The Newsletter You Spent Hours Writing Might Never Get Read
You craft the subject line. You refine the copy. You choose the image. You hit send to your list of 2,000 subscribers. And then — nothing. Open rates hover around 8 percent. Replies are nonexistent. You assume the content is the problem, so you rewrite, redesign, and try again. Same result.
Here is what nobody told you: the content was probably fine. Your emails are landing in spam folders, promotional tabs, or getting silently rejected by inbox providers before your subscribers ever see a subject line. The problem is not your message. It is your email deliverability — the technical foundation that determines whether your message actually arrives.
The good news: fixing email deliverability for small business does not require an IT department, a developer on retainer, or a computer science degree. It requires understanding three specific authentication protocols, a handful of DNS record changes, and some sending-behavior discipline. This post walks through all of it.
Why Emails Go to Spam: The Three Layers of Filtering
Inbox providers like Gmail, Outlook, and Yahoo evaluate every inbound email against three broad categories before deciding where it lands. Understanding these categories is the foundation for every fix that follows.
1. Authentication: Are You Who You Say You Are?
When your email arrives at a recipient's mail server, the first question is identity. The server checks whether your sending domain has published records that prove you authorized the server sending on your behalf. Without these records, you look indistinguishable from a spammer spoofing your domain. This is where SPF, DKIM, and DMARC come in — more on each below.
2. Reputation: Have You Earned Trust?
Even authenticated senders carry a reputation score. This score is built over time based on complaint rates (how often recipients mark you as spam), bounce rates (how often you send to addresses that do not exist), engagement patterns (do people open and click, or ignore and delete?), and sending volume consistency. A brand-new domain sending 5,000 emails on day one looks suspicious regardless of authentication.
3. Content and Behavior Signals
The actual content of your email matters, but less than most people think. Spammy subject lines, excessive image-to-text ratios, and certain trigger phrases can hurt. But the bigger behavioral signals are things like sending to purchased lists, never cleaning inactive subscribers, and using URL shorteners that are also favored by phishing campaigns.
Most small business owners focus exclusively on layer three — rewriting subject lines, avoiding the word "free" — while ignoring layers one and two entirely. That is like repainting a house with a cracked foundation.
SPF, DKIM, and DMARC for Business Email: What They Are and How to Set Them Up
These three protocols are the soil work of email deliverability. They are DNS records — text entries in your domain's settings — that tell receiving mail servers how to verify your identity. If you can log into your domain registrar (GoDaddy, Namecheap, Cloudflare, Google Domains), you can add these records yourself.
SPF: Sender Policy Framework
SPF is a DNS TXT record that lists every server authorized to send email on behalf of your domain. When a receiving server gets an email from your domain, it checks SPF to see if the sending server's IP address is on the approved list.
What to do: Log into your DNS provider. Look for an existing TXT record that starts with v=spf1. If one exists, make sure it includes the servers for every service that sends email as your domain — your email host, your newsletter platform, your CRM. If none exists, create one. A typical SPF record looks like this:
v=spf1 include:_spf.google.com include:sendgrid.net ~all
The include: entries reference the SPF records of services you use. The ~all at the end tells receiving servers to treat any unlisted sender as suspicious (soft fail). You can also use -all for a hard fail, which is stricter.
Common mistake: Having multiple SPF records. You are only allowed one SPF TXT record per domain. If you add a second one instead of merging into the first, both become invalid. This single error breaks deliverability for a surprising number of small businesses.
DKIM: DomainKeys Identified Mail
DKIM adds a cryptographic signature to every outgoing email. The receiving server uses a public key published in your DNS to verify that the email was not altered in transit and was genuinely sent by an authorized system.
What to do: Most email platforms (Mailchimp, ConvertKit, ActiveCampaign, Google Workspace) generate DKIM keys for you. The process typically involves going into your platform's authentication settings, copying one or two CNAME or TXT records, and pasting them into your DNS. The platform's documentation will walk you through it step by step.
Common mistake: Setting up DKIM for your newsletter platform but not for your regular business email (or vice versa). Every service that sends as your domain needs its own DKIM configuration.
DMARC: Domain-Based Message Authentication, Reporting, and Conformance
DMARC ties SPF and DKIM together and tells receiving servers what to do when an email fails both checks. It also gives you reporting — actual data on who is sending email as your domain and whether those emails are passing authentication.
What to do: Add a TXT record for _dmarc.yourdomain.com with a value like:
v=DMARC1; p=none; rua=mailto:[email protected]
Start with p=none, which monitors without blocking. This lets you receive aggregate reports (sent to the rua address) showing which servers are sending as your domain and whether they pass SPF and DKIM. After a few weeks of reviewing reports and confirming legitimate senders are authenticated, move to p=quarantine (send failures to spam) and eventually p=reject (block failures entirely).
Common mistake: Jumping straight to p=reject without monitoring first. If you have a forgotten service sending as your domain — an old CRM, a transactional email system, a form notification — reject mode will silently kill those emails. The monitoring phase is not optional.
How to Verify Your Setup
Once your records are in place, use free tools like MXToolbox, Mail Tester, or Google's Check MX to verify that SPF, DKIM, and DMARC are all passing. Send a test email to a Gmail address and click the three dots next to the message, then "Show original." You will see SPF, DKIM, and DMARC results listed as PASS or FAIL right in the headers.
Beyond Authentication: Sending Practices That Improve Email Open Rates
Authentication gets your emails past the front door. Sending practices determine whether inbox providers keep letting you in over time.
Warm Up New Domains and IP Addresses
If you are sending from a new domain or switching email platforms, do not blast your full list on day one. Start with your most engaged subscribers — people who have opened or clicked recently — and gradually increase volume over two to four weeks. This builds a positive reputation signal before you scale.
Clean Your List Regularly
Every email that bounces hurts your sender reputation. Remove hard bounces immediately. For subscribers who have not opened in six months, run a re-engagement campaign. If they still do not respond, remove them. A smaller, engaged list outperforms a large, disengaged one every time. This is one of the most direct ways to improve email open rates without touching your content at all.
Make Unsubscribing Easy
This feels counterintuitive, but a visible, one-click unsubscribe link reduces spam complaints. When someone cannot find the unsubscribe button, they hit "Report Spam" instead. That spam report damages your sender reputation far more than losing one subscriber ever could.
Use a Consistent Sending Address and Schedule
Inbox providers track patterns. An address that sends once a month and then suddenly fires off five emails in a week looks suspicious. Pick a cadence — weekly, biweekly — and stick with it. Use the same "from" address consistently so recipients recognize you and inbox filters build a pattern of trust.
Avoid Free Email Addresses for Business Sending
Sending your newsletter from a @gmail.com or @yahoo.com address is a deliverability problem waiting to happen. These providers have strict DMARC policies that can cause your emails to fail authentication when sent through a third-party platform. Use your own domain. It looks more professional and gives you full control over your authentication records.
The Real Trade-Off: Time Spent Fixing Deliverability vs. Time Spent Creating Content Nobody Sees
Most small business owners spend hours per week on email content and zero hours on deliverability infrastructure. The math does not hold. If 40 percent of your emails never reach an inbox, you are effectively writing content for less than two-thirds of your list. Every hour invested in authentication setup and list hygiene multiplies the impact of every future hour spent on content.
Setting up SPF, DKIM, and DMARC correctly is a one-time effort — maybe two hours of focused work, including reading your email platform's documentation. List hygiene takes 30 minutes a month. These are not ongoing engineering projects. They are foundational investments that keep producing results long after the initial setup.
When to Bring in Help
The authentication steps above are genuinely accessible to a non-technical business owner willing to follow documentation carefully. But there are scenarios where having an experienced partner makes the difference between a clean setup and weeks of troubleshooting:
- Multiple sending services: If you have a CRM, a newsletter platform, a transactional email system, and a helpdesk all sending as your domain, getting SPF, DKIM, and DMARC aligned across all of them requires careful coordination.
- Domain reputation recovery: If your domain has already been flagged or blacklisted, the recovery process involves more than adding DNS records. It requires a structured warm-up plan, list audit, and sometimes migration to a new sending subdomain.
- Integrated brand and email strategy: Authentication is the foundation. But the emails themselves — the voice, the content strategy, the opt-in flows, the welcome sequences — are what turn deliverability into actual business growth. The technical setup and the brand strategy work best when they are designed together, not bolted together after the fact.
This is the kind of integrated work we do at FigTree Development. We approach email as part of a broader brand growth strategy — building the identity, the messaging framework, and the content plan alongside the technical infrastructure that makes it all reach the people it is meant for. As a Florida-licensed firm based in the Tampa Bay area, we work with local and remote clients who need their brand foundations built right the first time.
Related service: Marketing and brand growth services in Tampa Bay — what we build, how we work, and what it costs.
Your Brand Deserves to Be Seen
A strong brand voice does not matter if your emails never arrive. A beautiful welcome sequence does not convert if it lands in a spam folder. The soil work — the authentication records, the list hygiene, the sending discipline — is what lets everything you build on top actually flourish.
If you are not sure where your deliverability stands, or if you are ready to build an email strategy that is rooted in both technical rigor and a clear brand identity, we would be glad to talk it through. Book a free 20-minute discovery call with us at FigTree Development, and we will help you figure out what needs to happen first — no pressure, no pitch, just an honest look at where you are and what would actually move the needle.