Emails Landing in Spam? The 3-Step Protocol to Diagnose and Fix Deliverability

Step-by-step guide to fixing cold emails landing in spam. Learn the STD protocol: stop, test, and deploy fixes for DNS, blacklists, and sender reputation.

February 1, 2026 ยท 18 min read

Deliverability Cold Email Email Warmup SPF DKIM DMARC Spam Troubleshooting

Your emails are landing in spam and your campaigns are generating zero replies. Every email that hits the spam folder is a prospect you will never reach, a meeting that will never happen, and revenue that disappears silently. The worst part is that there is no support line to call and no single button to fix it.

The good news is that landing in spam is fixable. It is practically a rite of passage for email marketers, and there is always a way back to the inbox. This guide walks through the complete process of diagnosing why your emails are going to spam and provides a structured protocol for fixing the problem, drawing from Lead Gen Jay’s battle-tested framework and supplemented with additional research on deliverability best practices for 2026.

Whether you are running campaigns through Instantly, Smartlead, Lemlist, or any other sending platform, the diagnostic process and fixes remain the same.

Understanding Cold Email Infrastructure

Before you can fix a deliverability problem, you need to understand the components involved in sending an email and where things can break down. Every cold email passes through a chain of systems, and a failure at any point in that chain can route your message straight to spam.

The Email Sending Chain

Here is every component involved in getting your email from your outbox to a prospect’s inbox:

  1. Email Server – The underlying infrastructure that sends your email. Google Workspace and Microsoft 365 have high trust scores built over decades. Private servers from providers like MailForge or InfraMail are newer and carry less inherent authority.

  2. Domain – The domain your email address is associated with (e.g., yourcompany.com). Where you purchase your domain and how it is configured directly affects deliverability. The domain carries its own reputation score that can be damaged independently of the server or mailbox.

  3. DNS Records – The authentication records configured on your domain that prove ownership and legitimacy. These include SPF, DKIM, DMARC, and MX records. Missing or misconfigured DNS records are one of the most common causes of spam placement.

  4. Mailbox – The specific email address (e.g., [email protected]) that sends the email. Each mailbox builds its own reputation based on sending behavior, engagement rates, and spam complaints.

  5. Email Copy – The actual content of your message. Receiving servers are trained to detect spammy language, and certain words, formatting choices, and link patterns trigger spam filters.

  6. Blocklists – Third-party databases that track domains and IP addresses associated with spam. If your domain or server IP appears on a blocklist like Spamhaus or SORBS, receiving servers may reject your emails outright.

  7. Receiving Server – The recipient’s email provider (Gmail, Outlook, Yahoo) that evaluates all of the above factors and decides whether your email reaches the inbox, goes to spam, or gets blocked entirely.

Where Blocking Happens

You can be blocked at three distinct levels, and understanding which level is affected determines how you fix the problem:

  • Server Level – Your entire email server is blocked. This is rare with Google Workspace or Microsoft 365 but common with private SMTP servers. If the shared IP pool on a private server gets flagged, every sender on that server is affected.

  • Domain Level – Your domain is blacklisted or has a damaged reputation. This can happen from excessive spam complaints, being added to blocklists, or sending patterns that trigger algorithmic detection. Domain-level blocks affect every mailbox on that domain.

  • Mailbox Level – A specific email address has been flagged. This is the most targeted form of blocking and usually results from that particular mailbox accumulating too many spam reports or bounces.

If you are using Google Workspace or Microsoft 365, server-level blocks are unlikely. If your DNS records are configured correctly, domain-level issues are less common. Most deliverability problems for senders on reputable servers come down to mailbox reputation and email content.

The Role of DNS Authentication Records

Properly configured DNS records are non-negotiable for inbox placement. These records prove to receiving servers that you are authorized to send email from your domain and that your messages have not been tampered with in transit.

SPF (Sender Policy Framework)

SPF is a DNS record that specifies which servers are authorized to send email on behalf of your domain. When a receiving server gets your email, it checks the SPF record to verify the sending server is on the approved list. Think of it as a guest list for your domain – only approved servers get through.

DKIM (DomainKeys Identified Mail)

DKIM adds an encrypted digital signature to each email you send. The receiving server uses a public key published in your DNS to verify the signature. If the email content was altered in transit, the signature breaks and authentication fails. Unlike SPF, which validates the server, DKIM validates the message itself.

DMARC (Domain-based Message Authentication, Reporting, and Conformance)

DMARC ties SPF and DKIM together and tells receiving servers what to do when authentication fails. It can instruct servers to deliver, quarantine, or reject unauthenticated messages. DMARC also generates reports that let you monitor who is sending email using your domain.

As of 2026, Google and Yahoo require all bulk senders to have SPF, DKIM, and DMARC configured. Missing any of these records significantly increases your chances of landing in spam. For a deeper dive into authentication setup and sending best practices, see our complete cold email deliverability guide.

Reverse DNS (rDNS)

rDNS maps your sending IP address back to a domain name. Receiving servers use this as an additional trust signal. If rDNS does not match your sending domain, it raises a red flag. Since February 2024, Google and Yahoo require Forward-Confirmed reverse DNS (FCrDNS) checks, making proper rDNS configuration more important than ever.

Where you purchase your domain can affect rDNS configuration. Some registrars and hosting providers make it easier to set up proper reverse DNS alignment. If you are experiencing deliverability issues and are using a budget registrar, this is worth investigating.

The STD Protocol: A 3-Step Framework for Fixing Spam Issues

Lead Gen Jay developed a memorable three-step framework for diagnosing and resolving deliverability problems. The protocol is straightforward: Stop, Test, Deliverability.

Step 1: Stop Your Campaigns

The moment you discover your emails are landing in spam, pause all sending from the affected mailboxes immediately. This is critical for two reasons:

  • Continuing to send compounds the damage. Every email that lands in spam further erodes your sender reputation. A mailbox that has been in spam for one day is dramatically easier to recover than one that has been sending to spam for three months.

  • You need a clean baseline for testing. Running diagnostic tests while campaigns are still sending creates noise that makes it harder to identify the root cause.

This pause is temporary. The goal is to stop the bleeding, diagnose the problem, and then resume sending with fixes in place.

Step 2: Test Everything

Testing is the most critical and most commonly botched step. Running a test is easy. Knowing what to look for in the results is where most people fail. Here is a systematic testing checklist, ordered from quickest checks to most in-depth analysis.

Check Your Warmup Health Score

If you are not warming up your email, start immediately. Warmup should be running on every mailbox you use for outreach, including your primary email for warm leads. Check your warmup health scores in your sending platform.

Instantly displays warmup health scores directly in the dashboard. You want to see scores at or near 100. A score below 90 indicates a problem that needs attention. Dedicated warmup tools like MailReach and Mailwarm provide even more detailed warmup analytics and can serve as a second layer of protection for high-value domains.

For a comparison of all the warmup services available, see our roundup of the best email warmup tools.

Verify DNS Record Configuration

Check that all authentication records (MX, SPF, DKIM, DMARC) are properly configured. Most sending platforms have built-in domain verification tools. In Instantly, use the domain setup check to verify all records in one click.

EmailGuard offers real-time monitoring of authentication records across 100+ blacklist databases and will alert you if any records become misconfigured or if your domain appears on a blocklist.

Review Campaign Analytics

Before diving into technical tests, look at your campaign data for warning signs:

  • Zero or negative replies – If you are getting no responses or only negative replies, it is a strong signal that your emails are hitting spam or reaching the wrong audience.
  • High unsubscribe rates – Keep unsubscribes below 5%.
  • High bounce rates – Keep bounces below 5%. Combined unsubscribes and bounces should stay under 10% total.
  • Low open rates – Open rates below 20% on cold campaigns suggest deliverability problems, assuming your subject lines are reasonable.

If these numbers are poor, it likely means recipients are marking you as spam, which is the single biggest factor that damages deliverability. Use a verified email list from a provider like MillionVerifier or Findymail to reduce bounces before they happen.

Test Your Email Copy for Spam Triggers

Before launching any campaign, run your copy through a spam word checker. Services like Mail-Meteor’s spam checker analyze your text and flag words or phrases that trigger spam detection. Common triggers include:

  • “100%” or “guarantee”
  • Excessive capitalization
  • Multiple exclamation marks
  • “Free” or “no obligation”
  • “Act now” or “limited time”

You want an overall score of “great.” If words are flagged, change them. This is a fast, free test that should be standard practice before every campaign launch. For guidance on writing copy that converts while staying out of spam, see our guide to cold email formulas with high response rates.

Run a Mail-Tester Check

Mail-Tester (mail-tester.com) is a free tool that provides a comprehensive deliverability score for any individual email. The process is simple:

  1. Visit mail-tester.com and copy the unique test email address displayed
  2. Send an email from the mailbox you want to test to that address
  3. Return to mail-tester.com and click “Check your score”

Mail-Tester scores your email on a scale of 1 to 10. You want a score of 9 or above. The report covers:

  • Blocklist status – Whether your domain or IP appears on major blocklists including Spamhaus, SORBS, and HostKarma
  • Content safety – Whether your email contains risky links, images, or formatting
  • SpamAssassin score – How the Apache SpamAssassin filter rates your message
  • Authentication status – Whether SPF, DKIM, and DMARC pass verification
  • Message formatting – Whether your email follows best practices (plain text, no images, proper headers)

The free tier allows three tests per day, which is sufficient for initial diagnosis.

Run a GlockApps Inbox Placement Test

GlockApps is the most powerful testing tool in this workflow because it shows you exactly how different email providers are treating your emails. While Mail-Tester gives you an overall score, GlockApps tells you whether Gmail, Outlook, Yahoo, and AOL are each putting your email in the inbox or spam.

Here is how a GlockApps test works:

  1. Sign up for a free account (you get two free tests)
  2. Start a new test and select your target region (e.g., North America)
  3. Copy the unique test ID provided
  4. Send your test email to the GlockApps seed list – a curated set of email addresses across all major providers
  5. Wait for results to populate as each receiving server processes your email

The GlockApps report shows:

  • Inbox vs. spam percentages for each major email provider
  • Blocklist status across multiple databases
  • rDNS verification results
  • DKIM and SPF validation status
  • Spam filter results from major filtering services

Pay special attention to provider-specific results. You may discover that your emails land in the inbox at Gmail but go straight to spam at Outlook. This granular visibility is invaluable because it tells you exactly where to focus your troubleshooting.

One important caveat: the test ID code embedded in your email, or test-like subject lines, can sometimes trigger filters that would not flag a normal email. If you get unexpected spam results on a GlockApps test, verify by sending a natural email to a real mailbox at the flagged provider before concluding there is a problem.

Use a Dedicated Deliverability Testing Platform

For primary domains or high-value mailboxes where you need absolute confidence, dedicated deliverability testing platforms provide the most comprehensive analysis. Tools like Warmy.io run deep checks including DNS scoring, email deliverability scoring, and provider-specific placement analysis.

These platforms are particularly useful when other tests give inconclusive or contradictory results. If GlockApps shows 0% deliverability to Outlook but your warmup scores are perfect, a second opinion from a dedicated testing tool can clarify whether the issue is real or an artifact of the test conditions.

Step 3: Fix Deliverability

Here is the reality of fixing deliverability problems that most guides will not tell you: no matter what specific issue you identify, the core recovery process is almost always the same.

Think of it like dermatology. A patient arrives with a mysterious rash. The dermatologist runs cultures, biopsies, and examinations to identify the specific condition. But after all that expert diagnosis, the treatment is almost always steroids, antifungal cream, or both. The diagnosis matters for understanding the problem, but the treatment follows a predictable pattern.

Email deliverability works the same way. Regardless of whether your issue is a blacklisting, bad DNS configuration, spammy copy, or accumulated spam reports, the recovery protocol follows the same steps:

  1. Fix the identified technical issues – Correct DNS records, remove spam trigger words from copy, clean your email list, or request blocklist removal as needed.

  2. Warm up affected mailboxes for at least two weeks – With campaigns paused, let your warmup tool rebuild sender reputation through positive engagement signals (opens, replies, spam folder rescues).

  3. Retest before resuming – Run the same battery of tests (Mail-Tester, GlockApps, platform health checks) every two weeks until your mailboxes show healthy deliverability across all providers.

  4. Resume sending gradually – Do not jump back to full volume. Ramp up slowly and monitor metrics closely during the first week.

If a mailbox takes an extended time to recover, it may be more efficient to create new mailboxes on new domains using different servers to hedge your risk. Diversifying your email infrastructure protects you from single points of failure. For teams managing many accounts, our guide to automated placement testing in Instantly explains how to automate this monitoring process across hundreds of mailboxes.

The Root Cause Most People Ignore

All the technical fixes in the world will not save you if the fundamental problem is that people are reporting your emails as spam. This is the single most important factor in deliverability, and no amount of DNS optimization can overcome it.

Emails get reported as spam when:

  • The targeting is wrong. You are emailing people who have no reason to care about your offer. Even the most valuable product pitched to the wrong person will generate spam complaints.
  • The offer is irrelevant. Your message does not connect to a problem the recipient actually has.
  • The copy feels spammy. Aggressive sales language, misleading subject lines, or excessive follow-ups push recipients toward the “Report Spam” button.
  • The volume is too high. Sending hundreds of emails per day from a single mailbox with no warmup history signals bulk spam behavior to receiving servers.

If you go through every technical test and find nothing wrong with your infrastructure, the answer is to send better emails to better-targeted prospects. Our guide on how to cold email covers list building, copywriting, and sending strategy in detail.

Email Copy Best Practices for Inbox Placement

The content of your email directly affects whether receiving servers accept or reject it. Follow these rules to maximize your chances of reaching the inbox:

Keep It Plain Text

The more basic your email copy, the better your chances of delivery. Avoid:

  • Images – They increase the likelihood of spam classification
  • HTML formatting – Rich formatting signals marketing email, not personal correspondence
  • Videos or embedded media – Never include these in cold outreach
  • Multiple links – If you must include a link, use one with a high trust score (YouTube, Calendly, or other well-known domains)

Repeatedly sending links to your own website can decrease your domain’s trust score over time. Save website links for after you have received a reply.

Avoid Known Spam Triggers

Spam filters are trained on patterns. Words and phrases that appear frequently in spam email will trigger detection. Run every new email through a spam checker before launching. Common triggers to avoid:

  • Percentage claims (“100% guaranteed”)
  • Urgency language (“Act now,” “Limited time”)
  • Financial promises (“Make money,” “Double your revenue”)
  • Excessive punctuation (multiple exclamation marks)
  • ALL CAPS words

Write Like a Human

The best cold emails read like they were written by one person to another person. Short paragraphs, conversational tone, and a clear reason for reaching out. If your email could pass as a message you would send to a colleague, it is probably formatted well for deliverability.

For proven templates and frameworks, our guide on cold email formulas for high response rates breaks down the exact structures that work in 2026.

Infrastructure Decisions That Affect Deliverability

Several infrastructure choices you make before sending a single email have outsized impact on long-term deliverability.

Choosing an Email Server

For beginners and even intermediate senders, Google Workspace and Microsoft 365 are the safest choices. These providers have decades of established trust with receiving servers. Their IP ranges are recognized as legitimate, and their built-in spam prevention mechanisms help protect your reputation.

Private SMTP servers from providers like MailForge offer advantages at scale – lower per-mailbox costs and the ability to spin up large numbers of accounts quickly. However, these servers are newer and carry less inherent trust. If you are an experienced sender with clean sending practices and low spam complaint rates, private servers can work well. If you are new to cold email, stick with Google or Microsoft until you have proven your sending behavior is solid.

For teams looking for managed infrastructure solutions, our comparison of inbox provider services covers the options available.

Domain Selection and Registration

Buy your cold email domains from a reputable registrar. The registrar affects your rDNS configuration, which is a factor receiving servers check during delivery evaluation. GoDaddy, Porkbun, Namecheap, and Google Domains are all solid choices.

Use secondary domains for cold outreach – never send cold campaigns from your primary business domain. If a secondary domain gets burned, your main domain’s reputation remains intact. This is standard practice covered in detail in our complete deliverability guide.

Warmup Is Not Optional

Every mailbox used for outreach needs active warmup. This applies to new mailboxes, recovered mailboxes, and even your primary email. Warmup tools send and receive emails within a trusted network, generating the positive engagement signals (opens, replies, spam folder rescues) that build sender reputation.

Instantly includes built-in warmup with a well-maintained warmup pool. MailReach and Mailwarm are dedicated warmup tools that provide additional protection, especially for primary domains. For a comparison of Instantly alternatives or a deep dive into pre-warmed account options, we have detailed guides available.

Warmup should run continuously – not just during the initial setup period. Stopping warmup on active mailboxes can lead to reputation decay within one to two weeks.

Blocklist Recovery

If testing reveals your domain or IP is on a blocklist, here is how to approach removal:

Common Blocklists

The most impactful blocklists for cold email senders include:

  • Spamhaus – The most widely referenced blocklist. Being listed here significantly impacts deliverability across all major providers.
  • SORBS – Maintains several sub-lists targeting different types of spam behavior.
  • HostKarma – Tracks sending behavior and assigns reputation scores.
  • Barracuda – Used by many corporate email systems for filtering.

Delisting Process

Most blocklist entries are temporary and time-based. The general process for delisting:

  1. Identify which lists you appear on using Mail-Tester or GlockApps
  2. Fix the underlying issue that caused the listing (spam complaints, compromised server, etc.)
  3. Submit a delisting request through the blocklist provider’s website
  4. Wait for processing – Spamhaus may require evidence of remediation. SORBS reviews requests manually and can take days to weeks.
  5. Monitor after delisting to ensure you do not get re-listed

The most effective prevention against blocklisting is maintaining low spam complaint rates by sending relevant, well-targeted emails to verified addresses.

Building a Resilient Email Infrastructure

Once you have recovered from a deliverability issue, take steps to prevent it from happening again:

  • Diversify across servers – Do not put all your mailboxes on a single provider. Spread across Google Workspace, Microsoft 365, and potentially one private SMTP provider so a single server issue does not take down all your sending.

  • Use multiple domains – Run campaigns across several secondary domains. If one domain’s reputation drops, others continue operating normally.

  • Monitor continuously – Do not wait for replies to stop before checking deliverability. Run inbox placement tests weekly. Tools like EmailGuard provide automated monitoring and alerts.

  • Verify your lists – Use MillionVerifier or a similar tool to clean every email list before importing. High bounce rates are one of the fastest paths to spam placement.

  • Keep volume reasonable – Limit sending to 25-50 emails per mailbox per day. Higher volumes require more mailboxes, not higher per-mailbox sending rates.

For agencies and teams managing deliverability at scale, our agency playbook for cold email deliverability provides the operational frameworks used by teams booking thousands of meetings per month.

Quick Reference: Deliverability Diagnostic Checklist

Use this checklist when you discover your emails are landing in spam:

Immediate Actions:

  • Pause all campaigns from affected mailboxes
  • Check warmup health scores in your sending platform
  • Verify DNS records (SPF, DKIM, DMARC, MX) pass validation

Testing:

  • Review campaign analytics for bounce rates, unsubscribes, and reply rates
  • Run email copy through a spam word checker
  • Send a test to Mail-Tester and aim for 9+ out of 10
  • Run a GlockApps test to check provider-specific inbox placement
  • Check blocklist status across Spamhaus, SORBS, and HostKarma

Recovery:

  • Fix all identified technical issues (DNS, copy, list quality)
  • Request delisting from any blocklists if applicable
  • Enable warmup on all affected mailboxes for a minimum of two weeks
  • Retest deliverability before resuming campaigns
  • Resume sending at reduced volume and monitor closely

Prevention:

  • Warm up every mailbox continuously
  • Verify email lists before every campaign
  • Run inbox placement tests weekly
  • Diversify across multiple domains and servers
  • Keep per-mailbox sending volume under 50 emails per day

Summary

Fixing emails that land in spam comes down to a systematic process: stop sending to prevent further damage, test methodically across multiple tools to identify the root cause, and then apply fixes while warming your mailboxes back to health. The technical diagnosis matters, but the recovery protocol is almost always the same – fix the identified issue, warm up for two weeks, and retest before resuming.

The most overlooked factor in deliverability is not technical at all. It is whether your emails are relevant to the people receiving them. No amount of DNS optimization or warmup will overcome high spam complaint rates from poorly targeted campaigns. Combine strong technical infrastructure with well-targeted, well-written emails, and inbox placement takes care of itself.

For teams ready to build their cold email operation from scratch with deliverability built in from day one, start with our complete guide on how to cold email in 2026.


This guide is based on Lead Gen Jay’s (Jay Feldman) deliverability framework, supplemented with additional research on email authentication, blocklist management, and inbox placement testing best practices.

Have a Guide to Share?

If you've built a workflow worth documenting, we'd love to feature it.

Submit a Guide