Normal Business Email Goes to Spam on a Young Domain, Even With SPF, DKIM and DMARC Passing

SPF, DKIM and DMARC passing means receivers know the mail is really from you. It doesn't mean they trust you yet. A domain a few months old that sends a handful of emails a week has almost no history, so filters lean on other signals: the domain's past, the links in your signature, and whether recipients have ever replied or rescued you from spam. Fix those, and get real contacts to reply, before you consider switching domains.

A post in r/Emailmarketing (30 comments) set out the case clearly: a Google Workspace domain registered in January, a few normal one-to-one emails a week, SPF, DKIM and DMARC all passing, a 9.5/10 on mail-tester, no listings on Spamhaus, SURBL or URIBL, and every test still in spam at five Gmail recipients and one Outlook. Here's how to work through it.

Why authentication isn't enough

Google's sender guidelines list authentication as a requirement for everyone. Meeting the requirements doesn't guarantee the inbox; the same page is mostly about how mail is received:

• "Start with a low sending volume to engaged users, and slowly increase the volume over time."
• "Messages sent from an address in the recipient's contacts are less likely to be marked as spam."
• Keep the spam rate reported in Postmaster Tools below 0.3%.

The word that keeps coming up is engaged. A test to six fresh or rarely used accounts that never reply is the weakest possible signal.

Check 1: Read what Gmail says about the message

In the Gmail account where it landed, open the message:

1. The banner at the top of a spam message often gives a reason: similar messages were spam, the message looks suspicious, or a link points to a site flagged for harm. That's the most direct hint you'll get.
2. Show original gives the headers. Confirm SPF, DKIM and DMARC say pass for your domain, and that DKIM's d= is your domain, not a provider default. Paste the headers into the email header analyzer for a readable view.

Check 2: The domain's past

"Registered in January" can mean newly created or re-registered after a previous owner let it drop. A dropped domain can carry years of someone else's reputation.

• Look up the creation date and registration history with the domain age checker and a WHOIS lookup.
• Check archived versions of the domain's old website. If it hosted spam, pills or casino pages, that's your answer.
• Check the domain on blocklists that track domains, not just IPs. Our blacklist check covers the main ones.

Our post on aged and expired domains explains why an old domain isn't automatically a good one.

Check 3: Links and the signature

Filters judge every link in the message. Common causes on a small business account:

• A signature link to a new or unrelated domain, like a booking page on a fresh subdomain or a site on a different TLD.
• URL shorteners (bit.ly and similar). Spamhaus's guidelines tell senders to avoid free or unbranded shorteners. See URL shorteners and deliverability.
• Image-only signatures or a large tracking pixel added by a signature tool.

Send one plain message with no signature and no links to a contact who replies. If that lands, add the signature back piece by piece.

Check 4: How you're testing

Testing can make things worse. A dozen identical test emails to accounts that never reply look like exactly what filters look for: repeated mail nobody engages with. Test with two or three real contacts, ask them to reply, and stop after that.

What fixes it at low volume

1. Get replies from real people. Customers, suppliers, colleagues at other companies. A reply thread is the strongest signal a small sender can earn.
2. Ask recipients who find you in spam to click Not spam and add you to contacts. Google names contacts directly in its guidelines.
3. Keep the sending pattern boring. Normal hours, one-to-one, no sudden batches. If you add a newsletter or automated follow-ups, put them on a separate subdomain or provider.
4. Don't buy warm-up for this. Spamhaus's sender guidelines say no engagement-inflation services. For normal business mail, real replies are both the fix and the evidence.
5. Give it time and judge it after a couple of weeks, not daily. Changing three things a day leaves you unable to tell what worked; see the deliverability panic loop.

When to consider a new domain

Only when Check 2 shows a bad history you can't clean. A new domain starts with less history than yours, and Spamhaus advises avoiding mail from newly registered domains for at least 30 days.

Where SimpleVerifier fits

This problem is mostly reputation, not your list, and a verifier won't fix it. Where verification helps is later: when a young domain starts sending to a list, bounces to dead addresses are one of the first things that hurt it. The free domain age checker and blacklist check cover the checks above. When you do send to a list, the first 100 checks are free with a Google sign-in on the verify page. Pro is $39 a month with the first 100,000 checks a month at full speed, then slower, never cut off. See pricing.