SPF, DKIM, DMARC — why your emails go to spam
If invoices and offers sent from your company domain keep landing in your clients' spam folders, the cause is almost always three DNS records nobody's touched since the mailbox was first set up.
What to check, step by step
Check whether an SPF record exists at all
SPF (Sender Policy Framework) is a DNS entry that tells the world which servers are allowed to send mail on behalf of your domain. A missing SPF record, or one that's missing an entry for a service you actually use, is one of the most common reasons mail lands in spam — check it with a free tool like MXToolbox by entering your domain.
Confirm DKIM is enabled with your mail provider
DKIM digitally signs each outgoing message, confirming it wasn't altered in transit. On Microsoft 365 and Google Workspace, DKIM usually needs to be turned on manually in the admin console — simply having an account on those platforms doesn't enable it automatically.
Add a DMARC policy — even a basic one
DMARC tells receiving servers what to do with a message that fails SPF/DKIM checks. A missing DMARC record won't block delivery outright, but major mail providers (Gmail, Outlook) increasingly treat its absence as a warning sign when assessing domain reputation.
Check your domain's sending history and reputation
If the domain was ever used for bulk sending in the past (e.g. by a previous owner, or a badly configured marketing tool), it may have built up a poor reputation that lingers even after the DNS records are fixed. Rebuilding it takes time and consistent, "clean" sending.
A common setup mistake
Companies using several sending tools (e.g. a company mailbox + an invoicing system + a newsletter tool) often forget to add every one of those sources to their SPF record. The result: most mail goes through fine, but messages sent from the invoicing system land in spam — even though "email is working" as far as anyone can tell.
Company emails landing in spam?
We'll check your domain's DNS configuration and fix any gaps in SPF, DKIM, and DMARC — usually without interrupting your email flow.