SPF, DKIM or DMARC is missing or broken
These three records tell the receiving server which services may send as your domain and whether a message was changed on the way. Gmail requires SPF or DKIM from every sender, and requires SPF, DKIM and DMARC from anyone sending more than 5,000 messages a day to personal Gmail accounts. Yahoo asks for SPF, DKIM and a DMARC record. Without them you are asking to be judged on guesswork. Our plain English guide to SPF, DKIM and DMARC shows what each one does.
A service sends as you and was never added
Your website form, your invoicing tool, your CRM, your newsletter tool and your booking system all send mail that says it comes from your domain. Each one has to be listed in your records or signed with your key. The one nobody remembered is usually the one that lands in spam.
SPF is over the lookup limit
The SPF standard allows 10 DNS lookups while a record is evaluated, and every include counts. A business that has added five tools over the years can pass 10 without noticing. When that happens the receiver gets a permanent error instead of a pass.
Two SPF records instead of one
A domain must have a single SPF record. A second one, often added by a well meaning tool setup guide, makes the result a permanent error under the standard.
The From address does not line up with the authenticated domain
DMARC passes only when the domain that passed SPF or DKIM matches the domain in the From line. Mail sent through a third party under its own domain fails that match even if the third party passes its own checks.
The domain or the sending address is on a blocklist
Blocklists are public lists of addresses and domains linked to spam. Some mail providers consult them. A listing can come from a hacked contact form, an infected computer or a mailing list with bad addresses. We check the major ones in the free domain check.
Sending habits changed suddenly
A quiet domain that suddenly sends hundreds of messages looks like a hijacked account. So does a long list bought or scraped, with many addresses that no longer exist. Both lead to bounces and complaints, which are what providers watch.
People mark your mail as spam
Google asks senders to keep the spam rate shown in Postmaster Tools under 0.10% and to never reach 0.30%. Yahoo asks for under 0.3%. Mail people did not expect, or cannot easily stop, gets reported. An easy unsubscribe link costs less than a complaint.
Outlook and Microsoft mail
Microsoft has its own requirements for domains sending more than 5,000 messages a day to Outlook.com addresses. From 5 May 2025 non-compliant mail from such domains is routed to the Junk folder, with rejection planned later. Small senders are not covered by those numbers, but clean authentication helps everywhere.