Understand

Email deliverability: why your emails land in spam and how to fix it

MCThe MiisterSoftware team Updated July 2026 8 min read
Trio SPF, DKIM, DMARC Complaints < 0.3% Gmail + Yahoo + Outlook ~90% One-click unsubscribe
Cover image (WEBP, SEO alt “email deliverability”)

TL;DR, the essentials

  • Deliverability is your emails’ ability to reach the inbox, not the spam folder or the bin.
  • An email can be “delivered” (accepted by the server) yet filed as spam: the two are not the same thing.
  • Since 2024, Gmail, Yahoo and then Microsoft require SPF, DKIM and DMARC from bulk senders, plus one-click unsubscribe and a complaint rate below 0.3%.
  • The real levers: authenticate your domain, clean your list, warm up a new domain and monitor your reputation.

You perfect the subject line, the design, the message, and yet results stall. Before the open or the click, an invisible battle plays out: does your email even reach the inbox? That is the whole point of deliverability. In 2026, with tightened rules at Gmail, Yahoo and Microsoft, it is no longer an optional technical detail for experts. Here is how it works, why your emails land in spam, and eight concrete levers to take back control.

What is email deliverability?

Deliverability is your emails’ ability to actually reach recipients’ primary inbox, rather than the spam folder, the Promotions tab, or worse, an outright rejection by the server. It differs from a neighboring concept it is often confused with.

Delivery rate ≠ deliverability. The first measures emails accepted by the server, the second, those that truly land in the inbox.

An email can very well be delivered in the technical sense, meaning accepted by the recipient’s server, while being filed automatically in spam. Your stats will show “email delivered,” but nobody will see it. That is why deliverability plays out in two distinct stages.

1

Acceptance

The recipient’s server accepts or rejects the message. A rejection generates a bounce (invalid address, full mailbox, blocked sender).

2

Placement

Once accepted, the email is sorted: inbox, secondary tab or spam folder. This is the true challenge of deliverability.

3

Reputation

Every send feeds the reputation of your domain and IP, which will shape the placement of your future campaigns.

Keep in mind

“Email delivered” does not mean “email read.” A strong delivery rate can mask mass placement in spam. Always watch placement, not just acceptance.

Why is deliverability decisive?

Because it underpins everything else. An email in spam will never be opened, never clicked, never converted. All your other metrics (open rate, click rate, conversions) rest on this invisible foundation. A drop in deliverability collapses performance without anything changing in your content.

One example quantifies the stakes: on a send of 1,000 emails, 90% deliverability places 900 messages in the inbox, versus only 500 at 50%. At the same open and conversion rates, your number of sales is nearly halved, and your cost per lead doubles. Deliverability is not a technical detail, it is a direct multiplier of your return on investment.

Why do your emails land in spam?

The spam filters at Gmail, Outlook and Yahoo weigh dozens of signals. Here are the most common causes of poor placement, in order of importance:

  • No authentication. Without SPF, DKIM and DMARC correctly set up, your domain is suspect by default. This is now the number one cause of rejection.
  • A low-quality list. Purchased addresses, contacts who never consented, invalid addresses or spam traps: all signals that destroy your reputation.
  • A high complaint rate. When too many recipients click “report as spam,” mailbox providers draw conclusions for all your sends.
  • A damaged IP or domain reputation. A brand-new domain with no history, or a shared IP with bad senders, starts at a handicap.
  • Risky content. “Spammy” words (FREE, all-caps promos, excessive punctuation), an unbalanced text-to-image ratio, shortened links or dubious sending domains.
  • No easy unsubscribe. A hidden unsubscribe link pushes recipients to click “spam,” the worst possible signal.

The purchased-list trap

Buying a contact list is the fastest way to wreck your deliverability, on top of being illegal under GDPR. A consented, engaged list is worth infinitely more than a large cold database.

SPF, DKIM and DMARC: the authentication trio

These three protocols prove to mailbox providers that you are the sender you claim to be. Since 2024, they are no longer recommended: they are required for any bulk sender. Here is what each does, without the jargon.

SPF

Who is allowed to send

The Sender Policy Framework is a DNS record listing the servers authorized to send email for your domain. If an unlisted server tries to send in your name, the check fails.

DKIM

The tamper-proof seal

DomainKeys Identified Mail adds a cryptographic signature to every email. It proves the message truly comes from your domain and was not altered in transit. Use 2048-bit keys.

DMARC

The policy when checks fail

DMARC ties SPF and DKIM together and tells mailboxes what to do when a check fails: nothing (p=none), quarantine (p=quarantine) or reject (p=reject). It also provides reports.

Best practice in 2026: publish DMARC at p=none to observe, read the reports for a few weeks, then move gradually to p=quarantine and then p=reject. You can check your setup with free tools like MXToolbox, Postmark or Dmarcian. Note that the BIMI standard also lets your brand logo appear next to your emails, provided you are authenticated and reach at least p=quarantine.

A good platform handles authentication for you

Our comparison ranks the tools that automate SPF, DKIM and DMARC and protect your reputation.

See the email marketing comparison →

What are the 2026 mailbox rules?

The turning point was February 2024, when Gmail and Yahoo imposed new requirements on bulk senders (from 5,000 emails per day to personal accounts). Microsoft (Outlook.com, Hotmail, Live) joined in May 2025 with equivalent rules. Together, these three providers cover roughly 90% of email inboxes worldwide. The requirements boil down to this:

  1. Authenticate the domain with SPF, DKIM and DMARC set up and aligned.
  2. Offer one-click unsubscribe (the RFC 8058 standard) and process the request within two days.
  3. Keep the complaint rate below 0.3%, with Google’s official recommendation to stay under 0.1% (one complaint per thousand emails).

Enforcement has hardened

Since late 2025, Gmail applies hard rejection (5xx errors) to non-compliant messages, before they ever reach an inbox. A domain that exceeds 0.3% complaints stays ineligible for Google’s delivery support until it drops back below the threshold for seven consecutive days.

These rules primarily target high volume, but adopting these best practices from your very first send is the best way to build a healthy reputation. They also overlap with your email marketing law obligations: consent, proof of opt-in and easy unsubscribe.

Quick quiz

What does “email delivered” mean?

How do you improve deliverability? 8 levers

From the most structural to the most refined, here are the moves that lift your inbox placement:

  1. Authenticate your domain. SPF, DKIM and DMARC first. Without them, no other lever will compensate. It is the non-negotiable foundation.
  2. Clean your list regularly. Remove invalid addresses, hard bounces and contacts inactive for 6 to 12 months. A clean list protects your reputation.
  3. Validate new addresses. A double opt-in (email confirmation at signup) removes typos and spam traps right at the entry point.
  4. Warm up a new domain or IP. Do not jump from 0 to 50,000 emails overnight. Ramp up volume gradually over a few weeks to build reputation.
  5. Make unsubscribing easy. A clear link and one-click unsubscribe beat a complaint. A contact who leaves without complaining preserves your reputation.
  6. Monitor your complaint rate. Keep it under 0.1%. If a campaign spikes reports, slow down and review your targeting.
  7. Segment and target. Sending the right message to the right segment reduces complaints and raises engagement, two positive signals for mailboxes.
  8. Refine your content. Avoid “spammy” words, balance text and images, avoid shortened links, and use a sending domain consistent with your brand.

Good habit

Always start with domain authentication and list cleaning. These are the two moves that pay off the most, before you even touch your subject lines or visuals.

What role does the email tool play?

Most of these levers depend directly on your platform. A good email marketing tool handles authentication (SPF, DKIM, DMARC) with almost no effort on your part, runs a well-reputed sending infrastructure, adds compliant unsubscribe automatically, cleans bounces and provides readable deliverability tracking. It is an often underestimated factor at the point of choice: two tools at the same price do not offer the same deliverability.

The next step

Ready to act? Compare the platforms that best protect your deliverability in our guide to the best email marketing software 2026. To go further on metrics and how to read your reports, keep exploring the email marketing hub.

Frequently asked questions

What is the difference between deliverability and delivery?

Delivery measures emails accepted by the recipient’s server (as opposed to bounces). Deliverability, which is stricter, measures those that actually land in the inbox rather than in spam. An email can be delivered in the technical sense while being filed automatically as spam.

Why do my emails land in spam?

The main causes are missing authentication (SPF, DKIM, DMARC), a low-quality list, a high complaint rate, a damaged domain or IP reputation, and content judged risky. Since 2024, an unauthenticated domain is suspect by default at Gmail, Yahoo and Outlook.

Are SPF, DKIM and DMARC mandatory in 2026?

Yes for bulk senders. Since February 2024, Gmail and Yahoo require SPF, DKIM and DMARC for any send above 5,000 emails per day to personal accounts. Microsoft adopted the same rules in May 2025. Even below that threshold, setting them up from the start builds a healthy reputation.

What complaint rate should I not exceed?

Google sets the absolute limit at 0.3% complaints, with an official recommendation to stay under 0.1%, or one complaint per thousand emails. A domain that lastingly exceeds 0.3% sees its deliverability drop and stays penalized until it falls back below the threshold for seven consecutive days.

What is domain warm-up?

Warm-up means gradually increasing the sending volume of a new domain or IP, over a few weeks, to build reputation with mailbox providers. Sending a large volume straight away from a domain with no history is the fastest way to end up in spam.