In short: Deliverability rests on three layers: authentication, reputation, and content and behavior. Set up SPF, DKIM and DMARC, warm the domain, send only to people who asked, clean the list and monitor the reports, so the one channel you own actually reaches people.
Key points
- SPF lists allowed sending servers, DKIM signs messages, and DMARC tells receivers what to do with failures.
- Large mailbox providers now require all three standards for anyone sending at volume.
- A new domain sending a large blast to a cold list earns a bad reputation that takes months to repair.
- Send marketing mail from a subdomain so problems there do not affect transactional or personal email.
- Remove hard bounces immediately and honor unsubscribe requests within a day.
An email list is the most durable channel a company owns, and it is worth nothing if the messages do not arrive. Deliverability is the discipline of making sure they do, and it has become more technical and more enforced in the last few years.
The three layers
Authentication. Proving that an email claiming to come from your domain actually did. Three standards do this, and the large mailbox providers now require them for anyone sending at volume.
SPF publishes a record listing which servers are allowed to send mail for your domain. DKIM signs each message cryptographically so the receiver can verify it was not altered and came from an authorized source. DMARC tells receivers what to do with messages that fail the first two, and sends you reports on who is sending as your domain. All three are entries in your domain's DNS. Setting them up correctly is a few hours of work, once, and skipping it means the large providers will throttle or reject your mail regardless of content.
Reputation. Mailbox providers score sending domains and IP addresses on how recipients respond: opens, replies, deletions without reading, spam complaints, bounces from dead addresses, and whether people move messages out of spam. A new domain has no reputation and has to build one gradually. A domain that sends a large blast to a cold list on day one earns a bad reputation that takes months to repair.
Content and behavior. What the message contains and how the list behaves. Link shorteners, image-only emails, deceptive subject lines, and mismatched sender names hurt. So does sending to people who did not ask, sending to addresses that bounce, and ignoring unsubscribe requests, which is also illegal in most places.
Why legitimate email lands in spam
Usually one of six things. Authentication missing or misconfigured. A purchased or scraped list, which produces complaints and bounces. Sending volume that jumped suddenly from a new domain. A list that has not been cleaned, so a large share of addresses are dead. Content that looks like what spammers send. Or a shared sending service whose other customers behaved badly.
The practical setup
Authenticate the domain fully, with DMARC set to at least quarantine once reports show only legitimate sources. Send from a subdomain for marketing mail so a problem there does not affect transactional or personal email. Warm a new domain up over several weeks with small volumes to engaged recipients. Use double opt-in or, at minimum, clear consent. Remove hard bounces immediately and unengaged addresses after a defined period. Include a working unsubscribe link and honor it within a day. Monitor the DMARC reports, the bounce rate, the complaint rate, and the inbox placement at the major providers.
For regulated senders
Financial, health, and crypto senders face two additional constraints: content rules that apply to the message body as they would to an ad, and heightened scrutiny from mailbox providers whose filters have learned that those categories attract fraud. Compliant, consistent, well-authenticated mail from a warmed domain gets through. Anything that looks like a shortcut does not.
Why it matters more than it seems
Email is the layer that keeps working when every rented channel changes its rules. A company that has built a list carefully and can reliably reach it has distribution that cannot be suspended. A company that has neglected deliverability has a list of addresses and no way to use them.
lowob takeaway: Deliverability is authentication, reputation, and behavior. Set up SPF, DKIM, and DMARC, warm the domain, send only to people who asked, clean the list, and monitor the reports, and the one channel you own will actually reach anyone.
Common questions
Why are my legitimate emails going to spam?
Usually one of six things: missing or misconfigured authentication, a purchased or scraped list, a sudden volume jump from a new domain, an uncleaned list, spam-like content, or a shared sending service whose other customers behaved badly.
What do SPF, DKIM and DMARC do?
SPF publishes which servers may send mail for your domain. DKIM cryptographically signs each message so receivers can verify it. DMARC tells receivers what to do with messages that fail the first two and sends you reports on who is sending as your domain.
How do I warm up a new email sending domain?
Warm a new domain over several weeks with small volumes sent to engaged recipients. Sending a large blast to a cold list on day one earns a bad reputation that takes months to repair.
What extra email rules apply to crypto or financial senders?
Financial, health and crypto senders face content rules that apply to the message body as they would to an ad, and heightened scrutiny from mailbox provider filters. Compliant, consistent, well-authenticated mail from a warmed domain gets through.