Getting Your Emails to the Inbox: A Practical Guide to Email Deliverability

If you send marketing emails, transactional messages, or automated notifications, you need them to land in the recipient's inbox. Not the spam folder. Not rejected entirely. The inbox. This guide covers the practical steps that affect where your emails end up, from how sending infrastructure works to the daily habits that keep your sender reputation healthy over time.

How Inbox Placement Decisions Work

When a mail server receives an email, it runs a rapid series of checks in milliseconds. These checks are performed by spam filters operating at three distinct levels:

  • Gateway level: The receiving server checks the sending IP address against blocklists and evaluates domain reputation.
  • Mail transfer agent level: Authentication records like SPF, DKIM, and DMARC are validated at this stage.
  • Mailbox provider level: Content analysis, user engagement patterns, and spam complaint history influence final placement decisions.

Understanding this layered approach helps you see why deliverability is not a single configuration you set and forget. It requires attention across infrastructure, authentication, and the quality of the emails you send.

The Four Dimensions of Sender Reputation

Your sender reputation is not a single score. Mailbox providers evaluate four independent factors:

  1. IP reputation: The sending IP address is scored based on complaint rates, volume patterns, and whether it has triggered spam traps.
  2. Domain reputation: Your sending domain is assessed for authentication compliance and historical complaint data.
  3. Domain age: Newly registered domains that suddenly send high volumes are treated with suspicion. Established domains with history build trust more easily.
  4. Volume consistency: Sudden spikes in sending volume from any IP or domain can trigger review or temporary blocks.

These four dimensions work together. A strong domain reputation can compensate partially for a new IP, but poor performance across multiple dimensions quickly damages inbox placement across all major mailbox providers.

Authentication: What Needs to Be in Place

Authentication records tell receiving servers that your emails genuinely come from you and have not been tampered with in transit. Without proper authentication, your emails are far more likely to be filtered or rejected.

SPF: Specifying Authorized Sending Servers

SPF (Sender Policy Framework) allows you to specify which mail servers are permitted to send email on behalf of your domain. Without it, anyone can forge email appearing to come from your address, and modern spam filters treat this as a red flag.

An SPF record is published in your domain's DNS settings. Here is a practical example:

v=spf1 include:_spf.yourmailprovider.com ~all

This record tells receiving servers that only the servers listed in your mail provider's SPF record are authorised to send email from your domain. The ~all tag applies a soft fail to any emails from unlisted servers, marking them as suspicious rather than rejecting them outright.

If you send email from multiple platforms, you need to include all of them in your SPF record. Common additions include your email marketing platform, your CRM system, and any automated notification tools.

DKIM: Cryptographic Proof of Authenticity

DKIM (DomainKeys Identified Mail) attaches a digital signature to every email you send. The receiving server verifies this signature using a public key published in your DNS records.

Unlike SPF, which only confirms that a server is allowed to send for your domain, DKIM proves that the email itself was sent through your infrastructure and was not modified during transit. This matters for transactional emails, where tampering with links or content can have security implications.

Most reputable email service providers enable DKIM by default and manage the cryptographic keys for you. If you are setting up your own mail server, you will need to generate and manage DKIM keys manually.

DMARC: Telling Receivers What to Do with Failed Authentication

DMARC (Domain-based Message Authentication, Reporting and Conformance) ties SPF and DKIM together and instructs receiving servers on how to handle emails that fail authentication. A basic DMARC record looks like this:

v=DMARC1; p=quarantine; rua=mailto:[email protected]; pct=100

This record instructs receiving servers to treat emails that fail both SPF and DKIM as suspicious (quarantine) and to send aggregate reports to your designated address. The reporting function is particularly valuable because it shows you when and where authentication failures are occurring, even if those emails are not reaching your own inbox.

Once you have confirmed that your authentication is working correctly across all sending channels, you can move to p=reject, which instructs receivers to reject any email that fails authentication outright. This is the strongest protection against email spoofing using your domain.

ARC: Handling Forwarded Email

ARC (Authenticated Received Chain) preserves authentication results when emails pass through intermediate servers, such as mailing lists or forwarding services. Without ARC, legitimate forwarded emails often fail DMARC because the forwarding server is not listed in your SPF records.

If your organisation uses mailing lists or automated forwarding, ARC support becomes important for maintaining inbox placement for those recipients.

Shared Versus Dedicated Sending Infrastructure

Email service providers typically offer two types of sending infrastructure: shared IP pools and dedicated IP addresses. The choice affects how your sender reputation is managed.

  • Lower volume senders: Shared pools work well when you are sending under 10,000 emails per month. Your reputation is influenced by the behaviour of other senders on the same IP, which means bad neighbours can affect your deliverability, but good neighbours provide some baseline credibility.
  • Medium volume senders: Between 10,000 and 100,000 emails per month, a dedicated IP becomes worth considering. However, dedicated IPs require sufficient volume to warm them effectively, typically at least 10,000 emails per day over 30 days or more.
  • High volume senders: Above 100,000 emails per month, dedicated IPs with proper warming and rotation are strongly recommended to maintain consistent reputation across your sending infrastructure.

IP warming is mandatory for any new sending infrastructure, whether shared or dedicated. Start at low volume, typically 500 emails per day during the first week, and gradually increase over four to six weeks while monitoring complaint rates carefully.

List Hygiene: The Highest-Impact Investment

Hard bounces and spam trap hits cause more damage to sender reputation than almost any other factor. Managing your list actively is the single most effective deliverability practice you can maintain.

Understanding Spam Traps

Spam traps are email addresses that mailbox providers retire and repurpose to identify senders who do not maintain their lists properly. There are two types:

  • Pristine spam traps: Addresses that were never valid and exist only to catch senders who purchase or rent lists. Hitting one of these is severe and can cause immediate blocklisting.
  • Recycled spam traps: Addresses that were once valid but have been inactive for an extended period. These catch senders who fail to clean old, dormant addresses from their lists. Recovery is possible but requires immediate action.

A Practical List Maintenance Schedule

Regular maintenance prevents the gradual reputation damage that comes from sending to stale addresses:

  1. Monthly: Remove hard bounces immediately after they occur. Never attempt to re-send to addresses that have hard bounced.
  2. Quarterly: Run a re-engagement campaign for contacts who have not opened or clicked in the past six months or more.
  3. Biannually: Audit your full list against public spam trap databases to identify problematic addresses.
  4. Annually: Conduct a deep engagement analysis to understand which segments are genuinely active and which are dormant.

Running a Re-engagement Campaign

Before removing dormant subscribers permanently, give them a chance to re-engage:

  1. Send a single re-engagement email that reminds subscribers of the value they signed up for and why they should stay.
  2. Track who opens or clicks the re-engagement email.
  3. Remove non-responders within 30 days of sending.
  4. Do not attempt to re-engage addresses that have already hard bounced, regardless of how they responded to the campaign.

Permission: The Foundation of Everything

Purchased or rented email lists are the most damaging practice in email marketing. They produce high complaint rates, high bounce rates, and can destroy your sender reputation within weeks. A large list with invalid addresses and no prior relationship with your domain will cause more damage than any technical misconfiguration you could make.

Focus on building your list through organic sign-up processes. Every address on your list should have been actively provided with clear consent to receive your communications.

Content Practices That Affect Inbox Placement

Authentication gets your emails past the first gate, but content analysis at the mailbox provider level can still redirect messages to spam or promotions folders based on what is inside the email.

Avoiding Spam Filter Triggers

Modern spam filters use machine learning to evaluate content, so keyword stuffing and obvious spam triggers are less effective than they once were. However, certain practices still cause problems:

  • Text-to-image ratio: Emails that are mostly image with little text can render poorly in spam filter analysis. Aim for a reasonable balance between text and images, ideally with meaningful text content throughout the email.
  • Broken or invalid links: Ensure all links point to live, relevant pages. Check that unsubscribe links work and that every link in the email goes somewhere legitimate.
  • HTML quality: Validate your email HTML to ensure there are no broken tags, missing doctype declarations, or issues that affect mobile rendering.
  • List-to-content consistency: If your brand is associated with one type of content but the email promotes something completely different, filters may flag it. Maintain consistency between what subscribers expect from your domain and what you send.

Why Engagement Matters

Mailbox providers including Google, Microsoft, and Apple increasingly use engagement signals when determining inbox placement. These signals include:

  • Open rates, particularly from the primary inbox rather than promotions tabs
  • Click-through rates on links within emails
  • Reply rates for transactional and personal communications
  • How long recipients spend reading your emails
  • Whether recipients delete emails without reading or move them to folders

Sustained low engagement causes mailbox providers to deprioritise your emails over time, eventually routing them to spam or blocking them entirely. Sending relevant, personalised, and well-timed content is the most effective way to maintain strong engagement signals.

Monitoring and Diagnostics

You cannot improve what you do not measure. Building visibility into your deliverability performance helps you catch problems before they become severe.

Metrics Worth Tracking Regularly

Monitoring these metrics consistently gives you an accurate picture of your programme health:

  • Inbox placement rate: What percentage of your emails reach the inbox rather than spam. A healthy target is above 95%.
  • Spam placement rate: What percentage land in spam. This should remain below 2% for most senders.
  • Hard bounce rate: Invalid addresses that could not be delivered. Keep this below 0.5%.
  • Soft bounce rate: Temporary delivery failures. Keep this below 2%.
  • Complaint rate: How many recipients mark your emails as spam. Keep this below 0.1%.
  • List growth rate: Track month-over-month changes in your subscriber list to identify trends.
  • Engagement rate: Monitor opens and clicks, segmented by list cohort to identify which segments are most responsive.

Many email service providers offer built-in dashboards for these metrics. If yours does not, exporting data regularly and maintaining your own tracking spreadsheet is a practical alternative.

Seed Testing Before Major Sends

Seed testing sends your emails to a panel of test addresses across major mailbox providers before sending to your full list. This helps you identify obvious placement failures before they affect your entire audience.

Tools such as GlockApps, Mailtester, and Talos Intelligence provide seed testing services. Running a seed test before large campaigns, product launches, or when you have made changes to your sending infrastructure is a sensible practice that can save you from widespread deliverability problems.

Post-Send Analysis

After every significant send, compare engagement metrics against the same campaign from previous sends. A sudden drop in open rate, particularly if your list has not grown, often precedes a deliverability problem. Investigating before your next scheduled send gives you time to address the root cause rather than compounding the problem.

Maintaining a simple log of campaign sends, engagement rates, and any configuration changes helps you identify patterns over time. If you are responsible for an email programme, documenting your setup and changes in a way that is easy to reference makes troubleshooting significantly faster when problems arise.

Common Deliverability Mistakes to Avoid

Several recurring mistakes cause preventable deliverability problems:

  • Ignoring bounce rates: Letting hard bounces accumulate and continue sending to invalid addresses damages reputation quickly.
  • Skipping authentication validation: Publishing SPF, DKIM, and DMARC records and then not verifying that they are working correctly across all sending channels.
  • Irregular sending patterns: Sending high volumes infrequently, then going silent for weeks, then sending another large volume. Consistency matters.
  • Neglecting list cleaning: Treating list size as a vanity metric rather than focusing on engaged, deliverable addresses.
  • Sending without monitoring: Assuming that emails are reaching the inbox because they are not bouncing without actively checking placement.

When Deliverability Problems Need Professional Help

Some deliverability issues can be resolved with careful attention to the practices described above. However, there are situations where professional technical support makes sense:

  • Your domain or IP has been blocklisted and manual delisting attempts have not succeeded.
  • You are migrating email infrastructure and need to ensure authentication records transfer correctly.
  • You have a complex sending environment with multiple platforms that need coordinated SPF configuration.
  • Your email programme has suffered a significant reputation event and you need a structured recovery plan.

If you need help reviewing your current email setup, gather your sending domain, email service provider details, recent bounce and complaint rates, and a summary of any recent configuration changes before getting in touch.

Building a Sustainable Email Deliverability Practice

Deliverability is not a feature you add to a campaign. It is an ongoing discipline that requires consistent attention to authentication, list quality, sending patterns, and engagement metrics. The fundamentals are straightforward: send from properly authenticated infrastructure, maintain a clean and engaged list, send relevant content consistently, and monitor your metrics so you catch problems early.

When deliverability degrades, it rarely happens suddenly. It decays gradually through accumulated list hygiene failures, engagement drops, and minor authentication drift. Building the monitoring and maintenance habits to catch this early is what separates email programmes that consistently reach the inbox from those that slowly lose reach until their messages become irrelevant.