email-deliverability-guide-2026.md

How ISP Email Filtering Works in 2026

Every major ISP runs sophisticated filtering systems that evaluate every inbound message in real time. The goal: distinguish legitimate senders from spam, phishing, and malware distribution.

Gmail's Filtering Stack

Gmail processes over 300 billion emails per day. Their filtering system uses:

Sender reputation signals:

• IP address reputation (established via warmup history)


• Domain reputation (sending domain + From domain)


• DKIM/SPF/DMARC authentication pass rates


• Complaint rate (% of recipients marking as spam)

Content signals:

• Keyword density and spam trigger detection


• Image-to-text ratio


• Link analysis (where links point, URL shortening)


• HTML quality and rendering consistency

Engagement signals:

• Open rates (historical per-user engagement)


• Click rates


• Reply rates (Gmail-specific)


• Delete-without-opening rate

Behavioral signals:

• Direct marks as spam (% who click "Report Spam")


• Whether recipients have your address in contacts


• Time spent reading (Gmail tracks this)

Microsoft (Outlook/Hotmail) Filtering

Microsoft's filtering (used across Outlook.com, Microsoft 365, and some corporate Exchange) evaluates:

• SNDS IP reputation data


• Smart Network Data Services (free IP reputation portal)


• Outlook.com complaint rates


• Exchange Online Protection (EOP) rules

Microsoft is particularly sensitive to:

• High complaint rates


• Rapid list growth (sending to newly acquired addresses)


• Certain attachment types

Yahoo Mail Filtering

Yahoo improved filtering significantly in 2024 with mandatory DMARC requirements. Yahoo evaluates:

• DMARC pass rate (must be 100% aligned)


• Complaint feedback loop data


• Bounce rates (Yahoo is more tolerant than Gmail)


• Authentication consistency

The 7 Pillars of Sender Reputation

Pillar 1: IP Reputation

Your sending IP addresses carry significant reputation weight. Each IP you send from accumulates:

• Volume history (gradual growth = legitimate; spikes = suspicious)


• Bounce rate history


• Complaint rate


• Spam trap hits

Protecting IP reputation:

• Always warm up new IPs over 8+ weeks


• Never exceed 2x your established daily volume


• Rotate IPs if one gets flagged


• Monitor Postmaster Tools daily

Pillar 2: Domain Reputation

Your From domain and root domain carry reputation signals separate from IP reputation:

• 
  [email protected] — your sending identity


• 
  example.com — your organizational domain

Protecting domain reputation:

• Use separate subdomains for transactional and marketing email


• Never send marketing from your primary domain


• Publish and maintain proper SPF/DKIM/DMARC


• Monitor domain-level reputation in Postmaster Tools

Pillar 3: Authentication (SPF/DKIM/DMARC)

Authentication is non-negotiable in 2026. Gmail and Yahoo require it:

• 
  SPF: Authorizes which IPs can send for your domain


• 
  DKIM: Cryptographic signature proving message integrity


• 
  DMARC: Policy layer enforcing alignment between SPF/DKIM and From domain

See our

Common issues:

• SPF includes IPs that shouldn't be there (third-party senders not in record)


• DKIM selector mismatch (selector doesn't match DNS)


• DMARC alignment failure (From domain doesn't match DKIM/SPF domain)

Step 2: Warmup New IPs Properly

If you're starting with new sending IPs:

1. Use our
   
   
   

   For related guides, see , .

   
   
   

   References: | RFC 8058 (List-Unsubscribe)

   Vollständiger Original-Artikel

   Den kompletten Beitrag mit allen Details direkt auf dev.to lesen.

   ↗ Original-Artikel auf dev.to lesen