Sender Reputation Guide

You can have perfect authentication, clean HTML, and a compelling subject line. None of it matters if inbox providers don't trust you.

That trust is your sender reputation. It's the invisible score that determines whether your emails reach the inbox, get quietly routed to spam, or get rejected at the gate. Every domain and IP address that sends email has a reputation. Gmail calculates one. Outlook calculates a different one. Yahoo has its own. None of them share the exact formula, but the signals they watch are well documented: complaint rates, bounce rates, engagement patterns, volume consistency, and blacklist status.

The frustrating part? You can damage your reputation in a single afternoon and spend weeks rebuilding it. A bad campaign to a stale list, a sudden volume spike, or a compromised account can tank your inbox placement overnight.

This guide covers how reputation actually works at the provider level, the real math behind complaint rates and warmup schedules, how blacklists operate technically, and what to do when things go wrong. For how reputation fits into the broader deliverability picture alongside authentication and compliance, see our complete email deliverability guide.

Domain Reputation vs IP Reputation

Both matter, but domain reputation has become the primary signal at most providers. This shift happened because shared sending infrastructure (where multiple senders use the same IP addresses) made IP reputation unreliable as a sole indicator.

Domain reputation follows your domain everywhere, regardless of which IP or Email Service Provider (ESP) you send from. Switch providers and your domain reputation comes with you. This is why migrating to a new ESP doesn't give you a fresh start.

IP reputation is tied to the specific IP address. On a shared IP, your reputation is partly determined by other senders on the same address. On a dedicated IP, you have full control but need enough volume (typically 50,000+ messages per month, according to most ESP recommendations) to establish and maintain a stable reputation.

See dedicated vs shared IP for a detailed breakdown of when each makes sense.

For deep dives on each type:

Email Sender Reputation covers the fundamentals
IP Reputation Explained covers IP-specific factors

How Gmail's Reputation System Works

Gmail is the most transparent about how it scores senders, which makes it the best system to study. Through Google Postmaster Tools (GPT), you can see exactly how Gmail categorizes your domain reputation. [2]

The Four Reputation Categories

Gmail assigns your domain one of four reputation levels. Here's what each means in practice.

High. Your email goes to the inbox consistently. You have low complaint rates, low bounce rates, and strong engagement. Recipients open your messages, click links, and reply. Very few mark you as spam. This is where you want to be, and where most authenticated senders with good list hygiene land.

Medium. Most email reaches the inbox, but some messages may get filtered to spam, especially for recipients who don't engage with your mail. Gmail is watching you. You might have seen a recent uptick in complaints or a small bounce rate increase. This is a warning. Fix the underlying issue before it gets worse.

Low. A significant portion of your email goes to spam. Gmail has detected consistent negative signals. Maybe your complaint rate has been elevated for several sends in a row, or you've been hitting spam traps. At this level, even your engaged recipients may start seeing your messages in spam. Recovery requires immediate changes to your sending behavior and list.

Bad. Almost all of your email goes to spam or gets rejected. This typically happens after sustained high complaint rates, major spam trap hits, or a blacklist listing that Gmail is honoring. Recovery from "Bad" is possible but slow, often taking 2 to 4 weeks of dramatically reduced, high-engagement-only sending.

What Triggers Reputation Changes

The transition between categories isn't random. Here's what typically pushes you in each direction.

Dropping from High to Medium: a complaint rate above 0.1% sustained over several sends, a bounce rate above 2% on a campaign, or a noticeable decline in engagement metrics.

Dropping from Medium to Low: complaint rates above 0.3%, spam trap hits, or sending to a large number of invalid addresses (indicating list quality problems).

Dropping to Bad: complaint rates above 0.5%, confirmed spam trap hits on known Spamhaus or other major lists, or sudden massive volume increases suggesting account compromise. [1]

Moving back up: consistently low complaint rates (under 0.1%), high engagement, clean lists, and steady volume over a period of weeks.

The Math on Complaint Rates

Complaint rates are the single most influential metric for your reputation. Google requires bulk senders to stay below 0.3% and recommends below 0.1%. [1] Microsoft and Yahoo enforce similar thresholds. [3] [4] Understanding how the math works reveals why this is harder than it sounds.

How Fast Complaints Compound

Say you send 1,000 emails. Three recipients click "Report Spam." That's a 0.3% complaint rate. You're at Google's maximum threshold from just three people.

Now scale up. You send 10,000 emails. To stay under 0.1%, you can have no more than 10 complaints. Out of ten thousand recipients, only ten need to be annoyed enough to click the spam button. Maybe they forgot they subscribed. Maybe the subject line looked misleading. Maybe they just wanted to unsubscribe and couldn't find the link easily.

Here's where compounding gets dangerous. Gmail calculates complaint rates over a rolling window, not per individual campaign. If you send a campaign on Monday with a 0.2% rate and another on Wednesday with a 0.2% rate, your rolling average stays elevated. Send a third campaign Friday to a slightly stale segment and spike to 0.4%, and you've now sustained high complaints across three sends. Gmail notices patterns, not one-off events.

The practical takeaway: every campaign you send to a less-engaged segment raises your baseline risk. Segment aggressively. Send your best content to your most engaged subscribers. Treat the spam complaint button as the single most important metric in your dashboard.

See email complaint rate for strategies to keep complaints under threshold.

The Relationship Between Engagement and Reputation

Gmail is the most aggressive about using engagement as a reputation signal, but Outlook and Yahoo factor it in too. Here's what "engagement" actually means at the provider level.

Positive engagement signals: opening the email, clicking links, replying, moving the email from spam to inbox (this is a very strong signal), adding the sender to contacts, and starring or labeling the message.

Negative engagement signals: deleting without reading, marking as spam, never opening messages from a sender over a long period, and moving from inbox to spam.

Gmail's User-Level Filtering

Gmail doesn't just filter at the domain level. It filters at the user level. This means two recipients at gmail.com can have different experiences with the same sender. If Sarah always opens your emails and clicks links, Gmail learns that Sarah wants your messages and delivers them to her Primary tab. If Michael hasn't opened your last 10 emails, Gmail may start routing your messages to his spam folder, even though Sarah still gets them in her inbox.

This creates a feedback loop. When Gmail starts routing you to spam for disengaged users, your overall engagement rate drops (because those users never see the email to engage with it). Lower engagement further damages your reputation, which causes Gmail to filter more aggressively for more users. The spiral accelerates.

The counter-strategy: sunset disengaged subscribers proactively. If someone hasn't opened your last 5 to 10 emails over a 60 to 90 day period, move them to a re-engagement segment. Send one or two targeted re-engagement messages. If they don't respond, suppress them from regular sends. Your list will shrink, but your engagement rate and reputation will improve. See how engagement affects deliverability for implementation details.

Email Warmup: The Detailed Schedule

New domains and new IP addresses have no reputation. Providers treat unknown senders with suspicion and may throttle or filter your email until you establish a positive track record. Warmup is the process of gradually increasing your sending volume while maintaining strong engagement signals.

Week-by-Week Warmup Schedule

This schedule works for a new dedicated IP or a new domain. Adjust the numbers based on your total list size and how quickly you need to reach full volume.

Week	Daily Volume	Notes
Week 1	50/day	Send only to your most engaged subscribers (opened or clicked in the last 30 days)
Week 2	100/day	Continue with highly engaged recipients
Week 3	250/day	Expand to subscribers who opened in the last 60 days
Week 4	500/day	Monitor Postmaster Tools for any reputation dips
Week 5	1,000/day	Expand to 90-day engaged subscribers
Week 6	2,500/day	Watch bounce rates closely as you reach less-active segments
Week 7	5,000/day	If reputation stays High in GPT, continue scaling
Week 8	10,000/day	Approaching normal volume for many senders
Week 9-10	25,000/day	Final ramp to full volume
Week 11-12	Full volume	Maintain steady sending patterns going forward

Critical rules during warmup:

If your complaint rate exceeds 0.1% or your bounce rate exceeds 2% at any step, stop increasing volume. Hold at the current level until metrics improve, then continue.
Send at roughly the same time each day. Consistency matters. Providers are watching for patterns.
Don't skip days. A gap of several days during warmup resets your momentum and may cause providers to re-evaluate you.
Split volume across providers if possible. Don't send your entire daily volume to Gmail only. Distribute naturally across Gmail, Outlook, Yahoo, and others.

For a complete warmup plan, see email warmup and how to warm up a new email domain.

This also applies when you change your sending infrastructure. See email deliverability after a rebrand and deliverability during ESP migration.

How Blacklists Actually Work

Blacklists (also called DNS-based Blackhole Lists, or DNSBLs) are databases of IP addresses and domains known to send spam. Understanding how they work technically helps you respond faster when you get listed.

The DNS Query Mechanism

Blacklists operate through DNS. When a mail server receives a connection from IP address 192.0.2.1, it can check the Spamhaus Block List (SBL) by performing a DNS lookup for 1.2.0.192.zen.spamhaus.org (the IP address is reversed, then appended to the blacklist's zone). If the query returns a result (typically 127.0.0.x), the IP is listed. If it returns NXDOMAIN (not found), the IP is clean.

This lookup happens in milliseconds. Mail servers can check multiple blacklists for every incoming connection with minimal performance impact. Most receiving servers check 2 to 5 blacklists per connection.

The Major Blacklists and What They Cover

Not all blacklists are equal. Some are checked by nearly every mail server, while others have minimal influence.

Spamhaus (zen.spamhaus.org): The most widely used blacklist in the world. A Spamhaus listing will cause delivery failures across nearly every major provider. Spamhaus operates multiple lists within its zone: the SBL (manually verified spam sources), the XBL (exploited systems like botnets), the PBL (dynamic IP ranges that shouldn't send email), and the CSS (spam-sending IPs detected automatically). Spamhaus also maintains a domain-based list (DBL) that checks domain reputation. [5] Getting listed on Spamhaus is serious and requires direct engagement with their removal process.

Barracuda (b.barracudacentral.org): Widely used by organizations running Barracuda spam firewalls. Less impactful than Spamhaus for consumer email but significant for B2B delivery where Barracuda appliances are common.

SpamCop (bl.spamcop.net): Based on user reports. Listings are typically automated and expire within 24 to 48 hours if the reported activity stops. [6] Easier to recover from than Spamhaus.

URIBL and SURBL: These check domains found within the body of email messages (in links, for example), not the sending IP. If a domain you link to is listed, your email can be blocked even if your sending IP is clean.

How Listings Happen

You don't have to send spam to get blacklisted. Common non-spam causes include:

Spam traps. Addresses that exist solely to identify spammers. Some are recycled (old addresses that were abandoned and are now monitored). Others are pristine (never belonged to a real person and were seeded to catch scrapers). Hitting a pristine spam trap is very damaging because the only way that address got on your list is through scraping or purchasing.
Compromised accounts. If one mailbox on your sending IP gets compromised and sends spam, the IP gets listed, and every other sender on that IP is affected.
Shared IP reputation. On shared ESPs, other senders' behavior can get your IP listed.
Volume spikes. Sudden jumps in volume from a previously quiet IP look like a compromised machine or a newly purchased spam operation.

See blacklist removal guide for step-by-step delisting instructions for each major list, and use Email Blacklist Checker to check your status immediately.

Reputation Disaster Scenarios

Understanding what happens in specific bad scenarios helps you avoid them and recover faster if they happen.

Sending to a Purchased List

You buy a list of 50,000 "opt-in" email addresses from a vendor. Here's what happens.

Day 1: You load the list and send a promotional campaign. Your bounce rate immediately spikes to 15 to 25% because purchased lists are full of invalid addresses. Several addresses are spam traps, including at least one pristine Spamhaus trap.

Day 1-2: Spamhaus lists your sending IP. Gmail drops your domain reputation from High to Bad. Your complaint rate hits 2 to 5% because the valid addresses on the list didn't opt in to your messages.

Day 2-7: All email from your domain goes to spam at Gmail. Outlook starts rejecting connections from your IP. Your legitimate subscribers (the people who actually signed up) stop receiving your emails.

Recovery: 2 to 6 weeks minimum. You need to request Spamhaus delisting (which requires proving you've removed the purchased list), dramatically reduce volume to engaged-only subscribers, and slowly rebuild through the warmup process. During this time, your real customers don't get your emails.

The lesson: never buy email lists. The short-term reach isn't worth the destruction.

Suddenly Doubling Send Volume

Your marketing team decides to run a flash sale and sends to your entire list instead of the usual engaged segment. Your daily volume jumps from 5,000 to 40,000.

What happens: Gmail and Outlook see an eightfold volume increase from your domain. This triggers automated throttling. Your first 5,000 messages deliver normally, but the next 35,000 get deferred (temporary failures with 4xx response codes). Your ESP retries them over the next few hours, but many hit temporary rate limits again.

The messages that do get through have lower engagement than usual (because you're reaching disengaged subscribers), which damages your engagement metrics. If your complaint rate on this larger send exceeds 0.3%, you may see your Gmail reputation drop from High to Medium.

The fix: Ramp volume gradually when expanding to larger segments. If you normally send 5,000/day, plan to increase to 10,000, then 20,000, then 40,000 over the course of a week. Send the additional volume to progressively less-engaged segments so your engagement metrics degrade gradually rather than all at once.

Employee Account Compromise

An employee's email account gets compromised through a phishing attack. The attacker uses it to send 10,000 phishing emails through your corporate mail server.

What happens: Your sending IP and domain are suddenly associated with a massive spam operation. Blacklists pick up the activity within hours. Google Postmaster Tools shows your reputation dropping in near real time. Because the phishing emails go to addresses across dozens of providers, complaints roll in from everywhere.

Immediate response: Secure the compromised account (reset password, revoke sessions, enable multi-factor authentication). Contact your IT team to block outbound mail from the compromised account. Then check blacklists with Email Blacklist Checker and begin the delisting process.

Recovery: Faster than a purchased list scenario because the activity is clearly anomalous. Most blacklists treat one-time compromise differently from sustained spamming. Still, expect 1 to 2 weeks of degraded delivery. Use blacklist removal guide for each list's specific process.

How to Read Google Postmaster Tools Data

Google Postmaster Tools is the most important free tool for monitoring your email reputation. Here's how to interpret each section.

Setting Up

You need to verify domain ownership through a DNS TXT record (the same process as Google Search Console). Once verified, GPT will start collecting data. You'll see your first data within 24 to 48 hours of your next send, and you need to be sending at least a few hundred messages per day to Gmail for data to appear. [2]

The Dashboard Sections

Spam Rate. This is your complaint rate for Gmail recipients. The chart shows it as a percentage over time. You want this consistently below 0.1%. If you see it climbing above 0.1%, investigate immediately. Don't wait for it to hit 0.3%.

IP Reputation. Shows reputation for each IP address you send from. If you're on a shared ESP, you might see IPs you don't recognize. They're your ESP's shared pool. A mix of High and Medium IPs is normal on shared infrastructure. If you see Low or Bad IPs, contact your ESP.

Domain Reputation. This is the chart that matters most. It shows your domain's overall reputation on Google's four-point scale. A drop from High to Medium should trigger an immediate investigation into your recent sends.

Feedback Loop. If you've registered for Gmail's Feedback Loop (FBL) via a special List-Unsubscribe header, this section shows additional complaint data. Setting this up requires adding a specific header to your emails and registering with Google.

Authentication. Shows the percentage of your email that passes SPF, DKIM, and DMARC. You want all three at or near 100%. A drop here usually means a DNS change, a new sending source you haven't authenticated, or an ESP configuration problem. See our email authentication guide for fixing authentication issues.

Encryption. Shows what percentage of email is sent over TLS. This should be at or near 100% for any modern ESP.

Delivery Errors. Shows temporary and permanent errors Gmail returned to your sending servers. High error rates suggest throttling (temporary) or blocking (permanent). Temporary errors often resolve on their own. Persistent permanent errors mean Gmail is actively rejecting your mail.

Check Postmaster Tools at least weekly. Set a calendar reminder. Most reputation problems show up in the data days before they impact your inbox placement enough for you to notice through open rate drops.

See Google Postmaster Tools guide for a full walkthrough with screenshots and examples.

Checking Your Reputation

No single tool gives you a complete picture. You need to check multiple sources.

Tool	What It Shows	Coverage
Google Postmaster Tools	Domain and IP reputation for Gmail	Gmail only
Microsoft SNDS	IP data for Outlook/Hotmail	Microsoft only
Sender Score (Validity)	0-100 score based on sending behavior	Cross-provider estimate
Blacklist checks	Whether your domain/IP is listed	Major blacklist databases
DMARC aggregate reports	Who is sending as your domain	All providers that send reports

Detailed guides:

Deliverability Metrics That Matter

Not every metric your ESP shows you is useful. Some are vanity numbers. Others are actively misleading.

Inbox placement rate is the metric that matters most. It measures what percentage of emails land in the primary inbox. See inbox placement.

Delivery rate (the number most ESPs show prominently) only tells you the server accepted the message. A 98% delivery rate with 70% inbox placement means 28% of your "delivered" emails went to spam.

Spam complaint rate is the leading indicator of reputation trouble. Track it daily.

Bounce rate matters for list health, but distinguish between hard bounces (permanent failures) and soft bounces (temporary issues). See hard bounce vs soft bounce.

For a full breakdown of which metrics to track and which to ignore, see email deliverability metrics and what is a good deliverability rate.

List Hygiene

Your sender reputation is only as good as your list. Sending to invalid addresses, spam traps, or disengaged subscribers actively damages your reputation.

Email List Hygiene Guide covers how to clean your list without losing good subscribers
Email Complaint Rate explains how to keep complaints under the 0.3% threshold

Feedback Loops

Feedback Loops (FBLs) are a direct line to complaint data. When a recipient clicks "Report Spam" at a participating provider, the FBL sends you a notification. This lets you identify complainers, remove them from your list, and investigate what triggered the complaint.

See email feedback loops for how to register and use FBLs from major providers.

Monitor Your Reputation Continuously

Reputation damage can happen quickly and recover slowly. A blacklist listing, a complaint spike, or a sudden volume change can suppress your inbox placement for days or weeks. By the time you notice declining open rates, the damage is already done.

Use our free deliverability checker to test your current status, and consider automated monitoring to catch problems as they happen.

Track your reputation signals automatically

Monitor blacklist status, authentication health, and DNS changes for unlimited domains. $39/month.

References

Google Email Sender Guidelines — Google's requirements for bulk senders, including complaint rate thresholds and authentication requirements.
Google Postmaster Tools — Google's documentation on Postmaster Tools setup, reputation categories, and dashboard interpretation.
Microsoft SNDS and Sender Requirements — Microsoft's Smart Network Data Services and sending guidelines for Outlook.com.
Yahoo Sender Requirements — Yahoo's best practices and requirements for bulk email senders.
Spamhaus Blocklist Definitions — Spamhaus documentation on their SBL, XBL, PBL, CSS, and DBL lists.
SpamCop Blocking List FAQ — SpamCop's documentation on how listings are created and how they expire.

Email Sender Reputation Guide: How Providers Judge Your Domain and IP