A marketing email that lands in spam has a click rate of zero. Before you spend another hour polishing subject lines, spend one afternoon on deliverability — the plumbing that decides whether your emails reach the inbox at all. None of it requires an engineer, and most of it is a one-time setup.

SPF, DKIM, and DMARC without the jargon

Three DNS records tell the world your email is legitimate. SPF (Sender Policy Framework) is the guest list: it names which servers are allowed to send email on behalf of your domain. If you send through a marketing platform, that platform's servers must be on the list. DKIM (DomainKeys Identified Mail) is a tamper-proof seal: your sending server signs each message cryptographically, and the receiving server checks the signature against a public key published in your DNS. A valid signature proves the email really came from you and was not altered in transit.

DMARC ties the two together. It publishes your policy for what receivers should do when a message fails the SPF and DKIM checks — do nothing (p=none), send it to spam (p=quarantine), or reject it outright (p=reject) — and it asks receivers to send you reports about who is sending mail as your domain. Start at p=none to collect data, confirm your legitimate mail passes for a few weeks, then move to quarantine. Major inbox providers now expect bulk senders to have all three records in place; missing them is the fastest route to the spam folder.

Setting these up is copy-and-paste work. Your email platform gives you the exact DNS records; you add them wherever your domain is registered; verification usually completes within an hour. To confirm everything works, send a test to a Gmail address, open the message, choose 'Show original', and look for three passes: SPF, DKIM, and DMARC.

List hygiene: the mess you can't send your way out of

Authentication proves who you are. Reputation decides where you land — and reputation is mostly a function of who you send to. A list full of dead addresses, typos, and people who never asked to hear from you will bury even perfectly authenticated email. The non-negotiables:

  • Never buy or scrape a list. Purchased addresses include spam traps — bait addresses that exist only to catch senders who mail people without consent.
  • Use confirmed signup where you can. A single click on a confirmation link filters out typos and bots at the door.
  • Remove hard bounces immediately and automatically. Repeatedly mailing addresses that do not exist is a classic spammer signature.
  • Catch typo domains at the form: gamil.com, hotmial.com, yaho.com. A simple 'did you mean gmail.com?' prompt rescues real subscribers.
  • Write a sunset policy: decide in advance what happens to a subscriber after 90, 180, and 365 days of silence.

Engagement pruning: smaller list, better inbox

Gmail and the other big providers watch how recipients treat your mail. Opens, replies, and rescues from the spam folder help you; deletions without opening, long silences, and spam complaints hurt you. This means every disengaged subscriber you keep is actively lowering the odds that your engaged subscribers see your next email.

The fix feels counterintuitive: send less, to fewer people. Run a re-engagement email to anyone who has not opened in 90 to 180 days — one honest message, 'Still want these?', with a single confirmation link. No click within a week or two? Stop mailing them. Cutting a 10,000-address list down to 6,000 engaged readers routinely improves inbox placement enough that more total humans see your emails than before the cut.

Warming up a new domain

A brand-new domain, or one that has been dormant, has no sending reputation — and inbox providers treat no reputation as suspicious. Blasting 5,000 emails on day one from a fresh domain is how launches end up in spam. Warm up instead: start with your 50 most engaged contacts, the people most likely to open and reply, then roughly double the daily volume each week — 50, 100, 250, 500, and onward. Four to six weeks of gradual ramp builds the history that lets full-volume sends land cleanly.

Content triggers: real, but overrated

Spammy content patterns do exist: all-caps subject lines, walls of exclamation marks, link shorteners, a single giant image with no text, and link text that names one domain while pointing at another. Avoid them. But content filters are a minor character in this story — reputation and engagement dominate. If your emails suddenly start hitting spam, the cause is almost never that you used the word 'free'. It is a list, authentication, or engagement problem wearing a content costume.

Monitor it like a metric, because it is one

You cannot see spam placement in your normal campaign dashboard — an email delivered to the spam folder still counts as 'delivered'. So instrument it directly. Register your domain with Google Postmaster Tools, which is free and shows your domain reputation and spam complaint rate for Gmail recipients; keep complaints under 0.3 percent, and treat under 0.1 percent as the real target. Watch the bounce rate on every send — a sudden jump means list decay or a technical fault. And keep a seed-test habit: before big sends, mail the draft to a few of your own mailboxes at different providers and see where it lands.

Deliverability is a reputation account. Every send is a deposit or a withdrawal — and the spam folder is what an overdraft looks like.

Work the list in order: authenticate the domain, clean the list, prune the disengaged, warm up anything new, then keep one eye on Postmaster Tools. Most senders who follow that sequence see the difference within two or three sends — not because their writing changed, but because their emails finally arrived. Tooling can handle the mechanics — some teams manage suppression and sunset rules by hand in a spreadsheet, others let a platform like AI BOSS automate the pruning — but the principle is identical either way: send wanted email, to people who asked for it, from a domain that proves its identity.