookups. Every `include:` statement counts as one lookup. If you use multiple email services (marketing email, transactional email, CRM, support desk), your SPF record can easily exceed this limit. Use an SPF flattening tool to consolidate your record if you are approaching the limit.
How to add an SPF record:
1. Log in to your domain registrar (Namecheap, Cloudflare, GoDaddy)
2. Go to DNS settings for your domain
3. Add a new TXT record:
– Host/Name: `@` (or leave blank for root domain)
– Value: your SPF record (your email provider gives you this)
– TTL: 3600 (1 hour)
4. Your email provider’s setup guide gives you the exact `include:` statements to use
DKIM Explained: Is the Email Tampered With in Transit?
DKIM (DomainKeys Identified Mail) adds a cryptographic digital signature to every outgoing email. This signature proves two things: that the email genuinely originated from your domain, and that it was not modified between leaving your server and arriving at the recipient’s.
How DKIM works:
1. Your email service generates a pair of cryptographic keys a private key (stored on their server) and a public key (published in your DNS)
2. When you send an email, the private key generates a unique signature for that specific email’s content
3. The signature is embedded in the email’s headers
4. When the receiving server gets the email, it looks up your public DKIM key in your DNS
5. It uses the public key to verify the signature if it matches, the email is intact and authentic
DKIM verifies that your messages have not been altered and that they genuinely come from your domain.
DKIM setup:
Your email service provider (ConvertKit, Mailchimp, ActiveCampaign) generates the DKIM records for you. You add them as CNAME or TXT records in your domain’s DNS. The provider’s setup documentation gives you the exact records.
Key DKIM best practices in 2026:
Use RSA 2048-bit keys or longer shorter keys are considered weak and some providers now flag emails signed with 1024-bit keys.
– Rotate DKIM keys periodically (at least annually) this limits the damage if a key is ever compromised
– Sign the `From:` header on every message this is required for DMARC alignment
DMARC Explained: What Happens When Authentication Fails?
DMARC (Domain-based Message Authentication, Reporting and Conformance) is the policy layer that ties SPF and DKIM together. It tells receiving servers what to do when an email fails SPF or DKIM checks and critically, it sends you reports so you can see exactly what is happening with your domain’s email.
DMARC instructs receiving servers how to handle messages that fail SPF or DKIM with your domain. A message passes DMARC if it passes at least one protocol with domain alignment.
The three DMARC policies:
| DMARC Policy | What It Does | When to Use It |
|---|---|---|
p=none | Monitoring mode only. Emails that fail DMARC authentication are still delivered normally, but the receiving mail servers send authentication reports to the domain owner. No messages are quarantined or rejected. | Recommended starting point. Use this policy when first implementing DMARC to monitor email authentication results and identify any legitimate email sources that need to be configured correctly. |
p=quarantine | Emails that fail DMARC authentication are typically delivered to the recipient’s Spam or Junk folder instead of the inbox. | Use this after reviewing DMARC reports and confirming that all legitimate email sources pass SPF and DKIM authentication. It provides stronger protection while allowing you to monitor for any remaining issues. |
p=reject | Emails that fail DMARC authentication are rejected by the receiving mail server and are never delivered to the recipient. This provides the highest level of protection against email spoofing and phishing attacks. | Final recommended stage. Move to this policy only after running successfully with p=quarantine and verifying that all legitimate emails consistently pass DMARC authentication. |
What a DMARC record looks like:
“`
v=DMARC1; p=none; rua=mailto:dmarc-reports@yourdomain.com
“`
– `v=DMARC1` declares this is a DMARC record
– `p=none` monitoring mode, no enforcement
– `rua=` where aggregate reports are sent (your email address)
The recommended DMARC implementation path:
Start with p=none with RUA reporting enabled. This provides visibility into all email sources sending as your domain without affecting delivery. Use a DMARC reporting tool to analyze aggregate reports and identify legitimate senders, unauthorized senders, and authentication failures. Once DMARC reports show that all legitimate email sources pass authentication, move to p=quarantine. Once clean, move to p=reject.
Why DMARC is now mandatory:
The practical consequence is straightforward: if your domain does not have properly configured SPF, DKIM, and DMARC, your emails to Gmail, Yahoo, and Outlook recipients collectively representing the vast majority of email inboxes worldwide may not be delivered at all.
Sender Reputation: The Behavioral Score That Controls Everything
Sender reputation is the long-term trust score that mailbox providers assign to your sending domain and IP address. It is not published anywhere you cannot look it up. It is built silently, over time, based entirely on how recipients interact with your emails.
Sender reputation reflects the trustworthiness of your domain and sending infrastructure. It is built over time based on complaint rates, bounce rates, engagement, blocklist appearances, and authentication completeness. A strong reputation increases inbox placement, while a weak or unstable reputation increases the likelihood of spam filtering.
What builds positive reputation:
– High open rates people actively want to read your emails
– Clicks and replies strong engagement signals
– Low bounce rates your list is clean and well-maintained
– Low complaint rates people do not mark you as spam
– Consistent sending volume no sudden spikes
– Long track record reputation compounds over time
What destroys reputation:
– High spam complaint rates the single most damaging signal
– High bounce rates particularly hard bounces from invalid addresses
– Sudden volume spikes sending 10x your normal volume triggers filters
– Spam trap hits sending to email addresses that are traps set by anti-spam organizations
– Blocklist appearances being listed on Spamhaus, SURBL, or similar
– Low engagement sending to people who never open, click, or interact
The counterintuitive truth about reputation:
The teams that win the inbox in 2026 are the ones that mail engaged people, make leaving easy, monitor the complaint rate against the provider’s own data, and remove the contacts who have stopped caring rather than mailing them into a reputation hole.
A smaller, highly engaged list delivers better inbox placement than a massive list of disengaged subscribers. This is the single most important mindset shift in modern email marketing.
Engagement Signals: What Mailbox Providers Watch
Mailbox providers particularly Gmail have invested heavily in machine learning systems that predict whether each individual recipient wants to receive your email. They watch for these specific signals:
Positive engagement signals:
| User Engagement Signal | What It Tells Gmail and Other Email Providers |
|---|---|
| Opening an Email | Indicates that the recipient is interested in emails from this sender. Consistently high open rates help improve your sender reputation over time. |
| Clicking a Link | A strong positive engagement signal showing that the recipient actively interacted with your email content. This suggests the email was relevant and valuable. |
| Replying to an Email | One of the strongest positive signals. It indicates a genuine two-way conversation and tells email providers that the sender is trusted and the content is highly relevant. |
| Moving an Email from Spam to Inbox | A deliberate action by the recipient that tells the email provider the message was incorrectly classified as spam and should be trusted in the future. |
| Saving, Starring, or Flagging an Email | Indicates that the recipient considers the email valuable enough to keep for future reference, reinforcing the sender’s reputation and content quality. |
Negative engagement signals:
| Negative User Engagement Signal | What It Tells Gmail and Other Email Providers |
|---|---|
| Marking an Email as Spam | One of the strongest negative signals. It immediately tells Gmail that the sender is unwanted, damaging the sender’s reputation and increasing the likelihood that future emails will be filtered into the spam folder. |
| Deleting an Email Without Opening It | Indicates low interest or irrelevant content. If this behavior is repeated across many recipients, it can gradually reduce future inbox placement and engagement rates. |
| Never Opening Emails from the Same Sender | Signals long-term recipient disengagement. Over time, Gmail may begin routing future emails from that sender to the Spam or Promotions folder because the recipient consistently ignores them. |
| Unsubscribing from Emails | Generally considered a neutral or mildly negative signal. It indicates the content is no longer relevant to the recipient but is far better than receiving a spam complaint, as it allows users to opt out without harming the sender’s reputation as severely. |
The complaint rate threshold in 2026:
Google and Yahoo require spam complaint rates below 0.3% for bulk senders. The initial threshold for concern is above 0.1% at this point, Google’s Postmaster Tools shows a degraded reputation. Above 0.3% triggers active enforcement including spam folder placement and potential rejection.
To put this in concrete terms: if you send 10,000 emails and 30 people mark it as spam (0.3%), you have hit Gmail’s enforcement threshold. That is not 30 angry people that is 30 clicks on “Report Spam” that now damage the deliverability of every future email you send to every Gmail user.
List Hygiene: Why a Dirty List Destroys Deliverability
List hygiene means regularly cleaning your email list to remove subscribers who are no longer valid, engaged, or safe to email. In 2026, list hygiene is one of the highest-impact deliverability improvements you can make.
Types of problematic addresses:
| Email List Issue | What It Means | Potential Impact |
|---|---|---|
| Hard Bounces | The email address is permanently invalid or no longer exists. The receiving mail server rejects the message because delivery is impossible. | Severely damages your sender reputation and can negatively affect both your domain and IP reputation if hard bounce rates become too high. |
| Soft Bounces | A temporary delivery failure caused by issues such as a full mailbox, server outage, oversized email, or temporary receiving server problem. | Usually temporary, but repeated soft bounces can eventually be treated as hard bounces if the problem persists. |
| Spam Traps | Email addresses created by anti-spam organizations or mailbox providers specifically to identify senders using poor list-building practices or purchased email lists. | Extremely harmful. Hitting even a few spam traps can result in immediate blocklisting, severe reputation damage, and significantly reduced email deliverability. |
| Role-Based Email Addresses | Generic business addresses such as info@, admin@, support@, or sales@ that are often monitored by multiple people within an organization. | Higher risk of spam complaints because multiple recipients share the same inbox. A single complaint can affect your sender reputation for the entire organization. |
| Inactive Subscribers | Contacts who have not opened, clicked, or engaged with your emails for six months or longer. | Reduce overall engagement rates and signal to mailbox providers that your emails are becoming less relevant, which can hurt future inbox placement. |
| Invalid Email Syntax | Email addresses containing typing mistakes or formatting errors, such as gmial.com instead of gmail.com, or missing the @ symbol. | Causes unnecessary bounces and lowers your delivery rate. Using real-time email validation during sign-up helps prevent invalid addresses from entering your mailing list. |
List hygiene best practices:
1. Remove hard bounces immediately after every send never email them again
2. Remove or re-engage inactive subscribers every 90–180 days
3. Run a re-engagement campaign before removing inactives send one final email asking if they want to stay. Remove anyone who does not respond or click
4. Use double opt-in for all new subscribers this eliminates typos, fake addresses, and people who never wanted to be on the list
5. Verify email addresses at sign-up** using a tool like ZeroBounce or NeverBounce rejects invalid addresses before they enter your list
The counterintuitive advice that works:
Sending to 5,000 highly engaged subscribers gets better inbox placement than sending to 50,000 with 40% inactives. Sending less to a cleaner list consistently improves deliverability which means more of your emails reach the inbox which means more opens, clicks, and revenue. Smaller is often more profitable.
Email Content and Spam Trigger Factors
Once authentication and reputation filters are cleared, your email content undergoes its own analysis. While content filters are less decisive than authentication and reputation in 2026, they still matter at the margin.
Content signals that trigger spam filters:
– Misleading subject lines subject lines that promise something the email does not deliver, or that use deceptive urgency (“Your account will be suspended unless…”)
– Spam trigger words phrases historically associated with spam: “FREE!!!”, “Click here now”, “You’ve been selected”, “Act immediately”, “100% guaranteed”
– Poor text-to-image ratio emails that are entirely images with minimal text are flagged as potential spam because text cannot be read by filters
– No plain-text alternative HTML emails should always have a plain-text version. Email clients and filters expect both
– Link shorteners cloaked or shortened URLs (bit.ly, tinyurl) raise red flags because they hide the actual destination
– Excessive capitalization or punctuation ALL CAPS SUBJECT LINES or multiple exclamation marks!!! signal low-quality sending
– Unbalanced HTML broken HTML, unclosed tags, or messy code copied from word processors
Content best practices:
– Write subject lines that accurately reflect the email content
– Maintain a healthy text-to-image ratio aim for at least 60% text
– Use full, visible URLs rather than shortened links
– Always include a plain-text version of every email
– Include a physical mailing address in every email (legally required in most jurisdictions)
– Make the unsubscribe link obvious and working a buried unsubscribe link generates more spam complaints than an obvious one.
Nine Common Reasons Emails Land in Spam and Exact Fixes
Reason 1 – Missing or broken SPF record
Symptom: Emails consistently land in spam or bounce with authentication errors
*Fix:* Log in to your domain DNS → add an SPF TXT record including all your sending services → verify with MXToolbox.com/spf-email-header.aspx
—
Reason 2 – DKIM not configured
*Symptom:* Emails arrive but with “via [provider].com” visible to recipients, or fail DMARC alignment
*Fix:* In your email provider settings → find DKIM or “Domain Authentication” → follow the setup guide → add the provided CNAME or TXT records to your DNS
—
**Reason 3 – No DMARC record published**
*Symptom:* You are sending from a domain with no DMARC policy — increasingly rejected by Gmail and Outlook for bulk sends
*Fix:* Add a DMARC TXT record to your DNS: `v=DMARC1; p=none; rua=mailto:youremail@yourdomain.com`
—
Reason 4 – High spam complaint rate
*Symptom:* Gmail Postmaster Tools shows a red or orange domain reputation
*Fix:* Stop sending to your full list immediately → identify which segments are most likely to complain (old subscribers, purchased lists, single opt-in) → remove them → resume only to engaged subscribers → implement double opt-in for all future sign-ups
—
Reason 5 — High bounce rate
*Symptom:* More than 2–3% of emails bounce, particularly hard bounces
*Fix:* Remove all hard bounces from your list immediately → run your list through an email verification tool (ZeroBounce, NeverBounce) → enable email verification at your sign-up form
—
Reason 6 – Sending to inactive subscribers
*Symptom:* Open rates declining over time, spam complaints increasing
*Fix:* Segment your list by last engagement date → run a re-engagement campaign for subscribers inactive 90+ days → remove those who do not re-engage → send only to active subscribers going forward
—
Reason 7 – Sending from a free email domain
*Symptom:* Emails sent from @gmail.com, @yahoo.com, or @hotmail.com as a business sender go to spam
*Fix:* Always send from your own domain (e.g., hello@sitelaunchlab.com) never from a free email provider. Set up a custom domain email and configure SPF/DKIM/DMARC on it
—
Reason 8 – Domain or IP on a blocklist
*Symptom:* Emails are rejected or go to spam across multiple providers simultaneously
*Fix:* Check your domain and sending IP at MXToolbox.com/blacklists.aspx → if listed, identify the reason → clean up the issue (remove inactive subscribers, reduce complaint rates) → submit a delisting request to the blocklist operator
—
Reason 9 – Sudden sending volume spikes
*Symptom:* New email list or new domain first campaign goes straight to spam
*Fix:* Warm up your sending domain gradually (see Section 13) → start with small volumes to your most engaged subscribers → increase volume slowly over 4–8 weeks
IP Reputation vs Domain Reputation
Email reputation exists at two levels: the IP address you send from, and the domain you send from. Understanding the difference helps you diagnose deliverability problems correctly.
In most cases, improving domain reputation has a greater impact on deliverability than focusing solely on IP reputation. Modern email deliverability is primarily domain-based.
| Factor | IP Reputation | Domain Reputation |
|---|---|---|
| What It Is | The trust score assigned to the IP address that sends your emails. Mailbox providers use it to evaluate whether emails from that server are likely to be legitimate or spam. | The trust score assigned to your sending domain (the domain shown in the From: address). It reflects the long-term reputation of your brand as an email sender. |
| Who Controls It | Shared with other senders if you’re using a shared IP through an Email Service Provider (ESP). With a dedicated IP, you have full control over its reputation. | Entirely under your control because it is tied directly to your domain and email authentication setup. |
| How It’s Built | Based on factors such as sending volume, sending consistency, complaint rates, bounce rates, blocklist history, and overall IP behavior. | Built through consistent recipient engagement, proper email authentication (SPF, DKIM, and DMARC), low complaint rates, and a history of sending relevant emails. |
| How It’s Damaged | Frequent hard bounces, high spam complaint rates, sudden spikes in sending volume, spam trap hits, or the IP appearing on email blocklists. | High spam complaint rates, poor engagement, spam trap hits, sending unauthenticated emails, and repeatedly mailing inactive subscribers. |
| How to Improve It | Warm up new IP addresses gradually, maintain a clean mailing list, use a reputable ESP, and consider a dedicated IP if you send high email volumes. | Improve list hygiene, increase subscriber engagement, authenticate your domain with SPF, DKIM, and DMARC, and consistently send valuable, permission-based emails. |
Shared vs dedicated IP:
Most small businesses and bloggers send through a shared IP meaning your deliverability can be affected by other senders using the same IP address at your email service provider. If another sender using the same shared IP receives spam complaints or sends malicious emails, your deliverability can also suffer, even if your own email practices are clean.
Dedicated IPs are available at higher pricing tiers on most ESPs and are worth considering once you send more than 50,000–100,000 emails per month.
How to Warm Up a New Sending Domain?
A new domain or IP address has zero sending history. Mailbox providers treat it with caution and sending large volumes immediately will almost certainly land in spam.
Domain warmup is the process of gradually establishing a positive sending reputation with a new domain or IP by slowly increasing volume while maintaining excellent engagement.
The warmup schedule:
| Warm-Up Phase | Recommended Daily Send Volume | Target Audience |
|---|---|---|
| Week 1 | 50–100 emails/day | Send only to your most engaged subscribers, such as recent sign-ups, loyal readers, and contacts with consistently high open and click rates. This helps establish a positive sender reputation from the beginning. |
| Week 2 | 200–500 emails/day | Expand to subscribers who have engaged with your emails within the last 30 days. Continue monitoring delivery, open rates, and spam complaints. |
| Week 3 | 500–2,000 emails/day | Include engaged subscribers from the last 60 days while maintaining consistent sending volume and monitoring deliverability metrics. |
| Week 4 | 2,000–5,000 emails/day | Gradually expand to subscribers who have engaged within the last 90 days, assuming your sender reputation remains healthy and complaint rates stay low. |
| Week 5 and Beyond | Gradually increase to your full mailing list | Continue adding broader audience segments while prioritizing active subscribers. Remove inactive contacts and maintain good list hygiene to protect your sender reputation. |
Warmup best practices:
– Send to your most engaged subscribers first their positive engagement signals (opens, clicks) build reputation faster
– Monitor spam placement and complaint rates throughout if rates rise, slow down and diagnose before continuing
– Keep sending frequency consistent gaps followed by spikes damage warming progress
– Use a subdomain for bulk email (e.g., `mail.yourdomain.com`) this protects your root domain’s reputation if warmup encounters issues
BIMI: The Deliverability Signal Most Marketers Ignore
BIMI (Brand Indicators for Message Identification) displays your brand logo next to your sender name in supporting email clients including Gmail, Yahoo, and Apple Mail. It requires DMARC to be at `p=quarantine` or `p=reject` before it can be implemented.
Senders using BIMI logos report open rates up to 39% higher. Two certificate types are available: VMC (requires a registered trademark, around $1,500/year, supported by Gmail, Yahoo, and Apple Mail) and CMC (no trademark required, Gmail only).
Why BIMI matters for deliverability:
BIMI requires full DMARC enforcement to implement. The process of getting to BIMI-ready forces you to fully configure and verify your authentication stack which itself is the most impactful deliverability improvement available. Think of BIMI as the reward for getting your authentication completely right.
How to implement BIMI:
1. Ensure DMARC is at `p=quarantine` or `p=reject`
2. Prepare a square SVG logo file meeting BIMI specifications
3. Publish a BIMI TXT record in your DNS:
“`
default._bimi.yourdomain.com TXT “v=BIMI1; l=https://yourdomain.com/logo.svg;”
“`
4. For VMC (verified mark certificate) apply through Entrust or DigiCert
5. For Gmail specifically Google validates your BIMI record and begins showing your logo
How to Test Your Email Deliverability
Never send to your full list without testing deliverability first. Here are the tools and methods to verify your setup is correct:
Free testing tools:
| Tool | What It Tests | Best Use Case |
|---|---|---|
| Mail-Tester.com | Analyzes your email’s overall spam score, SPF, DKIM, DMARC authentication, message content, HTML quality, and common spam triggers. | Perform a complete pre-send deliverability check before launching an email campaign. |
| MXToolbox | Validates SPF, DKIM, and DMARC records, checks DNS configuration, identifies email server issues, and verifies whether your domain or IP appears on common email blocklists. | Troubleshoot email authentication problems and monitor your domain’s email reputation. |
| Google Postmaster Tools | Provides Gmail-specific insights, including domain reputation, spam rate, authentication status, IP reputation, encryption, and delivery errors. | Monitor how Gmail views your sending domain and identify deliverability issues affecting Gmail users. |
| GlockApps | Tests inbox placement across major email providers (such as Gmail, Outlook, and Yahoo), showing whether your emails land in the Inbox, Promotions, or Spam folder. | Verify real-world inbox placement before sending important campaigns. |
| Unspam.email | Uses AI to evaluate email content for spam risks, analyzes HTML structure, authentication records, accessibility, and predicts inbox placement. | Optimize email design and content to reduce spam risk and improve deliverability before sending. |
How to use Mail-Tester.com (the fastest free test):
1. Go to mail-tester.com you will see a unique test email address
2. Send your email to that address from your actual email platform (ConvertKit, Mailchimp, etc.)
3. Wait 30–60 seconds, then click “Then check your score”
4. You will see a score out of 10 and a detailed breakdown of every issue authentication, blacklists, content, infrastructure
How to use Google Postmaster Tools:
1. Go to postmaster.google.com
2. Add your sending domain
3. Verify ownership via a DNS TXT record
4. After several days of sending, you will see your domain reputation (High, Medium, Low, Bad), spam rate data, and authentication pass rates
This is the most important ongoing monitoring tool for Gmail deliverability because it shows you how Gmail specifically evaluates your sending domain, using their own data.
The 12-Point Deliverability Checklist
Authentication (Technical Foundation):
– SPF record published in DNS verified at MXToolbox
– DKIM enabled in your email service provider CNAME/TXT records added to DNS
– DMARC record published start at `p=none` with `rua=` reporting address
– SPF lookup count is under 10 use an SPF flattening tool if needed
Sender Setup:
– Sending from a custom domain email not @gmail.com or similar
– Using a reputable email service provider (ConvertKit, Mailchimp, ActiveCampaign, MailerLite)
– Sending subdomain configured (e.g., `mail.yourdomain.com`) for bulk email
– One-click unsubscribe enabled in your ESP settings
List Health:
– Double opt-in enabled for all new subscribers
– Hard bounces removed after every campaign
– Inactive subscribers (90+ days) segmented and running through re-engagement
– No purchased, rented, or scraped email addresses in your list
Reputation Monitoring:
– Google Postmaster Tools set up and showing domain reputation
– Complaint rate monitored staying below 0.1%
– Sending volume is consistent no sudden spikes
– Monthly blacklist check at MXToolbox
Frequently Asked Questions
What is email deliverability?
Email deliverability is the ability for your emails to successfully land in your subscribers’ inbox instead of spam or junk. It is distinct from email delivery delivery is whether the receiving server accepted the message, while deliverability is about inbox placement after acceptance.
Why is my email going to spam even though I never send spam?
Several technical reasons can cause this even for legitimate senders: missing or broken SPF, DKIM, or DMARC configuration; a domain or IP on a blocklist; a high complaint rate from previous sends; sending to inactive subscribers who delete your emails without reading them; or using a shared sending IP whose reputation was damaged by another user. Run a test at Mail-Tester.com to identify the specific issue.
What is the most important thing I can do to improve email deliverability?
Set up SPF, DKIM, and DMARC correctly and then keep your list clean. Authentication is the price of admission, but what determines inbox placement after that is whether the people you email actually want to receive it. Mailing engaged people, making leaving easy, and removing contacts who have stopped caring has a greater long-term impact on deliverability than any technical tweak.
Do I need SPF, DKIM, and DMARC if I only send a small newsletter?
Yes regardless of volume. The practical consequence of missing SPF, DKIM, or DMARC is straightforward: your emails to Gmail, Yahoo, and Outlook recipients may not be delivered at all. These three protocols protect every sender, not just bulk mailers. Even sending to 100 subscribers, proper authentication improves inbox placement significantly.
What spam complaint rate is acceptable?
Spam complaint rates must stay below 0.3% to meet Gmail and Yahoo bulk sender requirements. The threshold for concern is above 0.1% at this level, Google’s Postmaster Tools shows a degraded reputation. Above 0.3% triggers active enforcement. Aim to keep complaint rates below 0.05% as a healthy operating target.
What is a spam trap and how do I avoid hitting one?
A spam trap is an email address set up specifically by anti-spam organizations to identify senders with poor list hygiene. They are never voluntarily subscribed to any list if you email one, it means your list contains addresses that were collected improperly (purchased, scraped, or very old). Avoid spam traps by using double opt-in, never purchasing email lists, and regularly cleaning inactive addresses from your list.
How long does it take to recover from a bad sender reputation?
Reputation recovery is slow typically 4–8 weeks of disciplined sending. The process: stop sending to disengaged subscribers immediately → send only to highly engaged segments → maintain perfect authentication → keep complaint rates below 0.05% → gradually expand volume. Monitor Google Postmaster Tools throughout to track reputation improvement.
What is the difference between a hard bounce and a soft bounce?
A hard bounce is a permanent delivery failure the email address does not exist, has been disabled, or the domain is inactive. Remove hard bounces from your list immediately and never email them again. A soft bounce is a temporary failure the recipient’s mailbox is full, their server is temporarily down, or your email is too large. Soft bounces that repeat across multiple sends eventually become hard bounces and should be removed.
Should I use double opt-in for my email list?
Yes strongly recommended. Double opt-in requires new subscribers to confirm their email address by clicking a link in a confirmation email. This eliminates typos, fake addresses, and people who did not genuinely want to subscribe. Lists built with double opt-in have lower bounce rates, lower complaint rates, and consistently better inbox placement than single opt-in lists.
Related Articles
- What Is Email Marketing? Why It Outperforms Every Other Channel
- What Is Affiliate Marketing? The Complete Beginner-to-Pro Guide
Final Thoughts
Email deliverability is not a one-time setup task. It is an ongoing discipline that combines technical infrastructure, behavioral quality, and list management all working together to build and maintain the trust of mailbox providers.
The framework is clear: authentication gets you through the door, reputation determines where you sit, and engagement keeps you there.
Four levers move deliverability more than anything else: authentication, list quality and consent, engagement, and the reputation of the domain and IP you send from. Get those right and most mail lands. Get them wrong and no subject-line trick will save you.
The good news is that implementing these protections is not particularly difficult. Setting up SPF, DKIM, and DMARC takes one afternoon. Enabling double opt-in takes five minutes. Setting up Google Postmaster Tools takes ten minutes. Running a monthly list hygiene process takes an hour. These are not technically demanding tasks they are awareness and consistency tasks.
The businesses and bloggers who reach the inbox consistently in 2026 are not the ones with the most sophisticated email technology. They are the ones who respect their subscribers, send only to people who want to hear from them, and maintain their technical setup correctly. That combination is available to every sender regardless of list size, budget, or technical background.
The SiteLaunchLab Team — helping beginners build websites, choose the right hosting, and grow their online business. We research, test, and review the best tools and platforms so you can make confident decisions without the confusion.