Most people find out their email list is unhealthy at the worst possible moment. Revenue from email drops. Someone checks the dashboard. Open rates look roughly normal, the list is bigger than it was last quarter, nothing obviously broke. The campaign went out. It just did not arrive.
That gap between "sent" and "arrived" is where email programs quietly die, and it has gotten significantly less forgiving. For years the worst case for a sloppy sender was the spam folder. That is no longer true. Mail that fails the current checks can be refused at the receiving server and never reach any folder at all.
This post covers what actually changed, the six diagnostic numbers that tell you whether your list is healthy, why open rate stopped being trustworthy, and the maintenance work that protects sender reputation. I have run email programs at serious volume for publishers and consumer subscription businesses, and almost every deliverability problem I have been called in to fix traced back to the same two causes: an unclean list and a sending habit nobody questioned.
What changed, and why it matters more than it used to
The short version: the three providers that cover the overwhelming majority of inboxes moved from recommending standards to enforcing them, and the penalty escalated from filtering to rejection.
From guidance to hard enforcement
The gap between doing this properly and not is now measurable and large.
Compliant senders land in the inbox roughly 89 percent of the time. Non-compliant senders see spam placement jump from a typical baseline of 5 to 10 percent up to 22 to 34 percent, which is a three to sevenfold penalty on the same content sent to the same people.
Crossing the 5,000 per day threshold even once can classify your domain as a bulk sender going forward. Reducing your volume afterwards does not reverse it. A single unusually large campaign can permanently change the standard you are held to, so it is worth being compliant before you need to be rather than after.
The six numbers that tell you if your list is healthy
List health is not one metric. It is a small set of numbers that, read together, tell you whether the people on your list want your email and whether the mailbox providers believe it.
Spam complaint rate
The most consequential number in the whole program. It measures the share of recipients who mark your message as spam. Everything else is recoverable. This one has structural consequences.
The stated ceiling is 0.30 percent, but treating that as a target is a mistake. Crossing it makes your domain ineligible for Gmail's delivery mitigation support, and it stays ineligible until the rate holds below the threshold for seven consecutive days. Meanwhile the reputation damage compounds.
Hard bounce rate
Hard bounces are permanent failures: the address does not exist. A rising hard bounce rate means your list contains addresses that were mistyped, harvested, purchased, or have simply aged out. Mailbox providers read a high bounce rate as evidence that you are not maintaining your list, which is exactly what it is.
Unsubscribe rate
Counterintuitively, a healthy unsubscribe rate is a good sign. It means people who no longer want your email are leaving through the front door instead of hitting the spam button. An unsubscribe costs you a subscriber. A complaint costs you reputation.
Watch the ratio between the two. If complaints are rising while unsubscribes stay flat, your unsubscribe path is too hard to find and you are pushing people toward the spam button.
Click rate (not open rate)
Click rate is the most honest engagement signal you have access to. It requires a deliberate action that cannot be triggered by an automated privacy proxy, and it correlates far better with revenue than opens do.
Track click rate against your own historical baseline rather than an industry average. The direction of travel over three to six months matters more than the absolute number.
Share of unengaged subscribers
What percentage of your list has not clicked anything in the last 90, 180, and 365 days? Most people have never run this query, and the answer is usually uncomfortable.
This is the number that predicts future deliverability problems better than any current metric, because unengaged subscribers drag down aggregate engagement signals and eventually turn into spam traps.
Growth net of churn
Compare new subscribers against unsubscribes, bounces, and subscribers who went dormant in the same period. A list that grows on paper while engagement falls is not growing. It is accumulating.
The version of this number that actually matters is revenue per subscriber. A list half the size producing more revenue is a better list, and that is not a consolation prize framing. It is the goal.
Not sure where your list actually stands? The free audit reviews your email program: deliverability setup, list health metrics, cadence, and where revenue is leaking.
Request audit →Why open rate stopped telling you the truth
Open rate has been the default email metric for two decades, and it is now the least reliable number on the dashboard.
Apple Mail Privacy Protection pre-loads tracking pixels for Apple Mail users whether or not the message was actually opened. Industry analysis suggests roughly half of all reported opens are now inflated by this behaviour. Your open rate is partly a measure of how many of your subscribers use Apple Mail.
This does not make the metric worthless. Directionally, a sudden collapse in opens still signals a delivery problem. But as a headline engagement number, or as the basis for segmenting engaged from unengaged subscribers, it is no longer trustworthy. Segment on clicks, not opens. If your re-engagement logic is built on open behaviour, you are almost certainly mislabelling a large group of subscribers.
This is the same pattern I wrote about in the vanity metrics post: a number that is easy to measure and comfortable to report, gradually decoupled from the thing it was supposed to represent.
“Your open rate is partly a measure of how many of your subscribers use Apple Mail. Segment on clicks.”
The technical floor you cannot skip
Authentication is the part most marketers avoid because it lives in DNS records rather than in the email platform. It is also the highest-impact single thing you can fix, and it is a one-time job.
| Requirement | What it does | Status |
|---|---|---|
| SPF | Declares which servers are allowed to send on behalf of your domain | Required |
| DKIM | Cryptographically signs your mail so receivers can verify it was not altered | Required |
| DMARC | Tells receivers what to do when SPF or DKIM fails, and sends you reports | Required |
| One-click unsubscribe | The RFC 8058 header that lets the mail client show a native unsubscribe button | Required |
| Aligned From domain | Your visible From domain must align with SPF or DKIM | Required |
| BIMI | Displays your brand logo next to the sender name, needs DMARC at enforcement | Optional |
The two things people get wrong here
First: the unsubscribe footer link is not the requirement. This is the single most commonly missed item. Teams add a visible unsubscribe link in the footer, assume they are compliant, and omit the actual List-Unsubscribe header that mail clients check for. The footer link is for humans. The header is what makes Gmail display its own native unsubscribe button. You need both, and only one of them is the technical requirement.
Second: publishing a DMARC record is not the same as enforcing one. Most domains that have DMARC have it set to monitoring only, which satisfies the letter of the requirement while providing no actual protection against spoofing. Providers are increasingly sceptical of domains that sit on monitoring indefinitely rather than progressing toward quarantine or reject. Start at monitoring, read the reports, and move up.
The part nobody tells you: authentication is necessary and not sufficient. Fully authenticated mail can still land in spam at meaningful rates. Authentication proves who you are. What happens next depends entirely on whether people engage with your email. You cannot configure your way out of sending mail nobody wants.
The maintenance work that protects everything else
Here is the part I care most about, because it is the least glamorous and the highest leverage.
On one publisher program I worked on, the team was sending a minimum of three emails per day. Open rate sat at 18 percent and was drifting down. Unsubscribes climbed every month. The instinct in the room was to send more, because revenue per send was falling and volume felt like the lever.
We did the opposite. Cadence dropped to a maximum of two per day, and on plenty of days just one. Every email had to have a specific purpose and a call to action with intent behind it. No filler sends.
Then we built the piece that mattered most: a sunset flow. Any subscriber who had not engaged in six months moved into a final re-engagement sequence. If they did not respond to that either, they were suspended. Not deleted, suspended, so we kept the record without continuing to mail into a void.
The list shrank on paper. Every meaningful number improved. Open rate moved from 18 to 22 percent, sender reputation recovered, spam complaints dropped, and the whole program stopped fighting itself. That work was the foundation underneath a broader retention project that took customer lifetime value from €29 to €90, which I covered in the full case study here.
How to build a sunset flow
- Define unengaged, using clicks. No click in 180 days is a reasonable default. Adjust to your purchase cycle: a business selling annually should be more patient than a weekly newsletter.
- Send a short re-engagement sequence. Two or three emails, spaced out, asking directly whether they still want to hear from you. Make the value explicit and the opt-out easy.
- Give a genuine last call. One final message that clearly states this is the last one unless they act. Plain, honest, no manipulation. It performs better than clever framing.
- Suspend the non-responders. Move them out of the active sending list. Keep the record for reporting and for potential reactivation through other channels.
- Run it continuously, not once. A sunset flow is a permanent piece of infrastructure, not a spring cleaning. Set it to evaluate on a rolling basis so the list stays clean without anyone remembering to intervene.
Removing subscribers feels like losing something because list size has been a headline number for so long. It is not. You are not deleting revenue, you are deleting people who were never going to produce revenue and were actively costing you inbox placement with everyone who would.
Judge the change on revenue per subscriber and on engaged subscriber count. On both measures, a good sunset flow makes the list better immediately.
Six mistakes that wreck deliverability
Buying or scraping a list
Purchased lists contain spam traps by design. A single trap hit can damage domain reputation for months. There is no version of this that works.
Mailing everyone, every time
Blasting the full list including the dormant half drags aggregate engagement down and tells providers your mail is unwanted.
Hiding the unsubscribe
Making people hunt for the exit converts unsubscribes into complaints. You traded a harmless action for a damaging one.
Sending from a brand new domain at volume
New domains have no reputation. Ramp gradually over several weeks, starting with your most engaged segment.
Mixing transactional and marketing mail on one subdomain
A marketing complaint spike should not put receipts and password resets at risk. Separate the sending domains.
Never looking at Postmaster Tools
Google publishes your domain reputation and spam rate for free. Most senders have never opened it. It is the only view of what Gmail actually thinks of you.
Your list health check, this week
Five days, no new tools required
- Monday: Verify SPF, DKIM and DMARC are published and passing. Confirm the List-Unsubscribe header is present in a real sent message, not just the footer link.
- Tuesday: Open Google Postmaster Tools and check domain reputation and spam rate. If you have never set it up, that is Tuesday's job instead.
- Wednesday: Pull the six numbers. Complaint rate, hard bounce rate, unsubscribe rate, click rate trend, unengaged share at 180 days, and engaged subscriber growth.
- Thursday: Segment your list by click recency. Look at how much of your list has done nothing in six months. That figure is your priority.
- Friday: Build the sunset flow. Two re-engagement emails, one last call, then suspend. Set it to run continuously so it maintains itself.
The bigger point
Deliverability is not a technical topic that belongs to somebody else. It is the difference between the email you sent and the email that arrived, and no amount of copywriting, design, or offer testing matters on the far side of that gap.
The good news is that the work is finite and mostly one-time. Authentication is an afternoon. The sunset flow is an afternoon. After that it is a monthly glance at six numbers. The senders who do that land in the inbox roughly nine times out of ten. The ones who do not are increasingly not landing anywhere at all.
Sources cited in this article
- Bulk sender requirements and enforcement timeline across Google, Yahoo, Microsoft and Apple — PowerDMARC: Bulk Email Sender Requirements 2026
- Gmail hard enforcement from November 2025 and Postmaster Tools updates — MessageFlow: Email Deliverability 2026
- Inbox placement rates for compliant vs non-compliant senders — Bulk Email Checker: Deliverability Best Practices
- Spam rate thresholds and the seven-day mitigation rule — Chronos Agency: Gmail and Yahoo Sender Requirements 2026
- DMARC enforcement levels and Apple Mail Privacy impact on open rates — Digital Applied: Email Deliverability Benchmarks 2026
- SMTP error codes and authentication troubleshooting — Red Sift: Bulk Email Sender Requirements Checklist
Frequently asked questions
Check six numbers together. Spam complaint rate below 0.10 percent. Hard bounce rate below 2 percent. Unsubscribe rate below 0.5 percent per send. Click rate stable or rising against your own baseline. Unengaged share below 30 percent at 180 days. And engaged subscriber count growing, not just total subscribers. A list growing on paper while engagement falls is accumulating, not growing.
Below 0.10 percent is the working target. The stated ceiling is 0.30 percent, but crossing it makes your domain ineligible for Gmail's delivery mitigation until the rate holds below the threshold for seven consecutive days, while reputation damage compounds. Manage against 0.10 percent and treat anything approaching 0.30 percent as an active incident.
Apple Mail Privacy Protection pre-loads tracking pixels for Apple Mail users whether or not the message was opened, and analysis suggests roughly half of reported opens are inflated as a result. Open rate still works directionally for spotting a sudden delivery failure, but it should not be your headline engagement metric or the basis for segmenting engaged subscribers. Segment on clicks instead.
A sunset flow identifies subscribers who have not engaged for a defined period, sends a final re-engagement attempt, then suspends those who still do not respond. Yes, you need one. Continuing to mail unengaged subscribers depresses engagement signals, raises complaint risk, and can land you in spam traps built from abandoned addresses. It shrinks the list on paper while improving revenue per subscriber and protecting inbox placement for everyone who stays.
The formal threshold is 5,000 messages per day to a single provider, but assume the requirements apply to you regardless of volume. Enforcement is trending universal, smaller senders are increasingly held to the same standards, and compliance has no downside. Note that crossing the threshold even once can classify your domain as a bulk sender permanently, so a single large campaign can change the rules you are held to.
Sending email that never arrives?
The free audit reviews your authentication setup, list health metrics, sending cadence, and segmentation, then shows you exactly where deliverability and revenue are leaking. 48 hours, no call required.
Request your free audit →