You just sent an important email and it landed in spam. Or worse — it didn't arrive at all. Email deliverability problems cost businesses real money: lost sales, missed client communications, damaged sender reputation. The good news: most deliverability issues take under 5 minutes to diagnose and you can fix many of them today. Here's the exact checklist.
📬 Check Your Domain Now
Our Email Checker runs all 5 checks below in one click. Free, no signup.
Check My Domain →Step 1: Check Your MX Records (30 seconds)
The problem: If your MX (Mail Exchange) records are missing or misconfigured, email can't even reach your server. This is the most fundamental failure — and the fastest to check.
The fix: Use our DNS Lookup tool, select "MX" record type, and enter your domain. You should see entries like aspmx.l.google.com (Google Workspace) or yourdomain-com.mail.protection.outlook.com (Microsoft 365). If you see nothing, your DNS provider hasn't configured MX records — contact them and add the records your email provider gave you.
Priority values matter: Lower numbers = higher priority. Make sure your primary MX server has the lowest priority number (usually 0 or 1).
Step 2: Add or Fix SPF (1 minute)
The problem: Without SPF, anyone can send email that looks like it came from your domain. Receiving servers see this as a red flag and may reject or spam-filter your legitimate mail.
The fix: Add a TXT record to your DNS with an SPF policy. The exact value depends on your email provider:
# Google Workspace:
v=spf1 include:_spf.google.com ~all
# Microsoft 365:
v=spf1 include:spf.protection.outlook.com ~all
# Zoho Mail:
v=spf1 include:zoho.com ~all
# SendGrid (add to existing):
include:sendgrid.net
Use ~all (softfail) while testing. Switch to -all (hardfail) once everything works. One SPF record per domain — if you use multiple services, include them all in a single record.
Use our DNS lookup to verify: check TXT records for your domain and confirm the SPF entry is there.
Step 3: Enable DKIM (1 minute to check, more to set up)
The problem: DKIM digitally signs your outgoing email. Without it, receiving servers can't verify that your email wasn't tampered with in transit — another spam signal.
The fix: Most email providers generate DKIM keys for you. In Google Workspace: Admin → Apps → Gmail → Authenticate email. In Microsoft 365: Exchange Admin → Protection → DKIM. Copy the generated DNS record (a TXT record with a name like google._domainkey.yourdomain.com) and add it to your DNS.
Quick check: Our Email Checker automatically detects whether DKIM is present for your domain. Run a check — if it says "DKIM: Not detected," you need to set it up.
Propagation note: DNS changes can take up to 48 hours to propagate. Check with our DNS Propagation tool to see when your DKIM record is live globally.
Step 4: Set Up DMARC (2 minutes)
The problem: DMARC tells receiving servers what to do when SPF or DKIM checks fail. Without it, you have no policy — and starting February 2024, Google and Yahoo require DMARC for bulk senders (>5,000 emails/day).
The fix: Add a TXT record with the name _dmarc.yourdomain.com and this value:
v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com
Three policy modes:
p=none— Monitor only. Start here. Collect reports for 1-2 weeks.p=quarantine— Send failing mail to spam. Move here after monitoring looks clean.p=reject— Block failing mail entirely. The final destination — only when you're confident.
Our Email Checker detects DMARC and shows your policy. For deeper analysis, use our DMARC Report Parser on the aggregate reports you receive at dmarc@yourdomain.com.
Step 5: Check Blacklists (30 seconds)
The problem: If your domain or sending IP is on an email blacklist, most receiving servers will reject your mail outright — regardless of how perfect your SPF/DKIM/DMARC are.
The fix: Our Email Checker automatically queries major DNS blacklists (Spamhaus ZEN, SpamCop, Barracuda, SORBS, PSBL) for your MX server IPs. If you're listed:
- Go to the blacklist's website and look up your IP
- Read the listing reason (spam reports, open relay, virus activity, etc.)
- Fix the root cause (secure your server, stop spam, close open relays)
- Submit a delisting request — most blacklists process these within 24-48 hours
Prevention: Use our Blacklist Monitor (Pro feature) to get instant alerts if your domain ever gets listed — catch problems before customers do.
The Full 5-Minute Checklist
| ✅ MX Records | Your domain has valid MX records pointing to your email provider |
| ✅ SPF | TXT record with SPF policy authorizes your sending IPs |
| ✅ DKIM | Outgoing email is cryptographically signed |
| ✅ DMARC | Policy set (at minimum p=none with reporting) |
| ✅ Blacklists | Your sending IPs are not listed on major DNSBLs |
What If Everything Passes But Email Still Goes to Spam?
If MX, SPF, DKIM, DMARC, and blacklists are all clean, the problem is likely in your email content or sending behavior:
- Check your content: Use our Spam Score Checker to analyze your email for trigger words, missing headers, shortened URLs, and formatting issues that spam filters flag.
- Analyze your headers: Use our Email Header Analyzer to trace the full delivery path and see exactly which hop flagged your email.
- Get a professional report: Our €9 Email Health Report generates a PDF with all findings, recommended fixes, and a step-by-step remediation plan. Share it with your IT team or email provider.
- Warm up your domain: If this is a new sending domain, you may need to gradually increase volume. Start with 50-100 emails/day to engaged recipients and scale up over 2-4 weeks.
🚀 Fix Your Deliverability Now
Run all 5 checks in one click. Get your score, see exactly what's wrong, and start fixing it today.