Guide
Why Your Business Emails Go to Spam (SPF, DKIM & DMARC Explained)
Why invoices, newsletters and replies land in spam, what SPF, DKIM and DMARC do, the 2024 Gmail and Yahoo sender rules and a step-by-step fix.
Short answer: business emails usually land in spam because the sending domain is not authenticated (missing or broken SPF, DKIM and DMARC records), because several tools send "as you" without being set up, or because of complaints and poor list quality. Since 2024, Gmail and Yahoo require authentication from all senders, and bulk senders must also publish DMARC, offer one-click unsubscribe and keep spam complaints low.
The three records, in plain English
| Record | What it does |
|---|---|
| SPF | Lists the servers allowed to send email for your domain |
| DKIM | Adds a digital signature proving the message was not altered |
| DMARC | Tells inboxes what to do when SPF or DKIM fail, and sends you reports |
All three live in your domain's DNS settings.
Common causes we find
- A website form, invoicing tool or newsletter service sending as your domain without DKIM
- An SPF record with too many lookups, or two SPF records (only one is allowed)
- No DMARC record at all
- Newsletters sent from the same domain you use for invoices
- Old, purchased or unverified email lists
The fix, step by step
- List every tool that sends email as your domain.
- Set up DKIM for each one.
- Fix SPF so there is a single record that includes the right services.
- Publish DMARC, starting with monitoring (p=none), then move toward enforcement.
- Separate your streams: send receipts and invoices separately from marketing, using subdomains or separate services.
- Clean your lists and honor unsubscribes immediately.
- Monitor DMARC reports and spam rates (Google Postmaster Tools helps).
Rules for cold outreach
Cold B2B email is legal in the U.S. under CAN-SPAM when you use honest subject lines, include a physical address and honor opt-outs. For deliverability, send from a separate domain, warm it up and keep volumes modest.
Frequently asked questions
How long until my emails stop going to spam?
Authentication fixes take effect within hours to days once DNS updates. Rebuilding a damaged sender reputation can take a few weeks.
Does this matter for Outlook and Microsoft 365 too?
Yes. Microsoft has also tightened requirements for high-volume senders, and authenticated mail performs better everywhere.