Email deliverability: why your emails don't arrive (and how to make them)

Sending an email is easy. Getting it to arrive — and to land in the inbox, not the spam folder — is another matter. Between your “send” button and your customer’s eye there’s a chain of filters that decide, in milliseconds, whether your message deserves the inbox, the spam folder or outright rejection. That chain is called deliverability, and it’s the difference between a campaign that sells and one nobody sees.

This guide explains what it is, what changed in 2024 with the new Gmail and Yahoo rules, and what you need to do to get your bulk sends through — with a focus on what applies if you send from or to Panama.

”Sent” is not the same as “delivered”

A send passes through three gates, and it has to clear all three:

1. Delivered: the recipient’s server accepted the message (it didn’t bounce).
2. In the inbox: beyond accepting it, the server placed it in the inbox and not in spam.
3. Seen: the contact actually opens it or interacts.

Most platforms show you “sent” and “delivered”, but the figure that matters is the second one: inbox placement. You can have 99% “delivered” and still be dropping almost everything into spam. That’s why a high “delivered” rate guarantees nothing on its own.

What changed in 2024: the new Gmail and Yahoo rules

In October 2023, Gmail and Yahoo announced a set of requirements for bulk senders — defined as those who send more than 5,000 emails a day to their users — that began to apply from February 2024. Microsoft (Outlook, Hotmail, Live) joined on 5 May 2025, outright rejecting mail from bulk senders who don’t comply. And since November 2025, Gmail tightened enforcement: non-compliant mail no longer just lands in spam, but faces temporary and permanent rejections. These are no longer recommendations: they’re requirements, and not meeting them means your email simply bounces.

The essentials they now require of a bulk sender:

• Authentication with SPF and DKIM on the sending domain.
• A published DMARC record, at minimum with a p=none policy.
• Alignment: the visible From: domain must match the SPF or DKIM domain.
• One-click unsubscribe (per the RFC 8058 standard) in commercial mail, and processing those opt-outs within a maximum of 2 days.
• A spam-complaint rate below 0.3% (the recommended target is to keep it under 0.1%).
• Valid reverse DNS (PTR) for the sending IPs and connection over TLS.

Even if you send fewer than 5,000 a day, the wind is blowing the same way: without SPF, DKIM and a clean list, your mail is far more likely to end up filtered. What used to be “best practice” is now the bare minimum.

The three technical pillars

1. Authentication: proving it’s you

Authentication proves to the receiving server that the mail comes from who it claims to. There are three protocols that work together:

• SPF (Sender Policy Framework): a list, published in your DNS, of the servers authorised to send on behalf of your domain. If mail goes out from an IP that’s not on the list, it raises suspicion.
• DKIM (DomainKeys Identified Mail): a cryptographic signature on every message. The receiver verifies it against a public key in your DNS and confirms the content wasn’t altered along the way.
• DMARC: the policy that tells the receiver what to do when a message claims to be from your domain but fails SPF and DKIM. It also sends you reports of who is using (or spoofing) your domain.

Without these three properly configured and aligned, today you simply don’t compete for the inbox. For the step-by-step of each record — and the alignment trap that breaks most setups — see our SPF, DKIM and DMARC.

2. Reputation: your track record as a sender

Providers assign your domain and your IPs a reputation, like a credit score. It’s built over time and with consistency:

• Warmup: a brand-new IP or domain that suddenly fires off thousands of emails looks like spam. Reputation is built by ramping up volume gradually over weeks.
• Stable volume: erratic spikes (0 one month, 50,000 the next) erode trust. Regularity helps.
• Low complaints: every time someone marks “this is spam”, your reputation drops. That’s why the 0.3% threshold is so decisive.

3. List hygiene: who you write to

The list is where most campaigns sink. A dirty list drags everything else down:

• Bounces: invalid or non-existent addresses. A high bounce rate tells the provider you don’t look after your list.
• Inactive contacts: those who never open lower your average engagement, and engagement is a quality signal.
• Spam traps: decoy addresses that belong to no one; writing to them flags that you got the list by dubious means.

The practical rule: don’t buy databases. Purchased or scraped lists are full of bounces and traps, burn your domain in a single send and — in Panama — put you on the wrong side of the law. How to keep a healthy list — bounces, inactives and the “sunset” policy — is covered by our database cleaning service.

The factor almost no one controls: permission

Here two things that are really one cross paths. On one side, engagement: people who asked to receive your emails open them, don’t mark them as spam and improve your reputation. On the other, legal compliance.

Put another way: permission is, at once, what keeps your complaints low (deliverability) and what keeps you compliant (Law 81). That’s why a good opt-in — ideally double — is the best investment you can make in your sends. The legal side is covered in our guide to Law 81 and bulk messaging, and why scraping or buying a list ruins both at once is covered by our database cleaning service.

How do I know if I have a problem?

Some signs your deliverability is slipping:

• Your open rates drop without you changing the content.
• Customers tell you “it didn’t arrive” and find it in spam.
• Your domain or IP appears on blocklists.
• Your bounce or complaint rate went up.

The key tool to measure it on Gmail is Google Postmaster Tools: it shows your reputation, your real spam rate and your authentication status. Setting it up takes minutes and it’s the only way to see the number that triggers the penalties.

Quick deliverability checklist

• Publish and validate SPF, DKIM and DMARC, with the From: aligned.
• Turn on one-click unsubscribe and process opt-outs within 48 hours.
• Keep your complaint rate below 0.1%.
• Warm up new domains and IPs before sending at volume.
• Clean your list: remove bounces and inactives regularly.
• Send only to those who gave permission (opt-in, preferably double).
• Monitor with Postmaster Tools and check blocklists.

Why local matters (a lot)

Deliverability isn’t just technical: it’s reputation built over time, with your own infrastructure, plus knowledge of the market and of the law that applies to you. An international platform with a generic /panama/ page gives you the software but leaves you the work of authentication, warmup, cleaning and compliance.

Operating from Panama, with carefully tended IPs and domain, support in your time zone and Law 81 sorted from day one, changes the outcome: your messages arrive and, if the ANTAI asks, you’re covered.