My emails land in spam: why business emails go to junk, and how to fix it
⏱ In about 10 minutes
Affiliate disclosure: Some links on this page may become affiliate links. If you buy, we may earn a commission at no extra cost to you. Commissions may influence which products we choose to cover, but not our assessment of them. Read the full disclosure.
In this article
The short answer
Short answer
The most common fixable cause is that your domain isn't authenticated. Set up three DNS records, SPF, DKIM and DMARC, so inbox providers can tell your email is really from you. Then clean your list, send only to people who asked to hear from you, and make unsubscribing easy.
Gmail, Yahoo and Outlook now publish these as requirements, not suggestions. Gmail says unauthenticated messages "might be marked as spam or rejected". (Gmail) Good email tools such as Kit and Brevo walk you through the setup.
Why this happens
Inbox providers are trying to stop spam and fake emails pretending to be from real businesses. To do that, they check two things:
- Is this email really from who it says? (authentication)
- Do recipients want it? (reputation: spam complaints, bounces, engagement)
If either looks shaky, your email goes to junk, or doesn't arrive at all. Gmail warns that if messages from your domain are "frequently reported as spam, future messages from you are more likely to be marked as spam." (Gmail)
SPF, DKIM and DMARC in plain English
These are text records you add to your domain's settings (DNS), usually where you bought your domain.
| Record | Plain-English job | From the official guidance |
|---|---|---|
| SPF | A list of the services allowed to send email for your domain | Gmail: SPF "prevents spammers from sending unauthorized messages that appear to be from your domain." Your SPF record "should include all email senders for your domain." |
| DKIM | A digital signature that proves the email wasn't changed and really came from your domain | The UK NCSC: DKIM "allows you to cryptographically sign email you send to show it's from your domain." |
| DMARC | Tells inbox providers what to do with email that fails SPF/DKIM, and sends you reports | The NCSC: DMARC "allows you to set a policy for how receiving email servers should handle email which doesn't pass either SPF or DKIM checks." |
Sources: Gmail sender guidelines · NCSC email security and anti-spoofing
A common trap: you add a newsletter tool, but your SPF record only lists your everyday email provider. Gmail notes that "if your third-party senders aren't included in your SPF record, messages from these senders are more likely to be marked as spam."
Bonus: DMARC also makes it harder for scammers to send fake emails pretending to be your business, which protects your customers.
What the big inbox providers now require
- Gmail (all senders): set up SPF or DKIM, valid forward and reverse DNS, a TLS connection, and properly formatted messages. Over 5,000 messages a day: SPF and DKIM, DMARC, alignment, and one-click unsubscribe for marketing messages. (Gmail)
- Yahoo: publish a DMARC policy "with at least p=none", align the From domain with SPF or DKIM, support one-click unsubscribe, and include "a clearly visible unsubscribe link in the email body". (Yahoo Sender Hub)
- Outlook.com (Microsoft consumer email): for domains sending over 5,000 emails a day, SPF, DKIM and DMARC compliance; Microsoft says it has decided to "reject messages that don't pass the required authentication requirements." (Microsoft Tech Community)
You may be far below 5,000 a day. Set everything up anyway; Gmail recommends you "always set up SPF, DKIM, and DMARC for your domains."
Fix it: step by step
The time guides are rough, for a small business with one domain.
Step 1: Send from your own domain (if you aren't already) (30 minutes)
You can't authenticate a free webmail address. Brevo, for example, says domains from free email services "such as Gmail or Yahoo… cannot be authenticated." (Brevo Help)
Step 2: Authenticate your domain in your email tool (30–60 minutes)
Your email marketing tool gives you the exact records to add. Brevo "strongly recommend[s] using automatic authentication whenever it's available", connecting to your domain provider in a few clicks. (Brevo Help) Do the same for your everyday email provider (Microsoft 365, Google Workspace).
Step 3: Add a DMARC record and read the reports (15 minutes, then monthly)
Start with a monitoring policy (p=none, which Yahoo names as the minimum) and a reporting address. Gmail recommends DMARC reports so you can "identify senders that may be impersonating your domain." Tighten the policy once you're sure all your real senders pass.
Step 4: Clean your list (30 minutes)
Gmail's list advice: make sure recipients opt in, "confirm each recipient's email address before subscribing them", and "consider unsubscribing recipients who don't open or read your messages." (Gmail) Remove bounced addresses. Never buy lists; Yahoo says "Don't purchase mailing lists." (Yahoo)
Step 5: Make unsubscribing easy (10 minutes)
A visible unsubscribe link in every marketing email, plus one-click unsubscribe (most email tools handle this). Gmail says easy opt-outs "can improve open rates, click-through rates, and sending efficiency." It's also a legal requirement in many countries; see our beginner's guide.
Step 6: Tidy the content (10 minutes per email)
- Use an honest subject line that matches the content (in the US it's the law: the FTC says the subject "must accurately reflect the content of the message"). (FTC)
- Keep a consistent sender name and address.
- Don't suddenly change frequency. Yahoo: "Don't start sending daily emails to subscribers of your weekly or monthly mailing."
- Send a plain, useful email rather than one big image.
Step 7: Check it worked (15 minutes)
Send a test to addresses at a few different providers. The NCSC also offers a free email security check tool, linked from its email security guidance.
Is it your website host? If your everyday emails go through your web host's mail server, ask them about authentication too. See our website speed and hosting guide.
Quick pick
Quick pick: email tools with deliverability help (product details from official vendor pages, checked 18 Oct 2026. Not hands-on tested. No ratings. Confirm prices and features on the vendor's site.)
Best for most small businesses: Kit. Publishes deliverability guides for its users, and its Pro plan lists "deliverability reporting". Free plan listed for up to 10,000 subscribers. → See our email marketing guide- Budget option: Brevo. Guided domain authentication (with an automatic option for many domain providers), a free plan, and Starter listed at US$9/month for the 5,000-emails tier. The Professional plan adds "Deliverability Specialist support". Note: Brevo disclosed two security incidents in September 2026 (an account-access flaw and malicious code briefly served from its website and embeddable scripts); see Brevo's write-up. → See our email marketing guide
Full comparison: Which email tool is easiest?
What we'd avoid: honest limits
Free: the Small Business Password & Access Checklist
A 1–2 page checklist that turns this article into a to-do list: which accounts to protect first, how to set up shared access, and what to do when someone joins or leaves.
You only get emails if you tick the consent box. Unsubscribe any time. See our privacy policy.
Frequently asked questions
Do I need all three records?
For bulk senders, Gmail and Yahoo now require DMARC alongside SPF and DKIM. For everyone else, Gmail still recommends all three.
My personal emails to customers go to spam too. Same fix?
Usually yes. Authenticate your everyday email domain (your Microsoft 365 or Google Workspace setup) as well as your newsletter tool.
How long until it improves?
Authentication takes effect once DNS updates spread, often within hours. Reputation improves more slowly as you send wanted emails consistently.
Should I use a dedicated IP?
Not for most small businesses. Shared sending infrastructure from a reputable email tool is normal at small volumes.
Related guides
- Email marketing: our hub
- I've got customer emails but never send anything
- Which email tool is easiest when I have no time?
- My website is slow and keeps going down
Sources
Official sources first. All links checked and loading on 18 Oct 2026.
- UK National Cyber Security Centre: Email security and anti-spoofing
- US Federal Trade Commission: CAN-SPAM Act: a compliance guide for business
- Google: Email sender guidelines (Gmail Help)
- Yahoo: Sender best practices
- Microsoft: Outlook's new requirements for high-volume senders
- Vendor pages (checked 18 Oct 2026): Brevo: authenticate your domain · Brevo pricing · Kit deliverability · Kit pricing · Brevo SSO incident write-up · Brevo post-mortem, 14 Sept 2026
About our review process
We pick products from official information and say clearly when we haven't tested something hands-on. Commissions may influence which products we choose to cover, but not our assessment of them. See how we work.