You hit send. The campaign looks perfect. But instead of landing in inboxes, your emails vanish into the spam abyss. No bounce. No error. Just silence.
Emails going to spam is the most frustrating deliverability problem because it's invisible. Your ESP says "delivered." Your analytics show zero engagement. And you're left wondering what went wrong.
Here are the 15 most common reasons your emails land in spam — and exactly how to fix each one.
Jump to a section:
1. No SPF Record (or a Broken One)
SPF (Sender Policy Framework) tells receiving servers which IPs are authorized to send email for your domain. Without it, anyone can spoof your domain — and inbox providers know it.
The fix: Add a TXT record at your root domain with an SPF policy. A basic one looks like:
v=spf1 include:_spf.google.com ~all
The ~all (softfail) is the safest starting point. Move to -all (hard fail) once you've confirmed all your legitimate senders are listed.
Common SPF mistakes:
- Having multiple SPF records (only one is allowed — merge them)
- Exceeding the 10-DNS-lookup limit (use flattening services if needed)
- Forgetting to include your CRM, help desk, or transactional email service
DKIM (DomainKeys Identified Mail) adds a cryptographic signature to every email, proving the message wasn't altered in transit. Without DKIM, your emails look like they could have been tampered with — a major spam signal.
The fix: Generate a DKIM key pair through your email provider, add the public key as a DNS TXT record, and enable DKIM signing. Most ESPs (SendGrid, SES, Mailgun) handle this automatically — just make sure it's actually turned on.
Check it: Send a test email to a Gmail address, open it, click "Show original," and look for DKIM: 'PASS'. If it says FAIL or is missing, your DKIM isn't working.
DMARC ties SPF and DKIM together and tells receivers what to do when authentication fails. More importantly, it gives you visibility — DMARC reports show you exactly who is sending email on your domain's behalf.
The fix: Start with a monitoring-only policy:
v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com
Let reports accumulate for 2-4 weeks. Identify all legitimate senders. Then tighten to p=quarantine or p=reject.
Without DMARC, you have no idea if your domain is being spoofed — and that spoofed traffic is destroying your reputation.
4. Poor Sending IP Reputation
Every IP address accumulates a reputation score with the major inbox providers. If you're on a shared IP and another sender gets blocklisted, your deliverability suffers through no fault of your own.
The fix:
- Check your IP score with Google Postmaster Tools and Microsoft SNDS
- Use dedicated IPs for high-volume sending (50,000+ emails/month)
- If on shared IPs, monitor your ESP's reputation and be ready to switch
- Warm up new IPs gradually — start with your most engaged recipients, increase volume over 4-6 weeks
5. Domain Reputation Below Threshold
Gmail, Microsoft, and Yahoo increasingly weight domain reputation above IP reputation. A domain that sends inconsistently, has high bounce rates, or accumulates spam complaints will struggle regardless of IP quality.
The fix:
- Separate transactional and marketing mail onto different subdomains (e.g.,
mail.yourdomain.com vs updates.yourdomain.com) - Keep sending volume consistent — sudden spikes look suspicious
- Monitor your domain's spam rate in Google Postmaster Tools (stay under 0.1%)
6. High Bounce Rate
Anything above a 2% bounce rate is a red flag. Above 5%, mailbox providers may block you outright. Hard bounces (invalid addresses) are worse than soft bounces (temporary issues like full inboxes).
The fix:
- Use double opt-in to prevent typos and fake addresses
- Prune hard bounces immediately — never resend to addresses that bounce
- Verify your list before sending to dormant contacts
- Remove role-based addresses (info@, sales@, admin@) which have higher bounce and complaint rates
7. Spam Complaint Rate Too High
This is the nuclear option. If recipients click "Mark as spam," providers take it seriously. Gmail's threshold is 0.1% — that's one complaint per thousand emails. Hit 0.3% and you're in deliverability purgatory.
The fix:
- Make unsubscribe obvious and one-click (it's legally required under both CAN-SPAM and GDPR anyway)
- Set expectations at signup — if they signed up for a weekly newsletter, don't send daily promotions
- Honor unsubscribe requests immediately (within 24 hours is the law; immediately is best practice)
- Add a List-Unsubscribe header — Gmail shows it prominently and users click it instead of "Mark as spam"
8. Hitting a Spam Trap
Spam traps are email addresses that never signed up for anything — they exist solely to catch spammers. There are two types:
- Pristine traps: Addresses created specifically as honeypots, never used by real people. Hitting one means you're scraping or buying lists.
- Recycled traps: Old addresses (e.g., former employee accounts) that providers repurpose after long inactivity. Hitting these means you're not cleaning your list.
The fix: Never buy lists. Verify new signups. Remove addresses that haven't engaged in 6+ months. If you hit a pristine trap, you need to audit where that address came from.
9. Blacklisted IP or Domain
There are over 100 public DNS-based blacklists (DNSBLs), and landing on even a few major ones — Spamhaus, Barracuda, SORBS — can tank deliverability across multiple providers.
The fix:
- Check your status at mxtoolbox.com/blacklists or multirbl.valli.org
- If listed, identify why (the listing usually includes a reason code)
- Fix the root cause (spam complaints, compromised account, open relay)
- Request delisting — most major blacklists have a removal process
- For Spamhaus, you'll need to demonstrate you've resolved the issue before they'll delist
10. Missing or Invalid rDNS (PTR Record)
Reverse DNS (rDNS) maps your sending IP back to a hostname. Without it, your mail server looks like a residential connection or a compromised machine — both huge spam signals.
The fix: Set up a PTR record for your sending IP that resolves to a hostname, and ensure that hostname's A record points back to the same IP (forward-confirmed reverse DNS, or FCrDNS). Most ESPs handle this — if you're on a dedicated IP, ask your provider.
11. Suspicious Content Triggers
Content-based spam filters are less dominant in 2026 than they were a decade ago, but they still matter — especially when combined with poor reputation signals.
Common triggers:
- ALL CAPS in subject lines
- Excessive exclamation marks!!!!!
- Spammy phrases ("act now," "limited offer," "click here," "free money")
- Misleading subject lines (bait-and-switch)
- Heavy image-to-text ratio with no plain-text version
- URL shorteners (hides the real destination)
The fix: Write like a human. Include a plain-text multipart alternative. Use full URLs. Test your content against spam filters before sending.
12. Missing or Invalid SSL/TLS on Mail Server
Email transmission should be encrypted. While STARTTLS and DANE aren't universal requirements yet, major providers increasingly downgrade unencrypted connections. If your mail server doesn't support TLS, Gmail and others will flag it.
The fix: Ensure your mail server supports TLS 1.2 or higher. Enable STARTTLS. If using an ESP, this is almost certainly handled — but verify.
13. Sending Volume Spikes Erratically
Sending 500 emails one day, then 50,000 the next day is a classic spam pattern. Providers look for consistent, predictable volume.
The fix:
- Maintain a regular sending cadence
- If you need to increase volume (e.g., holiday campaigns), ramp up gradually over several days
- Avoid sending blasts after long periods of inactivity — warm up again first
14. No Engagement from Recipients
If recipients consistently ignore your emails (don't open, don't click, delete without reading), providers interpret that as "this sender isn't valuable." Over time, your mail gets filtered regardless of authentication or content.
The fix:
- Segment by engagement — send more frequently to active users, less to dormant ones
- Prune or re-engage subscribers who haven't opened in 6+ months
- Send re-engagement campaigns: "Still want to hear from us?" with a clear unsubscribe option
- If re-engagement fails, remove them — better to have a smaller, engaged list than a large, dead one
15. No Monitoring or Visibility
This is the meta-reason. Most senders have no idea their emails are going to spam until someone tells them. They don't monitor their reputation. They don't check DMARC reports. They don't test inbox placement.
The result: deliverability problems compound silently until they're catastrophic.
The fix:
- Set up Google Postmaster Tools and Microsoft SNDS (both free)
- Use a seed-list deliverability testing tool to see exactly where your emails land
- Monitor DMARC aggregate reports (rua) — they show authentication failures, volume patterns, and unauthorized senders
- Run regular inbox placement tests before major campaigns
Start With the Basics
If your emails are going to spam, don't try to fix everything at once. Here's the triage order:
- Authenticate: SPF → DKIM → DMARC. Get all three passing first.
- Check blacklists: If you're listed, nothing else matters until you're delisted.
- Look at your data: Bounce rates, complaint rates, engagement metrics. The problem is usually in the numbers.
- Fix your list: Prune bounces and inactive subscribers. A clean list fixes more problems than any technical tweak.
Most deliverability issues aren't mysterious. They're mechanical. Find the broken piece, fix it, verify it. Then move on to the next one.
Not sure where your emails are landing? mailtest.ai runs inbox placement tests across Gmail, Yahoo, and Microsoft — so you can see the problem before your recipients do.