SPF, DKIM and DMARC Are Set Up — So Why Are You Still in Spam?

You did everything the guides told you: SPF aligned, DKIM signing, DMARC on p=quarantine. Your mail-tester score is 10/10. And yet real messages to real users still slip into Spam or Promotions. What gives?

Authentication is table stakes, not a ranking factor

Gmail and Yahoo now require SPF, DKIM and DMARC for bulk senders — but meeting a requirement doesn't earn you the inbox, it just keeps you eligible for it. Think of authentication as showing ID at the door. It gets you in the building; it doesn't decide which room you end up in.

The real ranking factor: engagement

Placement is decided by sender reputation, and reputation is driven by how recipients treat your mail:

• Do they open it, and read for more than a second?
• Do they move it out of spam, or mark it "not spam"?
• Do they reply — the gold-standard signal of a wanted sender?
• Or do they delete without reading, or hit "report spam"?

Two domains with identical, perfect authentication can have wildly different inbox rates purely because one has engagement history and the other doesn't. New domains start from zero, which is why "everything is set up but I'm still in spam" is so common at launch.

What actually moves the needle

• Earn replies early. A reply is the hardest signal to fake and the most powerful. Ask new users to reply at signup — see our one-reply fix.
• Keep complaints under 0.1%. Gmail and Yahoo punish complaint rates above ~0.3%. Make unsubscribing effortless (a working List-Unsubscribe header) so bored recipients don't reach for "report spam".
• Prune hard bounces immediately. Sending to dead addresses tanks reputation. Suppress them the moment a bounce comes back.
• Warm up new domains. Ramp volume gradually rather than blasting thousands on day one.

The shortcut

Every item above is a lever Gaitle pulls automatically: it earns real replies at signup, attaches one-click unsubscribe, auto-suppresses bounces and complaints, paces new-domain volume, and scores your reply health so you can see reputation trending the right way. Authentication gets you to the door — engagement gets you into the inbox.