Email Deliverability: Why Your Emails Land in Spam and How to Fix It

You can write the most compelling email in the world, but it is worthless if it never reaches your subscriber's inbox. Email deliverability — the percentage of your emails that successfully land in the primary inbox rather than spam, junk, or promotions folders — is the foundation that every other email marketing metric depends on. If your deliverability is poor, your open rates, click rates, and revenue from email are all artificially suppressed.

The challenge is that deliverability has become more complex, not less. Gmail and Yahoo implemented strict new sender requirements in early 2024 that permanently raised the bar for all email senders. Inbox providers use increasingly sophisticated filtering algorithms. And your sender reputation — a score you may not even know exists — silently determines whether your emails reach inboxes or disappear into spam folders.

This guide covers everything you need to understand and improve your email deliverability, from the technical authentication setup to the ongoing practices that maintain your sender reputation.

What email deliverability actually means

Deliverability is often confused with delivery rate, but they are different metrics.

Delivery rate measures whether the receiving mail server accepted your email. A 98% delivery rate means 98% of your emails were not bounced back. But "accepted by the server" does not mean "placed in the inbox." The server might accept the email and route it directly to spam.

Deliverability (or inbox placement rate) measures how many of your emails actually land in the primary inbox. This is the metric that matters. You can have a 99% delivery rate and still have 30% of your emails going to spam. Unfortunately, most email marketing platforms only report delivery rate, not inbox placement rate. You need additional tools to measure true deliverability.

A healthy email program should target an inbox placement rate above 90%. Below 80% indicates a serious deliverability problem that requires immediate attention.

How spam filters work

Modern spam filters use multiple layers of analysis to decide where to place each email. Understanding these layers helps you optimize your emails to pass each check.

Sender authentication

The first thing receiving servers check is whether your email is actually sent by who it claims to be sent by. This is verified through authentication protocols (SPF, DKIM, DMARC — covered in detail below). Emails that fail authentication checks are almost always routed to spam or rejected outright.

Sender reputation

Every sending IP address and domain has a reputation score based on historical sending behavior. If your domain has a history of low engagement, high spam complaints, or sending to invalid addresses, your reputation score drops. A low reputation means inbox providers treat all your emails with suspicion, regardless of their content.

Content analysis

Spam filters analyze the content of your email for signals that indicate spam. This includes specific trigger words, excessive use of capital letters and exclamation points, misleading subject lines, a high image-to-text ratio, and certain types of links. Modern content filters use machine learning rather than simple keyword matching, so they evaluate the overall pattern rather than individual words.

Recipient engagement

This is the most important and most underappreciated factor. Gmail, Yahoo, Outlook, and other inbox providers track how recipients interact with your emails. If recipients consistently open, read, and click your emails, the provider learns that your messages are wanted and delivers them to the inbox. If recipients ignore, delete, or mark your emails as spam, the provider routes future emails to spam.

Engagement is a feedback loop: good deliverability leads to higher engagement, which leads to better deliverability. Conversely, poor deliverability means fewer people see your emails, which lowers engagement, which further degrades deliverability. Breaking out of a negative feedback loop requires deliberate action.

Email authentication: SPF, DKIM, and DMARC

Email authentication is no longer optional. Since February 2024, Gmail and Yahoo require all bulk senders (those sending more than 5,000 emails per day) to have SPF, DKIM, and DMARC properly configured. Even if you send fewer than 5,000 emails per day, proper authentication significantly improves your deliverability with every inbox provider.

SPF (Sender Policy Framework)

SPF tells receiving servers which IP addresses are authorized to send email on behalf of your domain. It works through a DNS TXT record that lists your approved sending sources.

How to set it up:

1. Identify every service that sends email from your domain (your email marketing platform, your business email provider, your website's transactional email service, any CRM that sends emails).
2. Create a TXT record in your domain's DNS with the SPF syntax that includes all authorized senders.
3. A typical SPF record looks like: v=spf1 include:_spf.google.com include:sendgrid.net include:mail.yourplatform.com -all
4. The -all at the end tells receiving servers to reject any email from your domain that does not come from an authorized source.

Common mistakes:

• Including too many DNS lookups (SPF allows a maximum of 10)
• Using ~all (soft fail) instead of -all (hard fail) — soft fail is weaker protection
• Forgetting to include all legitimate sending services, causing your own emails to fail SPF

DKIM (DomainKeys Identified Mail)

DKIM adds a cryptographic signature to your emails that proves they have not been tampered with in transit. The receiving server uses a public key published in your DNS to verify the signature.

How to set it up:

1. Your email marketing platform generates a DKIM key pair (public and private).
2. You add the public key as a CNAME or TXT record in your DNS.
3. The platform signs every outgoing email with the private key.
4. Receiving servers verify the signature using the public key from your DNS.

Most email marketing platforms provide step-by-step instructions for adding their DKIM records to your DNS. This is typically a one-time setup that takes 10 to 15 minutes.

DMARC (Domain-based Message Authentication, Reporting, and Conformance)

DMARC builds on SPF and DKIM by telling receiving servers what to do when an email fails authentication. It also provides reporting so you can monitor who is sending email from your domain — including unauthorized senders who may be spoofing your domain.

How to set it up:

1. Start with a monitoring-only policy: v=DMARC1; p=none; rua=mailto:[email protected]
2. This tells receiving servers to accept all emails (even those that fail authentication) but send you reports about authentication results.
3. Monitor the reports for 2 to 4 weeks to identify any legitimate sending services that are failing authentication.
4. Fix any authentication failures for legitimate services.
5. Move to a quarantine policy: p=quarantine (failed emails go to spam).
6. Eventually move to a reject policy: p=reject (failed emails are blocked entirely).

Do not jump straight to a reject policy. If you have a legitimate sending service that is not properly authenticated, a reject policy will block those emails entirely. Start with monitoring, fix issues, and escalate gradually.

Verifying your authentication

Use these free tools to check your setup:

• Google Admin Toolbox (MX Check): Validates your DNS records
• Mail-tester.com: Send a test email to their address and receive a detailed deliverability score
• MXToolbox: Comprehensive DNS and email authentication checking
• DMARC Analyzer: Parses your DMARC reports into readable dashboards

Sender reputation

Your sender reputation is a score (typically 0 to 100) that inbox providers assign to your sending IP address and domain based on your historical email behavior. It is the single most influential factor in deliverability.

What builds a good reputation

• High engagement rates: Recipients consistently open, read, and click your emails
• Low complaint rates: Fewer than 0.1% of recipients mark your emails as spam (this is Gmail's threshold)
• Low bounce rates: You rarely send to invalid email addresses
• Consistent sending volume: You send a predictable volume of email without sudden spikes
• Authenticated emails: SPF, DKIM, and DMARC are properly configured
• Clean sending history: No history of spam complaints or blacklist appearances

What damages your reputation

• High spam complaint rates: If more than 0.1% of your recipients click "report spam," your reputation drops rapidly
• Sending to invalid addresses: High bounce rates tell inbox providers you are not maintaining your list
• Purchased or scraped lists: These lists contain spam traps, invalid addresses, and people who never consented to hear from you
• Sudden volume spikes: Jumping from 500 emails per week to 50,000 triggers spam filters
• Inconsistent sending: Long gaps followed by large sends look like spammer behavior

How to check your reputation

• Google Postmaster Tools: Free tool that shows your domain reputation with Gmail (High, Medium, Low, Bad). This is the most important reputation metric since Gmail handles roughly 30% of all email.
• Microsoft SNDS (Smart Network Data Services): Shows your reputation with Outlook and Hotmail.
• Sender Score by Validity: A third-party reputation score based on your sending IP.

List hygiene

A clean email list is the foundation of good deliverability. Every invalid address, inactive subscriber, and spam trap on your list actively damages your sender reputation.

Regular list cleaning practices

Remove hard bounces immediately. A hard bounce means the email address does not exist. Continuing to send to hard bounced addresses is one of the fastest ways to damage your reputation. Most email platforms handle this automatically, but verify that your platform is configured to suppress hard bounces.

Re-engage or remove inactive subscribers. Subscribers who have not opened or clicked an email in 90 to 120 days are dragging down your engagement metrics. Send a re-engagement campaign (see our email automation guide for a template), and remove anyone who does not respond. This feels counterintuitive, but a smaller, engaged list delivers better results than a large, disengaged one.

Use email verification services. Before sending to a new list or a list you have not emailed in a while, run it through an email verification service like ZeroBounce, NeverBounce, or BriteVerify. These services identify invalid addresses, spam traps, and risky contacts before you send, protecting your reputation.

Monitor your bounce rate. Keep your bounce rate below 2%. If it exceeds 2% on any send, investigate immediately — you may have a data quality problem.

Spam traps

Spam traps are email addresses operated by inbox providers and anti-spam organizations specifically to catch senders with poor list practices. There are two types:

Pristine spam traps: Email addresses that were never used by a real person. They exist only to catch senders who scrape, buy, or guess email addresses. If you hit a pristine spam trap, your reputation will suffer severe and immediate damage.

Recycled spam traps: Email addresses that belonged to real people but were abandoned and repurposed as traps. If you send to these, it means you are not maintaining your list — the address has been inactive for a very long time. Regular list hygiene (removing inactive subscribers) prevents this.

You will never know specifically which addresses on your list are spam traps. The solution is prevention through ethical list building (never buying lists), regular list cleaning, and removing inactive subscribers.

Content best practices for deliverability

While content is less influential than authentication and reputation, certain practices help keep your emails out of spam filters.

Maintain a healthy text-to-image ratio. Emails that are entirely images with no text are flagged by spam filters. Aim for at least a 60/40 text-to-image ratio. Always include alt text on images — some email clients block images by default, and your email should still make sense without them.

Avoid spam trigger patterns. Do not use ALL CAPS in subject lines. Avoid excessive exclamation points. Do not use misleading subject lines that do not match the email content. Avoid phrases like "free money," "act now," "limited time," and similar high-pressure language that spam filters associate with unwanted email.

Use a consistent "from" name and address. Changing your sender name or email address frequently confuses recipients and can trigger spam filters. Pick a sender identity and stick with it.

Include a plain-text version. Most email platforms generate this automatically, but verify that your emails include both HTML and plain-text versions. Some spam filters flag HTML-only emails.

Make unsubscribing easy. This sounds counterintuitive, but a visible, one-click unsubscribe link reduces spam complaints. When subscribers cannot find the unsubscribe link, they click "report spam" instead — and spam complaints are far more damaging to your reputation than unsubscribes.

Gmail and Yahoo sender requirements

In February 2024, Gmail and Yahoo implemented requirements that all bulk senders must meet. These requirements have been enforced continuously since then, and as of 2026 they remain the baseline standard for email deliverability.

Requirements for all senders

• SPF or DKIM authentication on your sending domain
• Valid forward and reverse DNS records for your sending IPs
• One-click unsubscribe header in all commercial emails
• Spam complaint rate below 0.3% (Gmail recommends below 0.1%)

Additional requirements for senders of 5,000+ emails per day

• Both SPF and DKIM authentication required
• DMARC policy published (at minimum p=none)
• "From" header domain must align with SPF or DKIM domain
• One-click unsubscribe using the List-Unsubscribe header

If you use a reputable email marketing platform (Mailchimp, ActiveCampaign, Klaviyo, ConvertKit, etc.), most of these technical requirements are handled by the platform. However, you are still responsible for setting up SPF, DKIM, and DMARC records in your DNS, and you are responsible for keeping your spam complaint rate below the threshold.

Monitoring deliverability

Deliverability is not a one-time setup — it requires ongoing monitoring.

Key metrics to watch

• Inbox placement rate: The percentage of emails reaching the primary inbox. Use tools like GlockApps or Inbox Insights to test this periodically.
• Bounce rate: Should stay below 2% per send. Hard bounces should be near zero if your list is clean.
• Spam complaint rate: Should stay below 0.1%. Monitor through Google Postmaster Tools and your email platform's reporting.
• Unsubscribe rate: A healthy unsubscribe rate is below 0.5% per email. Consistently higher rates suggest a content or frequency mismatch.
• Domain reputation: Check Google Postmaster Tools monthly. Any drop from "High" should trigger investigation.

When to take action

• Spam complaint rate exceeds 0.1%: Review your recent emails for content or frequency issues. Check whether you are sending to unengaged segments.
• Bounce rate exceeds 2%: Run your list through an email verification service. Review your signup process for vulnerabilities (bot signups, typos).
• Domain reputation drops: Reduce sending volume temporarily. Focus on sending only to your most engaged subscribers until reputation recovers. Review your authentication setup.
• Inbox placement drops below 85%: This requires a comprehensive audit of authentication, list quality, content, and sending practices. Consider engaging a deliverability specialist.

Common deliverability mistakes

Using a free email address as your sender. Sending marketing emails from a gmail.com, yahoo.com, or outlook.com address guarantees deliverability problems. These domains have strict DMARC policies that cause emails sent through third-party platforms to fail authentication. Always use your own business domain.

Sending to your entire list every time. Not every email is relevant to every subscriber. Sending irrelevant emails to uninterested segments drives down engagement and increases spam complaints. Segment your list and target your sends.

Ignoring inactive subscribers. Every inactive subscriber on your list is diluting your engagement metrics and potentially harboring a recycled spam trap. Implement a regular re-engagement and pruning process.

Buying or renting email lists. This is the fastest way to destroy your sender reputation. Purchased lists contain spam traps, invalid addresses, and people who did not consent to hear from you. The short-term reach is never worth the long-term damage.

Not monitoring Google Postmaster Tools. If you send email and do not monitor Google Postmaster Tools, you are flying blind. This free tool is the clearest window into how the world's largest email provider views your sending reputation.

Key takeaways

• Email deliverability is the foundation of email marketing success. None of your other metrics matter if your emails do not reach the inbox.
• Set up SPF, DKIM, and DMARC authentication on your sending domain. This is now required by Gmail and Yahoo for all bulk senders.
• Protect your sender reputation by maintaining low spam complaint rates (below 0.1%), low bounce rates (below 2%), and high engagement through relevant, targeted content.
• Practice regular list hygiene: remove hard bounces, re-engage or remove inactive subscribers, and never purchase email lists.
• Monitor your deliverability using Google Postmaster Tools, your email platform's reporting, and periodic inbox placement testing.
• Follow content best practices: maintain a healthy text-to-image ratio, use consistent sender identity, and make unsubscribing easy.
• Deliverability is ongoing work, not a one-time setup. Regular monitoring and maintenance prevent small issues from becoming serious reputation damage.

If your email deliverability needs improvement or you want expert help setting up authentication and monitoring, explore our email marketing services or book a consultation to discuss your specific situation.