Why Deliverability Is a Crisis in 2026
In February 2024, Google and Yahoo announced new bulk sender requirements. Domains without SPF, DKIM, and DMARC records now face automatic rejection. Overnight, thousands of businesses saw their email deliverability collapse. Open rates crashed from 30% to under 5% - not because of bad content, but because of missing DNS records.
⚠️Critical: If you're sending bulk email without all three authentication records (SPF + DKIM + DMARC), Google is currently rejecting or spam-foldering your emails. Check your domain health first.
The Complete Authentication Checklist
Step 1: SPF Record (Sender Policy Framework)
SPF tells receiving email servers which IP addresses are allowed to send email on behalf of your domain. Without it, anyone can spoof your domain - and spam filters know it.
- Log into your DNS provider (Cloudflare, GoDaddy, Namecheap)
- Add a TXT record for your root domain (@)
- Value: v=spf1 include:amazonses.com ~all
- Wait 24-48 hours for propagation
- Verify at mxtoolbox.com/spf.aspx
Step 2: DKIM Record (DomainKeys Identified Mail)
DKIM adds a cryptographic signature to every email you send. Receiving servers use this to verify the email wasn't tampered with in transit. AWS SES generates your DKIM keys automatically.
- In AWS SES console: go to Verified Identities → your domain
- Click 'Publish DNS records' under DKIM section
- Add the 3 CNAME records to your DNS provider
- Wait for green 'Verified' status in SES (24-48 hours)
- Test at mail-tester.com (aim for 10/10 score)
Step 3: DMARC Record (Domain-based Message Authentication)
DMARC is the final layer - it tells receiving servers what to do with emails that fail SPF or DKIM checks. Google now requires a DMARC policy for bulk senders.
- Add TXT record to _dmarc.yourdomain.com
- Start with: v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com
- After 30 days, upgrade to: p=quarantine
- After 60 days, upgrade to: p=reject (maximum protection)
- Monitor reports at dmarcanalyzer.com
✅LoomiMail automates SPF, DKIM, and DMARC setup as part of the onboarding process. What takes 2-3 days manually takes 3 clicks with LoomiMail's guided setup wizard.
The 30-Day Domain Warm-Up Protocol
Even with perfect authentication, a brand new domain or IP address must be "warmed up" - gradually increasing sending volume so spam filters recognize you as a legitimate sender. Skipping warm-up is the #1 reason businesses get blacklisted.
| Day Range | Max Daily Sends | Focus Segment |
|---|---|---|
| Days 1-7 | 500/day | Best, most engaged subscribers |
| Days 8-14 | 2,000/day | Recent subscribers (90 days) |
| Days 15-21 | 10,000/day | Active subscribers (6 months) |
| Days 22-30 | 50,000/day | Full list (engaged segments first) |
| Day 30+ | No limit | Full volume with reputation established |
Ongoing Deliverability Monitoring
- Bounce rate target: Keep hard bounces under 2%, soft bounces under 5%
- Spam complaint rate: Stay below 0.08% (Google's threshold for bulk senders)
- Open rate benchmark: 20%+ for healthy lists, 30%+ for excellent
- Unsubscribe rate: Under 0.5% per campaign is acceptable
- List hygiene: Remove unengaged subscribers every 90 days
Get deliverability monitoring built-in with LoomiMail
Join thousands of businesses sending smarter with LoomiMail
Get Started Free