An email deliverability audit diagnoses why messages land in junk folders by inspecting DNS authentication (SPF, DKIM, DMARC), IP reputation, list decay, and mailbox engagement metrics. Executing this systematic five-step audit isolates hidden technical failures from behavioral flags, restoring primary inbox placement within two to four weeks.
The Strategic Framework / Why Most Get This Wrong
Most marketers treat a sudden dip in open rates as a creative crisis. They immediately rewrite subject lines or swap body copy, hoping a flashier hook turns things around. In reality, modern mailbox providers like Google and Yahoo evaluate incoming mail across two rigid layers: technical handshake integrity and behavioral recipient feedback.
If your technical layer fails, inbox algorithms flag your messages before a human ever sees them. Worse, if your send volume spikes abruptly or your unengaged subscribers quietly accumulate, spam filters silently route your campaigns into oblivion without throwing an error code. You keep sending, your ESP reports a 99% delivery rate, but your true inbox placement is sitting near zero.
Delivery is not deliverability. A delivered email simply means the receiving server did not bounce the message back. Deliverability means landing cleanly inside the primary inbox tab. To fix placement, you need a disciplined triage process that isolates protocol errors, sender score decay, and unengaged recipient drag.
Step-by-Step Implementation Blueprint
Follow these five sequential phases to run your audit, isolate deliverability leaks, and rebuild domain trust.
Step 1: Verify the DNS Authentication Trinity
Every mailbox provider requires cryptographic proof that you own your domain and authorized your sending server. If any part of this setup wobbles, spam filters treat you with suspicion.
- SPF (Sender Policy Framework): Ensure your SPF record lists every authorized IP and ESP. Never maintain more than one SPF TXT record per domain, and keep total DNS lookups under the hard RFC limit of 10. Example valid record:
v=spf1 include:_spf.google.com include:sendgrid.net ~all - DKIM (DomainKeys Identified Mail): Use 2048-bit keys to cryptographically sign every outgoing header. Verify that the selector matches your active sending platform.
- DMARC (Domain-based Message Authentication, Reporting, and Conformance): Align your SPF/DKIM domains with your friendly “From” address. If you are starting fresh, publish an audit policy:
v=DMARC1; p=none; rua=mailto:dmarc-reports@yourdomain.com; pct=100;. Once reports show 100% alignment, graduate your policy top=quarantineand eventuallyp=reject.
Step 2: Inspect Postmaster Signals and Blacklists
Do not guess what mailbox providers think of your domain; check their direct reporting dashboards. Set up Google Postmaster Tools immediately. It gives you raw, unvarnished visibility into your Google domain reputation (categorized as Bad, Low, Medium, or High), user-reported spam rate, and delivery errors.
Keep your spam complaint rate strictly under 0.10% (one complaint per 1,000 sent emails). If Google Postmaster shows your rate creeping past 0.30%, Gmail will throttle or junk your broadcasts. Next, run your sending IP and root domain through multi-RBL checkers like MXToolbox to ensure you have not landed on Spamhaus ZEN, Barracuda, or SORBS.
Step 3: Audit List Hygiene and Prune Ghost Subscribers
Sending broadcast campaigns to dead inboxes is the fastest way to destroy sender reputation. Spam filters deploy recycled spam traps (old, abandoned accounts converted into honeypots) to catch senders who do not practice clean hygiene. If you are scaling outreach or running broadcast campaigns, check our guide on How to Build a Multi-Million Dollar Cold Email Machine from Scratch to understand domain segmentation early.
For your core marketing lists, execute a ruthless engagement sunset policy:
- Pull all contacts who have not opened or clicked an email in the last 60 days (for daily/weekly senders) or 90 days (for bi-weekly senders).
- Run those contacts through an email verification tool to purge hard bounces, disposable addresses, and catch-all inboxes.
- Send a single, plain-text re-permission message. If they do not respond or click within seven days, unsubscribe or suppress them permanently.
Step 4: Analyze Content Triggers and HTML-to-Text Ratios
Spam filters evaluate email structure before rendering. Overly heavy HTML templates packed with broken tags, excessive image slices, or hidden styling flags trigger automated spam defenses.
Keep your total HTML size under 102KB to prevent Gmail from clipping your message with the dreaded “[Message clipped] View entire message” warning. Clipped messages hide your tracking pixel and your unsubscribe link, causing frustrated subscribers to hit the spam button instead. Maintain a balanced text-to-image ratio with at least 60% substantive text, use readable fonts, and test proven hooks from our breakdown of Broadcast Subject Line Formulas That Drive 40%+ Opens.
Step 5: Execute a Controlled Domain Rehabilitation Schedule
If your domain reputation has tanked to “Low” or “Bad”, blasting your entire list will only dig the hole deeper. You must rehabilitate your domain by sending exclusively to your highest-intent openers.
Filter your audience down to subscribers who clicked a link in the last 14 days. Throttle sending volume across a 14-day schedule, starting at 10% of your normal volume on day one, and incrementally increasing sends by 15% to 20% daily. The high engagement and reply rates signal to mailbox algorithms that your mail is actively wanted, gradually lifting your domain reputation back to “High”.
Practical Checklist / Cheat Sheet Table
| Audit Checkpoint | Target Benchmark | Immediate Fix Action |
|---|---|---|
| SPF Record | 1 record, <10 DNS lookups | Flatten nested includes; remove obsolete ESPs. |
| DKIM Alignment | 2048-bit key verified pass | Re-generate public key; align sending domain. |
| DMARC Status | p=none to p=quarantine | Publish policy tag; configure aggregate RUA inbox. |
| Google Spam Rate | < 0.10% (strict ceiling 0.3%) | Pause cold broadcast; prune unengaged 60-day contacts. |
| HTML Payload Size | Under 102 KB total code | Compress images; strip inline styling bloat. |
| Hard Bounce Rate | Under 0.50% per send | Run entire database through bulk validation API. |
Recommended Tools & Resources
To run professional-grade audits without guessing, assemble a focused toolkit that covers infrastructure, reputation tracking, and verification:
- Google Postmaster Tools (Free): Mandatory for tracking Gmail domain reputation, IP reputation, authentication compliance, and spam complaint rates.
- Mail-tester.com: An essential quick-check tool. Send a test email to their disposable address to get an instant 1-to-10 deliverability score highlighting broken headers, spam words, and SPF mismatches.
- BriteVerify or ZeroBounce: Industry standard email verification platforms to scrub obsolete lists, detect spam traps, and remove invalid syntax before launching campaigns.
- MXToolbox: Excellent for diagnosing DNS lookups, blacklist listings, and DMARC record syntax errors.
- GlockApps: Provides inbox placement seed tests that show exactly what percentage of your emails land in Primary, Promotions, or Spam across Gmail, Outlook, Yahoo, and iCloud.
Frequently Asked Questions
How long does it take to repair a damaged email sender reputation?
Repairing a damaged sender reputation typically takes two to four weeks of disciplined rehabilitation. You must resolve DNS errors, clean out unengaged subscribers, and temporarily throttle sends to your most active 14-day openers to prove to mailbox providers that your content is wanted.
What is the difference between email delivery and email deliverability?
Email delivery measures whether the receiving server accepted your message without a hard or soft bounce. Deliverability measures where that accepted email actually lands, specifically whether it reaches the recipient’s primary inbox or gets routed to spam and junk folders.
Why did my emails suddenly start going to spam with no changes to my copy?
Sudden spam placement is usually triggered by a hidden technical failure or a threshold breach. Common causes include an expired DKIM record, a newly introduced DMARC misalignment, landing on a major blacklist like Spamhaus, or crossing Google’s 0.30% spam complaint ceiling from a recent broadcast.
Can I fix deliverability by switching to a new email service provider?
No. Switching ESPs rarely fixes deliverability because modern spam filters attach reputation directly to your sending domain, not just the ESP’s shared IP address. If your domain has bad reputation metrics, carrying that domain to a new platform will produce identical junk folder placement.
