How Email Deliverability Works: The Complete Guide

By The EmailCloud Team |
deliverability

What Is Email Deliverability?

Email deliverability is the measure of whether your emails successfully reach recipients’ inboxes. It is distinct from email delivery, which simply means the receiving mail server accepted your message without returning a bounce. An email can be “delivered” — accepted by the server — and still end up in the spam folder, the promotions tab, or silently discarded.

When we talk about deliverability, we are specifically talking about inbox placement: did your email land where the recipient will actually see it and read it?

The Journey of an Email

Every email you send passes through a series of checkpoints before it reaches the inbox. Understanding this journey explains why some emails arrive instantly while others vanish without a trace.

Step 1: Your ESP’s Outbound Servers

When you hit send in your email marketing platform, the message is queued on your ESP’s outbound mail servers. These servers have IP addresses with established sending reputations. Your ESP manages the sending infrastructure — throttling delivery rates, handling authentication, and routing messages through IP pools appropriate to your sending volume and reputation.

If you are on a shared IP (common for smaller senders), your deliverability is partially tied to the behavior of other senders on the same IP. This is one reason reputable ESPs aggressively police their platforms for spammers. Dedicated IPs, available from most ESPs at higher tiers, give you full control over your IP reputation but require sufficient volume (typically 50,000+ emails per month) to maintain a stable reputation.

Step 2: DNS Authentication Checks

The receiving mail server’s first action is to verify your identity through DNS-based authentication protocols.

SPF (Sender Policy Framework) checks whether the sending IP address is authorized to send email on behalf of your domain. The receiving server queries your domain’s SPF record — a DNS TXT entry that lists all authorized sending IPs and services.

DKIM (DomainKeys Identified Mail) verifies that the email content has not been altered in transit. Your ESP signs each outgoing email with a private cryptographic key. The receiving server retrieves your public key from DNS and validates the signature. If the content was modified after signing, the DKIM check fails.

DMARC (Domain-based Message Authentication, Reporting & Conformance) ties SPF and DKIM together. Your DMARC record tells receiving servers what to do when authentication fails — monitor only, quarantine (send to spam), or reject (block entirely). DMARC also provides reporting, sending you aggregate data about authentication results for your domain.

As of 2024, Gmail and Yahoo require all three protocols for senders dispatching more than 5,000 messages per day. Microsoft followed with similar requirements for Outlook.com in 2025. Authentication is no longer optional.

Step 3: Reputation Evaluation

After authentication, the receiving server evaluates your sender reputation. This is the single most important factor in deliverability decisions. Inbox providers maintain reputation scores based on several signals.

Domain reputation tracks the sending history of your domain across all IP addresses. This has become the primary reputation signal, especially at Gmail. Even if you switch ESPs or IP addresses, your domain reputation follows you.

IP reputation tracks the sending history of the specific IP address. For senders on shared IPs, this reflects the collective behavior of all senders using that IP.

Engagement history measures how recipients interact with your emails. High open rates, clicks, replies, and forwards signal a wanted sender. Low engagement, deletions without opening, and marking messages as spam signal an unwanted sender.

Complaint rate is the percentage of recipients who click “Report Spam” or “Mark as Junk.” Gmail expects complaint rates below 0.1% and considers anything above 0.3% a serious problem. Yahoo and Microsoft apply similar thresholds.

Bounce rate tracks the percentage of emails that could not be delivered. Hard bounces — permanent failures due to invalid addresses — are particularly damaging. High hard bounce rates suggest you are sending to purchased or poorly maintained lists.

You can monitor your sender reputation using tools like Google Postmaster Tools and Sender Score. We cover this topic extensively in our sender reputation guide.

Step 4: Content Filtering

Modern spam filters rely primarily on reputation, but content still matters. After the reputation check, the email’s content passes through pattern-matching filters that evaluate several factors.

Subject line analysis checks for classic spam patterns: excessive capitalization, multiple exclamation marks, and known spam trigger phrases like “Act now,” “Limited time,” or “Free money.” Our Spam Word Checker identifies these triggers before you send.

Body content scanning looks at the text-to-image ratio (spam tends to be image-heavy with minimal text), the presence and quality of links (are they pointing to known-bad domains?), HTML quality (broken or obfuscated code is suspicious), and overall readability.

Header analysis examines technical headers for inconsistencies, missing required fields (like List-Unsubscribe), or patterns associated with bulk spam tools.

Step 5: Inbox Placement Decision

Based on the cumulative results of authentication, reputation, and content analysis, the receiving mail server makes its final decision. There are four possible outcomes.

Inbox — The email passes all checks and lands in the primary inbox.

Tabs/Categories — Gmail’s tabbed inbox may route your email to the Promotions or Updates tab instead of Primary. This is not the spam folder — the email is still delivered — but visibility is reduced.

Spam folder — The email is accepted by the server but flagged as spam. The recipient can find it if they look, but most never check.

Rejection — The server refuses the email entirely, generating a bounce. This happens with very poor reputation, failed authentication with a strict DMARC policy, or blacklisted IPs/domains.

The Factors That Matter Most

Not all deliverability factors carry equal weight. Here is how they rank in terms of impact.

Authentication (table stakes): Without properly configured SPF, DKIM, and DMARC, nothing else matters. Missing authentication is the number-one fixable cause of deliverability problems.

Sender reputation (primary factor): Your domain and IP reputation drive the majority of inbox placement decisions. A strong reputation can overcome mediocre content. A weak reputation will land even excellent content in spam.

List quality (foundational): Sending to valid, engaged, opted-in addresses is the behavior that builds and maintains reputation. Every hard bounce and spam complaint chips away at your reputation score.

Engagement patterns (growing in importance): Inbox providers increasingly use recipient engagement as a deliverability signal. Emails that recipients open, click, reply to, and forward receive a positive signal. Emails that are ignored or deleted without opening receive a negative one.

Content (secondary): Content analysis is real but matters less than most marketers think. A sender with excellent reputation can use words like “free” and “limited time” without triggering spam filters. A sender with poor reputation will have trouble delivering even the most innocuous content.

How to Improve Your Deliverability

Improving deliverability is a systematic process, not a one-time fix.

Authenticate everything. Set up SPF, DKIM, and DMARC for every domain you send from. Start DMARC at p=none for monitoring, then move to p=quarantine and eventually p=reject as you confirm all legitimate sending sources are authenticated.

Clean your list regularly. Remove hard bounces immediately. Suppress subscribers who have not engaged in 90-180 days (or run a re-engagement campaign first). Never add addresses without explicit opt-in consent.

Warm up new IPs and domains. If you switch ESPs or add a new sending domain, start with small volumes to engaged segments and gradually increase over 4-8 weeks. Sudden volume spikes from unknown senders trigger spam filters.

Monitor your metrics. Track bounce rates, complaint rates, open rates, and click rates at the campaign and domain level. Set up Google Postmaster Tools for Gmail-specific reputation data. Investigate any sudden drops in engagement — they often signal a deliverability problem.

Make unsubscribing easy. A visible, one-click unsubscribe link reduces spam complaints. If someone wants to leave your list, let them. An unsubscribe is far less damaging to your reputation than a spam complaint.

Send consistently. Erratic sending patterns — going silent for weeks then blasting your full list — confuse inbox providers and can trigger throttling or filtering. Maintain a regular sending cadence that matches your audience’s expectations.

The Bottom Line

Email deliverability is a complex system, but it follows logical principles. Authenticate your identity, protect your reputation, maintain a clean list, and create content your subscribers actually want to receive. Do those things consistently, and the inbox placement will follow.

Frequently Asked Questions

What is a good email deliverability rate?

A good deliverability rate is 95% or higher, meaning at least 95 out of every 100 emails reach the recipient's inbox rather than the spam folder. Top-performing senders achieve 98-99%. If your rate drops below 90%, you likely have authentication, reputation, or list hygiene issues that need immediate attention.

How do I check my email deliverability?

Use tools like Google Postmaster Tools (free) to monitor your domain reputation with Gmail, check your sender score at senderscore.org, run inbox placement tests with tools like GlockApps or Mail Tester, and monitor your bounce and complaint rates within your ESP dashboard. Consistently high bounce rates or complaint rates above 0.1% indicate deliverability problems.

Why are my emails going to spam?

Common reasons include missing authentication records (SPF, DKIM, DMARC), poor sender reputation from high bounce or complaint rates, spam trigger words in subject lines or content, sending to stale or purchased lists, sudden spikes in sending volume, or landing on a blacklist. Start by checking authentication and reputation — content is rarely the primary cause.