1. What email deliverability actually means
Imagine you send 10,000 emails to your customers. Your email service provider (Mailchimp, HubSpot, ConvertKit - pick one) reports a 99% delivery rate. Champagne, right?
Not quite. That 99% only tells you that 9,900 receiving mail servers accepted your messages. It doesn't tell you where those messages went after acceptance. If 4,000 of them ended up in spam folders, your actual deliverability - meaning inbox placement - is closer to 59%.
Email deliverability is the percentage of your sent messages that reach the recipient's primary inbox - not the spam folder, not the promotions tab, not blocked entirely. It's the only metric that matters for whether email actually drives results for your business.
2. Delivery rate vs deliverability - they're not the same
Delivery rate - % of emails accepted by the receiving server. Reported by your ESP. Almost always 95%+.
Deliverability (inbox placement) - % of accepted emails that reach the primary inbox. NOT reported by your ESP. Often shockingly lower.
This distinction is the single biggest source of confusion in email marketing. Your ESP shows "99.2% delivered!" because that's flattering. But it's measuring the wrong thing.
3. How inbox providers decide where mail goes
Every email going to Gmail, Outlook, Yahoo, or Apple Mail goes through a multi-stage filtering pipeline that takes about 200 milliseconds. The pipeline answers four questions, in order:
- Can we trust who sent this? (Authentication)
- Has this sender been a problem before? (Reputation)
- Does the message itself look suspicious? (Content)
- Is this address engaged with this sender? (List quality)
If any one of those four checks fails badly, the message lands in spam. If all four pass cleanly, it lands in the primary inbox. The four-pillar framework isn't marketing-speak - it's literally how the algorithms decide.
4. Pillar 1 - Authentication
Authentication is the inbox provider asking: "Is this email actually from who it claims to be from?" Without authentication, every spammer in the world can spoof your domain.
There are three authentication standards: SPF, DKIM, and DMARC. We have a deep dive on these in our spam guide, but the short version:
- SPF tells receivers which servers are allowed to send for your domain
- DKIM cryptographically signs each message proving it wasn't tampered with
- DMARC tells receivers what to do when SPF or DKIM fails
Since February 2024, Gmail and Yahoo have required all three for any sender doing more than 5,000 messages/day. Below that threshold, missing authentication still triggers spam-folder placement at every major provider.
5. Pillar 2 - Sender reputation
Sender reputation is essentially a credit score for your sending domain and IP. Inbox providers track every message you send and assign you a score based on:
- Your bounce rate (high = bad list quality)
- Spam complaint rate (recipients clicking "report spam")
- Engagement rate (opens, clicks, replies)
- Spam trap hits (sending to addresses set up specifically to catch dirty senders)
- Sending volume consistency (sudden spikes = suspicious)
Reputation is built over months and destroyed in days. A single campaign to a stale list can drop your score from "good" to "filtered" overnight. Recovery typically takes 4-8 weeks of careful sending.
6. Pillar 3 - Content signals
Content filters look at the actual message - subject, body, links, images, structure - and check for patterns associated with spam. Common red flags:
- Subject lines in ALL CAPS or with excessive punctuation (!!!)
- Trigger words and phrases ("free money," "act now," "guaranteed")
- Mismatched From name and From address
- Links to URL shorteners (bit.ly, tinyurl)
- Image-only messages with no text (a classic spam pattern)
- HTML that's badly malformed or contains hidden text
Modern content filters are good - they don't trigger on legitimate language used in context. But if your message hits multiple red flags, you're asking for a spam-folder visit.
7. Pillar 4 - List quality
List quality is the foundation that all three other pillars rest on. Even with perfect authentication, perfect reputation, and perfect content - sending to bad addresses tanks your deliverability.
Bad addresses include:
- Hard bounces - addresses that don't exist (typos, abandoned mailboxes, dead domains)
- Spam traps - addresses set up specifically to catch senders who buy lists or scrape addresses
- Disposable addresses - Mailinator, GuerrillaMail, etc. - abandoned within days
- Role-based addresses - info@, sales@, admin@ - rarely a real person, low engagement
- Disengaged subscribers - haven't opened in 12+ months, mark you as spam if you keep emailing
The fix is regular list cleaning - see our complete list cleaning guide.
8. How to measure your deliverability
Your ESP doesn't show you inbox placement (that would require them to deliver into other providers' inboxes, which they can't do). To measure real deliverability you need either:
- Seed-list testing - services like GlockApps or Inbox Monster send a copy of your campaign to test inboxes across providers and report where each one landed. Costs $30-100/month.
- Engagement metric inference - if your open rate is suspiciously low (under 15% for a B2C list), you're probably hitting spam folders. Compare against industry benchmarks.
- DMARC reports - once DMARC is set up, you receive aggregate reports showing how many messages passed/failed authentication and where they were sent from.
9. Where to start fixing
If your deliverability is bad, fix the pillars in this exact order:
- Authentication first - it's a binary fix that takes 20 minutes and immediately improves placement. Run a full audit to see what's missing.
- List quality second - clean your list before your next campaign. Free verifier here.
- Reputation third - once auth and list are clean, reputation rebuilds itself over 4-8 weeks of consistent sending.
- Content last - only after the first three are solid. Bad content with good auth/list/reputation still works. Good content with bad auth never does.
Run a full audit on your sending domain. We check authentication, reputation signals, blacklist status, and configuration - graded A-F with specific fixes ranked by impact.