How to avoid spam folder placement: 12 causes and fixes

Most advice about how to avoid spam folder placement starts with a list of forbidden words. That’s the least important thing on the list. Spam placement is decided mostly by who is sending, what their list looks like, and how recipients have reacted to earlier mail from that sender. A perfectly neutral sentence sent from a domain with no authentication and a list full of dead addresses will land in spam. An ordinary sales email from a clean domain with an engaged list usually won’t.

So this guide is organized around causes, not around copywriting tricks. There are twelve common ones. They fall into four groups: the sender’s identity, the quality of the list, how recipients engage, and what the message contains. Each cause comes with the specific check that reveals it and the fix that usually works. I’ll also give you the order to check them in, because the early causes can hide the later ones.

How filters actually decide

It helps to know what a filter is weighing. A mailbox provider evaluates four things when a message arrives. It looks at the sender: the domain, the sending IP and whether the mail is authenticated. It looks at the recipient’s history with that sender: whether people have replied, moved the mail to the inbox, or reported it. It looks at the message: its links, images, structure and wording. And it looks at the list behavior behind the send: how many addresses bounced, whether any were spam traps, and how fast the volume changed.

No single factor decides placement. The filter combines them into a judgment about how likely this message is to be unwanted. That’s why a single fix sometimes changes nothing. If authentication is fine but the list is full of spam traps, the filter still has a strong reason to distrust the mail.

Sender-side causes of spam folder placement

1. Authentication is missing or misaligned. SPF, DKIM and DMARC are the identity checks. A common failure is that SPF passes for a sending service but the DKIM signature is on a different domain than the one in the From header, so DMARC fails even though both individual checks look fine. The check is simple. In Gmail, open a message you sent and choose “Show original.” The authentication results are listed near the top. Every check should pass, and the domain in the From header should match the domain doing the signing. The fix is to set up DKIM on the sending domain itself and confirm alignment before sending anything else.

2. The domain is new and the volume is not. A brand-new domain that sends two hundred messages on day one has no history and a sudden burst. Both things look bad. The check is your send log: compare daily volume against the start date. The fix is a warmup ramp, which we describe in our warmup explainer. Hold each step until the numbers are flat before you step up.

3. The sending domain or IP is on a blocklist. Blocklists are the most damaging causes because they affect everything at once. Spamhaus runs the Domain Block List and the Zen IP list, and several other operators publish lists that providers consult. The check is a lookup of your sending domain and sending IP on the major lists, which takes a few minutes. The fix depends on the listing. Some lists delist automatically after a period with clean sending, and others require a removal request that explains what was fixed. If you’re sharing an IP, remember that a listing can be caused by someone else on it.

4. You are sending from your primary domain. If your company’s main domain carries invoices, support mail and sales replies, a cold campaign that draws complaints can drag all of that toward spam. The check is simple: are your cold emails and your transactional mail on the same domain? If they are, the blast radius is your whole business. The fix is a dedicated secondary domain, which we cover in why you should send from secondary domains.

List-side causes

5. Invalid addresses are producing hard bounces. A hard bounce means the address doesn’t exist or the domain doesn’t accept mail. Each one is a negative signal, and a rising hard bounce rate tells a filter that the sender isn’t checking its own data. The check is your bounce report, split by hard and soft. Most senders treat a hard bounce rate above about 2 percent as a red line, and some providers start throttling senders well before that. The fix is verification before send: check syntax, confirm the domain has mail servers, and run a mailbox-level check where you can. Then remove every hard bounce from the list immediately, not at the end of the campaign.

6. Spam traps are on the list. A spam trap is an address that exists to catch senders who don’t maintain their lists. There are two main kinds. Recycled traps are old addresses that were abandoned and then reactivated as traps. Pristine traps are addresses that were never used by a person and were published or planted to catch scrapers. Hitting a trap is serious because it signals that the list was assembled or kept carelessly. The check is harder, since trap hits often show up only as silent deliverability problems. Watch for sudden drops in placement at one provider without a matching change in complaints. The fix is to stop mailing old, unengaged addresses, sunset anything that hasn’t engaged in a long period, and avoid appending purchased lists to your working list.

7. Catch-all domains and role addresses are mixed in. A catch-all domain accepts mail for any address, real or not, so a verification check on it returns “accepted” even when the person doesn’t exist. Role addresses such as info@, sales@ and support@ are not people, rarely reply, and are sometimes the addresses that trap operators use. The check is to flag catch-all and role addresses in your list. The fix is to send to them at lower volume, separately, and with a different expectation, or to drop them.

8. The list mixes unrelated personas and segments. A list assembled from broad keyword scrapes will contain people who have no reason to care about your message. They don’t reply, they don’t open, and some of them report the mail as spam because it’s irrelevant to them. The check is to segment your replies and complaints by source and job title. If one source produces most of the complaints, you have your answer. The fix is tighter targeting at the source, which we discuss in our guide to building a clean lead list.

Engagement-side causes

9. Complaints are above a safe threshold. A spam complaint is the most direct negative signal a recipient can send. Google’s bulk-sender guidance asks senders to keep the user-reported spam rate under 0.3 percent and recommends staying below 0.1 percent. Those are Google’s numbers, but the logic applies everywhere. The check is your complaint rate by segment and by day, since aggregate numbers can hide a bad segment. The fix is usually one of three things: make unsubscribing obvious and immediate, make the message more relevant to the recipient, or stop following up with people who haven’t engaged. Complaints tend to come from people who feel surprised, not from people who are annoyed by a good message.

10. Nobody engages with your mail. Mail providers use recipient behavior as a strong positive signal. When people reply, star, or move your mail out of spam, the sender looks trustworthy. When nobody does anything with it, the sender drifts toward the spam folder, even if nobody complains. The check is your reply rate and the share of messages that go to the inbox in placement tests. The fix is to send fewer, better messages, make the ask easy to answer, and keep warmup running at a low level while you rebuild engagement.

Content and link causes

11. Links and tracking domains carry bad reputations. Filters evaluate the domains inside your message as well as the sender’s domain. A tracking domain that is shared with spammers, a URL shortener, or a landing page on a freshly registered domain can drag placement down even when the sending domain is clean. The check is to look up every domain in the email body, including tracking domains, and run them through the same blocklist checks you used for the sender. The fix is to use a clean, dedicated tracking domain where you need tracking at all, and to link to a page on your main domain rather than to an unfamiliar one.

12. The format looks like bulk mail. Heavy HTML templates, large images, multiple links and identical bodies sent to hundreds of people all look like marketing. A plain-text email from a person to a person is the most natural format for cold outreach, and it is also the one filters trust most. The check is to read the message source and count images, links and template markup. Some senders send one image-only email, which filters can read as a stripped-down spam message. The fix is to reduce the format to plain text, keep to one link at most, and vary the body enough that messages aren’t identical across recipients. Variables should carry real information, which we cover in our piece on personalization at scale.

Diagnose in the right order to avoid spam folder placement

These twelve causes are not equally urgent, and a few of them hide the others. If authentication fails, nothing else you check matters much, because the provider has no reason to believe the sender is who it claims to be. If the domain is on a blocklist, placement will be poor no matter what the list looks like. So the diagnostic order matters. Work from the outside in if you want to avoid spam folder placement for good.

Work through the stages in order and stop at the first real failure. Fix it, send a small test, and check placement again before you move on. Changing three things at once makes the result impossible to read.

What not to trust

Spam word checkers are the most overrated tool in this space. They look for phrases such as “free” or “guarantee,” and they can flag a clean email that happens to use an ordinary word. They measure the least important cause on the list. A checker that says your copy is fine tells you nothing about whether your domain is authenticated or your list is full of traps.

Open rates are the other trap. Since Apple’s Mail Privacy Protection and Gmail’s image proxy began loading tracking pixels on the sender’s behalf, open rates have registered opens that no human made. An open-rate drop can be a placement problem, but it can also be a change in how those proxies behave. Use reply rate, complaint rate and bounce rate as your diagnostic signals, and treat opens as a rough, unreliable hint.

Wrap-up

Most spam folder problems are not mysterious, and the fastest way to avoid them is to check in order. They’re authentication gaps, list hygiene problems, complaints that nobody watched, or a domain that was doing too much. The useful habit is to check them in order and to measure what providers actually report, not what a tool scores for your copy. Authenticate first, separate your cold sending from your primary domain, verify and sunset your list, watch complaints by segment, and keep the message plain and personal.

If you want those checks running without a spreadsheet, OutboundLeadPro includes a free Smart check on every email, DNS auto-fix for SPF, DKIM and DMARC, and unlimited mailboxes with warmup. You can see what each of those does on the features page, and the broader picture of inbox placement is in our deliverability checklist.

Keep reading

Playbook

Cold Email A/B Testing: Why Most Tests Prove Nothing

Cold email A/B testing is often too small to mean anything. Here is the sample-size math at real reply rates, and how to read the results.

Daniel Khoury September 19, 20263 min read

Playbook

How to build a lead list that stays clean after the first send

Build a lead list around a real ICP, with stage gates that reject bad rows before they cause bounces and complaints. Includes a worked example.

Daniel Khoury October 7, 20263 min read

Playbook

The cold email call to action that books more calls

The cold email call to action decides whether a reply becomes a meeting. Learn the commitment ladder, what to ask for, and before-and-after rewrites.

Daniel Khoury October 11, 20263 min read

Explainer

SPF, DKIM and DMARC explained for cold email

The three email authentication records decide whether you reach the inbox — and most cold outreach fails because one is missing or wrong. Here's each one in plain English.

The OutboundLeadPro Team October 11, 20262 min read