This guide assumes sender reputation is already deployed and passing. It covers what breaks at scale and how mature teams operate it.
Edge cases that break a working setup#
- Buying or scraping lists, which seed spam traps into your database.
- Blasting an entire list after months of silence.
- Ignoring Postmaster Tools until placement has already collapsed.
- Mail forwarded through mailing lists or personal forwarders, which alters headers and content.
- Acquisitions and rebrands that introduce domains nobody audited.
- Vendors silently changing their sending infrastructure.
Operating it as infrastructure#
- Assign an owner for each sending domain and each vendor relationship.
- Put DNS records under version control or a change-review process.
- Alert on authentication pass rate drops and reputation changes, not just outages.
- Run a quarterly audit against the setup steps below.
- Document runbooks for the three most common failures.
Reference: the baseline setup#
- Register in Google Postmaster Tools and Microsoft SNDS to see your domain and IP reputation directly.
- Keep spam complaints below 0.1% (Gmail's threshold is 0.3% for enforcement) and hard bounces below 2%.
- Segment by engagement and stop sending to contacts inactive for 90+ days.
- Authenticate with SPF, DKIM, and DMARC so reputation accrues to your domain rather than a shared IP.
- Ramp volume gradually after any pause longer than two weeks.
Frequently asked questions#
Domain reputation vs IP reputation: which matters more?
Domain reputation now dominates at Gmail and Yahoo. IP still matters for Microsoft and for dedicated-IP senders.
How long does it take to repair a bad reputation?
Four to eight weeks of clean, low-volume sending to engaged recipients is typical.