Email Deliverability Checklist for Small Business: The Complete 2026 Guide

An email deliverability checklist for small business covers four areas: authenticating your domain with SPF, DKIM, and DMARC, keeping your list clean, protecting your sender reputation, and writing content that will not trip spam filters. Get those four right and your inbox placement rate should climb toward 95% or higher, well above the roughly 83% average deliverability that EmailToolTester found across marketing email worldwide. This guide turns each area into a checklist you can run before your next send, plus the specific mistakes that quietly push good campaigns into the spam folder. None of it requires a developer or a big budget, just an hour or two of DNS and inbox settings work, plus a habit of checking the numbers afterward.

Key takeaways

• Email deliverability checklist for small business starts with SPF, DKIM, and DMARC. Google and Yahoo have required all three for bulk senders since February 2024.
• EmailToolTester found the average marketing email only reaches about 83% deliverability worldwide, with close to 1 in 10 landing in spam.
• A deliverability rate of 95% or higher counts as strong. Below 90% means something on this checklist needs attention.
• Sender reputation, not just technical setup, decides inbox placement rate. Bounce rate, spam complaint rate, and engagement all feed into it.
• Infobip's deliverability guidance puts a healthy bounce rate at 2% to 3% or lower and spam complaints under 0.2%.
• Google Postmaster Tools is free and shows your domain's spam rate and reputation directly from Gmail's side.

What is email deliverability?

Email deliverability is the share of emails you send that actually reach a recipient's inbox, rather than the spam folder, a blocked send, or no delivery at all. It is a stricter measure than delivery rate, which only tracks whether a receiving mail server accepted your message. A message can be delivered and still land in spam, so tracking deliverability specifically, not just delivery, is what tells you whether people are actually seeing what you send.

Three separate signals decide deliverability for any single message: whether your domain passes authentication (SPF, DKIM, DMARC), whether your sending history looks trustworthy to that particular mailbox provider (your sender reputation), and whether the content of the email itself trips a spam filter. A weakness in any one of the three can sink a message that is fine on the other two, which is why a deliverability checklist has to cover all three rather than just fixing your DNS records and calling it done.

What is a good email deliverability rate for a small business?

A deliverability rate of 95% or higher is considered strong, and 90% to 94% is workable but worth watching, according to EmailToolTester's deliverability benchmarks. The same research found that the average marketing email only reaches about 83% deliverability worldwide, with roughly 10.5% landing in spam and another 6.4% never arriving at all. If your numbers sit in that average range or lower, treat the checklist below as a diagnostic, not just a launch-day formality.

Deliverability rate and inbox placement rate get used almost interchangeably, but inbox placement rate is the more precise term: it measures the percentage of accepted mail that lands specifically in the primary inbox rather than a spam or promotions folder. You can check your own rate with your email service provider's reporting, or with a free calculator like Rankite's email deliverability rate calculator if you already know your sent, bounced, and delivered counts.

The email deliverability checklist for small business: 4 pillars

Every deliverability problem traces back to one of four areas: authentication, list hygiene, sender reputation, or content. Work through them roughly in that order. A clean list and a warmed-up reputation cannot overcome a missing DMARC record, and a technically perfect DNS setup cannot save a list full of spam traps and disengaged addresses.

How do you set up SPF, DKIM, and DMARC?

You add three DNS TXT records to your sending domain: an SPF record listing which servers may send on your behalf, a DKIM record that signs each message so receivers can verify it was not altered, and a DMARC record that tells mailbox providers what to do when a message fails those checks. Most email service providers generate the exact record values for you, and Rankite's own free SPF record generator and DMARC record generator can produce the syntax if your provider does not.

A few technical details are worth getting right. SPF records are limited to 10 DNS lookups under the SPF specification (RFC 7208), so stacking too many third-party senders (your CRM, your invoicing tool, your marketing platform) into one SPF record can silently break it. DKIM should use a 2048-bit key rather than the older 1024-bit default, per current DKIM signing guidance. DMARC should start at a monitoring policy of p=none so you can review reports without risking legitimate mail, then move to p=quarantine and eventually p=reject once you have confirmed every legitimate sending source passes.

Google's bulk sender guidelines, in effect since February 2024, made all three records mandatory for any domain sending 5,000 or more messages a day to Gmail addresses, and Yahoo enforces matching requirements on the same timeline. Below that volume the records are not legally required, but mailbox providers still use them as the baseline signal that a message is legitimate, so a small business skipping them is starting every campaign at a disadvantage.

How do you keep your email list clean and avoid spam traps?

A spam trap is an email address that exists specifically to catch senders with poor list hygiene. A pristine trap has never belonged to a real person and was never signed up voluntarily, so hitting one proves you are buying, scraping, or otherwise acquiring addresses without consent. A recycled trap used to be a real inbox that was abandoned and later reactivated by the mailbox provider, so hitting one means your list is stale and you never noticed the address went dead.

• Never buy or scrape a list. Every address should come from an explicit opt-in, whether that is a signup form, a checkout box, or a stated agreement to receive email.
• Remove hard bounces immediately. A hard bounce means the address does not exist. Continuing to send to it after one bounce is one of the fastest ways to trigger a spam trap hit.
• Keep bounce rate under 2% to 3%. Infobip's deliverability guidance treats this range as the healthy threshold; higher than that and mailbox providers start throttling or filtering your mail.
• Prune disengaged contacts on a schedule. Subscribers who have not opened or clicked in six months or longer drag down your engagement rate, which mailbox providers weigh when deciding where to route your next send.
• Use double opt-in for new signups where it fits your audience. Confirming the address is real and wanted before you start sending catches typos and bot signups before they ever reach your list.

How do you build and protect sender reputation?

Sender reputation is the trust score a mailbox provider assigns to your sending domain and IP address, based on your sending history rather than any single message. It is rebuilt or damaged with every send, which is why a new domain or a sudden change in behavior gets treated with more suspicion than an established, steady sender.

1. Warm up new domains and IPs gradually. Most deliverability guidance recommends six to eight weeks, starting with small volumes to your most engaged contacts and increasing gradually, per Infobip's deliverability guidance.
2. Keep sending volume consistent. A domain that sends 500 emails a day and suddenly sends 50,000 looks like it may have been compromised, and mailbox providers respond by filtering more aggressively.
3. Separate marketing and transactional mail. Sending both from the same subdomain means a spike in one type of mail (a promotional blast) can drag down the reputation of the other (password resets and receipts).
4. Watch your spam complaint rate, not just your complaint count. Google's guidelines flag a complaint rate of 0.3% or higher, measured in Google Postmaster Tools, as a risk threshold worth acting on immediately.
5. Make unsubscribing easy. A visible, one-click unsubscribe link reduces spam complaints, since a frustrated recipient who can leave easily is less likely to click "report spam" instead.

What email content triggers spam filters?

Spam filters weigh a mix of formatting and wording signals: a heavy image-to-text ratio, broken or overly complex HTML, ALL-CAPS subject lines, misleading sender names, and a missing or hard-to-find unsubscribe link all raise a message's spam score. None of these triggers alone will guarantee the spam folder, but they stack, so a message with three or four of them at once is far more likely to get filtered than one with none.

• Include a visible unsubscribe link. It is required under CAN-SPAM, and similar laws like GDPR and CASL set comparable expectations elsewhere.
• Balance images and text. An email that is a single large image with almost no text reads as suspicious to most filters, since it is a common tactic for hiding spam content from text-based scanning.
• Keep HTML clean and simple. Use inline styles rather than external stylesheets, and keep total message size well under 100 KB, since Gmail clips messages around 102 KB and a clipped message can hide your unsubscribe link entirely.
• Avoid known spam trigger phrases. Words and phrases like "act now," "100% free," or excessive dollar signs and exclamation points still raise a message's spam score. Rankite's free spam trigger word checker scans your draft copy before you hit send.
• Send a plain-text version alongside HTML. Most email service providers do this automatically, but confirm it if you are sending through custom code.

The complete email deliverability checklist

Use this table as a pre-send and quarterly review checklist. Run the technical rows once per domain and the ongoing rows on ideally a monthly cadence.

How do you monitor deliverability after you launch a campaign?

Set up Google Postmaster Tools for any domain sending meaningful volume to Gmail addresses, since it reports your domain reputation, IP reputation, spam rate, and authentication pass rate directly from Google's side at no cost. Pair it with your email service provider's own bounce and complaint reports, and check both on a set schedule rather than only after a problem shows up in your open rates.

A short monthly routine catches most issues while they are still small: confirm your SPF, DKIM, and DMARC are still passing (a DNS change elsewhere in your business can silently break one of them), check your bounce and complaint rates against the targets above, and review your list growth to make sure new signups are still coming from genuine opt-ins rather than a form that started attracting bots. If you already send from a CRM-connected workflow, our CRM and email marketing guide covers how to keep that data clean at the source, and our email marketing KPIs guide covers the broader set of numbers worth tracking alongside deliverability.

Common mistakes that hurt email deliverability

• Sending from a brand new domain at full volume. Skipping warmup is one of the fastest ways to get filtered, even with perfect SPF, DKIM, and DMARC.
• Ignoring bounce processing. Letting an email service provider handle it silently is fine, but not knowing your bounce rate at all means you will not catch a growing problem until it is already hurting every send.
• Treating DMARC as a checkbox. Publishing a record and leaving it at p=none forever means you get visibility into failures but never actually stop them.
• Mixing marketing and transactional mail on one subdomain. A promotional campaign that triggers complaints can drag down the deliverability of your password reset emails too.
• Buying or renting an email list. It is the single most reliable way to hit spam traps and tank sender reputation, regardless of how good the rest of your checklist looks.
• Never checking Google Postmaster Tools. It is free and it is often the first place a reputation problem shows up, well before it is visible in your campaign open rates.

Frequently asked questions

What is email deliverability for a small business? Email deliverability is the share of emails you send that actually reach a recipient's inbox, rather than the spam folder, a blocked send, or no delivery at all. It is a stricter measure than delivery rate, which only tracks whether a receiving mail server accepted your message. A message can be delivered and still land in spam, so tracking deliverability specifically is what tells you whether people are actually seeing your emails.

What is a good email deliverability rate? A deliverability rate of 95% or higher is considered strong, and 90% to 94% is workable but worth watching, according to EmailToolTester's deliverability benchmarks. The same research found the average marketing email only reaches about 83% deliverability worldwide, with roughly 10.5% landing in spam and another 6.4% never arriving at all. If your rate sits at or below that average, work through the checklist rather than sending a larger volume of email.

Do small businesses really need SPF, DKIM, and DMARC? Yes. Google's bulk sender guidelines, in effect since February 2024, require SPF, DKIM, and DMARC for any domain sending 5,000 or more messages a day to Gmail addresses, and Yahoo enforces matching rules on the same timeline. Even below that volume, mailbox providers use these three records as the baseline signal that a message is legitimate, so skipping them makes every email you send look less trustworthy by default.

How long does it take to warm up a new sending domain? Most deliverability guidance puts domain and IP warmup at six to eight weeks, depending on planned volume, per Infobip's deliverability guidance. Warmup means starting with small daily sends to your most engaged contacts and increasing gradually, rather than emailing your full list on day one from a brand new domain.

How often should I clean my email list? Review your list at least once a quarter, remove hard bounces immediately after every send, and prune subscribers who have not opened or clicked in six months or longer. A smaller, engaged list consistently outperforms a larger, stale one because mailbox providers weigh engagement heavily when deciding where to route your next message.

Can one spam complaint really hurt my sender reputation? A single complaint will not sink your domain, but Google's guidelines flag a spam complaint rate of 0.3% or higher, measured in Google Postmaster Tools, as a risk threshold. Complaint rate matters more than raw complaint count, so a small list that generates a few complaints can suffer more than a large, well-targeted one that generates more complaints in absolute terms.

What free tools can I use to check email deliverability? Google Postmaster Tools shows your domain and IP reputation, spam rate, and authentication results for mail sent to Gmail addresses at no cost. Mail-tester.com and MXToolbox check your SPF, DKIM, and DMARC setup in under a minute, which is enough to catch most configuration mistakes before a campaign goes out.

How do I know if my emails are landing in spam instead of the inbox? Watch your engagement data: a sudden drop in opens and clicks across your list, without any change in your content, usually means inbox placement fell. Google Postmaster Tools also flags a rising spam rate directly, which is the clearest early warning for domains sending meaningful volume to Gmail addresses.

Do small businesses need a dedicated sending IP address? No, not usually. Most small businesses send low enough volume that a shared IP through a reputable email service provider performs better, since the provider already has an established reputation it monitors across many senders. Dedicated IPs make more sense once you are sending well over 100,000 emails a month and want direct control over warmup and reputation.

What to do next

Start with the technical rows in the checklist table: confirm SPF, DKIM, and DMARC are all published and passing, since nothing else on this list matters if a mailbox provider cannot verify your domain in the first place. From there, set up Google Postmaster Tools, prune your list on a quarterly schedule, and check your spam trigger words with our spam trigger word checker and CAN-SPAM compliance checker before your next send. If deliverability keeps slipping despite a clean checklist, the problem is usually a content or list hygiene issue further upstream, and our email marketing agency team can audit the full setup and fix what is actually costing you inbox placement.