Key takeaways
- Delivered isn't the same as inboxed. A message can be accepted by Gmail and still go straight to spam.
- Since 2024, Gmail and Yahoo require bulk senders to use SPF, DKIM and DMARC, offer one-click unsubscribe and keep spam complaints under 0.3%. Microsoft added similar rules for Outlook.com in 2025.
- Reputation is earned slowly: warm up new domains and IPs, then protect them with clean lists and consistent volume.
- Engagement is the strongest signal. Stop mailing people who never open or click.
You wrote the email, designed it, tested it and hit send. The dashboard says it was delivered. Yet sales are flat and replies never come. The likely reason: a large share of that email never reached the inbox — it was quietly filed under spam or promotions, where almost nobody looks.
This guide explains how inbox placement really works in 2026, what Gmail, Yahoo and Outlook now require from anyone sending marketing email, and a step-by-step process to get your messages seen.
What email deliverability actually means
Two terms get mixed up constantly:
- Delivery rate — the percentage of emails the receiving server accepted rather than bounced. Most senders see 95–99%.
- Deliverability (inbox placement) — the percentage that landed in the inbox rather than spam, junk or a blocked folder. This is the number that drives revenue, and it's often much lower than delivery rate suggests.
Mailbox providers decide placement using hundreds of signals, but they boil down to three questions: Can we verify who sent this? Does this sender have a good track record? Do recipients want these emails? Every step below answers one of them.
Why emails land in spam: the usual causes
| Cause | Typical symptom | Fix |
|---|---|---|
| Missing or broken authentication | "Via" or "unverified sender" labels; sudden rejections at Gmail or Yahoo | Publish SPF, DKIM and DMARC records |
| High spam complaints | Spam rate above 0.1% in Postmaster Tools | Easy unsubscribe, clear consent, fewer irrelevant sends |
| Old or purchased lists | Hard bounces over 2%, spam-trap hits | Verify lists, stop mailing unengaged contacts |
| Sudden volume spikes | Temporary deferrals (4xx errors), throttling | Warm up and ramp volume gradually |
| Low engagement | Opens and clicks falling at one provider | Segment, sunset inactive contacts, improve relevance |
Notice that "spammy words" aren't on the list. Modern filters still look at content, but a trusted sender with an engaged audience can write "free" in a subject line without trouble — and a sender with a poor reputation will land in spam no matter how carefully they word things.
The Gmail, Yahoo and Outlook bulk-sender rules
In February 2024, Google and Yahoo started enforcing new requirements for bulk senders — Google defines these as anyone sending roughly 5,000 or more messages a day to personal Gmail addresses. Microsoft announced comparable requirements for Outlook.com, Hotmail and Live addresses in 2025. Enforcement has tightened since, and non-compliant mail is increasingly rejected outright rather than just filtered.
If you send marketing email at any meaningful scale, you need all of the following:
- SPF and DKIM set up for your sending domain.
- A DMARC record (a policy of
p=noneis the minimum), with the visible From: domain aligned to SPF or DKIM. - One-click unsubscribe via the
List-UnsubscribeandList-Unsubscribe-Postheaders, with requests honoured within two days. - A spam-complaint rate below 0.3% — and ideally under 0.1% — as reported in Google Postmaster Tools.
- Valid forward and reverse DNS for sending IPs, and TLS for the connection.
Even if you send less than 5,000 a day, meet these rules anyway. They're the baseline every major provider now uses to decide whom to trust, and small senders that comply get the same benefit.
Step 1: Authenticate your domain
Authentication proves that you're allowed to send email for your domain. Three DNS records do the work:
- SPF lists the servers permitted to send on your domain's behalf.
- DKIM adds a cryptographic signature that shows the message wasn't altered in transit.
- DMARC ties them together, tells receivers what to do when checks fail, and sends you reports.
Always send from your own domain (news@yourbrand.com), never from a free address like Gmail — DMARC policies on those domains will cause your mail to be rejected. Our step-by-step SPF, DKIM and DMARC guide shows exactly which records to add and how to roll DMARC out safely.
Step 2: Build and protect sender reputation
Reputation is tracked against both your sending domain and the IP addresses you send from. Domain reputation has become the more important of the two, because it follows you whichever provider or IP you use.
Reputation improves when recipients open, click, reply, move your mail out of spam and add you to contacts. It suffers when they mark you as spam, delete without opening, or when you hit unknown addresses and spam traps. Practical ways to keep it healthy:
- Send consistently. A steady weekly rhythm looks trustworthy; long silences followed by huge blasts look suspicious.
- Use a subdomain for marketing (for example
mail.yourbrand.com) so a campaign mistake can't affect the reputation of your main domain's invoices and password resets. - Brand your tracking links. A custom tracking domain avoids sharing link reputation with other senders.
- Make unsubscribing effortless. Every person who unsubscribes is someone who didn't press "Report spam".
Step 3: Warm up new domains and IPs
Mailbox providers treat unknown senders cautiously. If a brand-new domain suddenly sends 50,000 emails, much of it will be deferred or filtered. Warm-up means starting small with your most engaged contacts and increasing volume as positive signals build up.
A typical schedule looks like this — treat it as a starting point and slow down if bounces or complaints rise:
| Period | Daily volume | Who to send to |
|---|---|---|
| Days 1–3 | 50–200 | Contacts who opened or clicked in the last 30 days |
| Days 4–7 | 200–1,000 | Engaged in the last 60 days |
| Week 2 | 1,000–5,000 | Engaged in the last 90 days |
| Weeks 3–4 | 5,000–20,000 | Add recent sign-ups and 6-month engagers |
| Weeks 5–8 | Up to full volume | Full active list, still excluding long-term inactives |
Split volume across Gmail, Yahoo and Outlook addresses rather than hitting one provider hardest, and watch for 4xx deferrals — they're the providers asking you to slow down.
Step 4: Keep your list clean
Every invalid address you mail is a small mark against you. A few habits keep lists healthy:
- Never buy or rent lists. They're full of spam traps and people who never agreed to hear from you — the fastest route to the spam folder, and illegal in many countries.
- Use double opt-in for website sign-ups to block typos and fake addresses.
- Verify imported lists before the first send, especially anything older than six months.
- Remove hard bounces immediately and suppress addresses that soft-bounce repeatedly.
- Sunset inactive subscribers. Send a re-engagement series to anyone who hasn't opened or clicked in 90–180 days, then stop mailing those who still don't respond.
Cutting a list feels painful, but a smaller, engaged list almost always produces more revenue than a large, tired one. See how to grow the right way in how to build an email list from scratch.
Step 5: Send content people want
Engagement is the strongest signal providers have, and it comes from relevance. A few content habits make a measurable difference:
- Segment by interest, purchase history or activity instead of sending everything to everyone.
- Match expectations. Send what people signed up for, at the frequency you promised.
- Balance images and text, always include a plain-text version, and add descriptive alt text.
- Keep HTML lean. Gmail clips messages larger than about 102 KB, hiding your footer and unsubscribe link.
- Invite replies. A question like "What should we cover next?" generates replies, one of the most positive signals there is.
Step 6: Monitor and fix problems fast
Deliverability problems compound: a week of ignored complaints can take a month to repair. Check these regularly:
- Google Postmaster Tools — spam rate, domain reputation and authentication pass rates for Gmail traffic.
- Microsoft SNDS and Yahoo Sender Hub — equivalent data for their mailboxes.
- DMARC aggregate reports — reveal unauthorised or misconfigured sources using your domain.
- Campaign reports broken down by provider — a sudden drop at one provider usually means filtering there.
If numbers slip, pause bulk sends to inactive segments, mail only your most engaged contacts for a week or two, and fix the root cause before scaling back up. Our guide to email marketing metrics that matter covers which numbers to watch and what healthy looks like.
Your deliverability checklist
- SPF, DKIM and DMARC published and passing for your sending domain
- From: address on your own domain, aligned with DKIM
- One-click unsubscribe header and a visible unsubscribe link in every email
- New domains and IPs warmed up gradually
- Only permission-based contacts; imported lists verified
- Hard bounces removed automatically; inactive contacts sunset
- Spam-complaint rate under 0.1% in Postmaster Tools
- Branded tracking domain and a consistent sending schedule
Lebx Mail bundles the tooling for most of this list — a DNS authentication wizard, automated sender warm-up, bounce handling and one-click unsubscribe — so you can spend your time on the emails themselves.
Frequently asked questions
Why are my emails going to spam when my content looks fine?
Content is rarely the main cause today. Mailbox providers mostly judge the sender: whether your domain is authenticated with SPF, DKIM and DMARC, your complaint and bounce rates, and whether recipients open, reply to or delete your mail. Start by checking authentication and your spam-complaint rate in Google Postmaster Tools.
What is a good email deliverability rate?
Aim for a delivery (acceptance) rate above 98% and a hard-bounce rate below 2%. Inbox placement is harder to measure directly — watch for sudden drops in opens or clicks at a single provider, which usually mean mail is being filtered there.
How long does it take to warm up a new domain?
Typically four to eight weeks, depending on how much you eventually want to send. Start with your most engaged contacts, increase volume gradually, and only move faster when bounce and complaint rates stay low.
Do I need a dedicated IP address?
Usually not. A dedicated IP only helps if you send large, steady volumes — commonly cited as over 100,000 emails a month. Below that, a well-managed shared IP pool gives a more stable reputation, while your own domain reputation matters more than the IP.