An email deliverability crisis rarely announces itself clearly. Open rates drop a few points, which could be a bad subject line. Gmail placement falls, which could be a one-off. Then it keeps happening.
By the time most eCommerce senders recognise they have a crisis, the underlying reputation damage has been compounding for weeks. The reason: the default tools, ESP dashboards and open rate reports, don’t show you what’s actually happening at the inbox level. Your Klaviyo dashboard might show 98% delivered and a 25% open rate while 40% of your Gmail sends are landing in spam.
This guide is the recovery process. Not prevention theory. What to do, in order, once you know something is wrong. The first section is the first day. The numbered steps after it are the longer repair. Mailbox providers do not reset reputation because a day has passed.
Last verified: 26 September 2026. The spam-rate rules below are Google’s, from the sender guidelines and the guidelines FAQ.
The first 24 hours
Do these in order. The point of the day is to stop new damage and name the cause. It is not to “get back to inbox” before tomorrow’s campaign.
Hours 0 to 2: see which failure you have
- Pull one customer report or seed result and name the provider. Gmail spam, Yahoo spam, and an Outlook bounce are different jobs.
- Read the SMTP text if anything bounced.
550 5.7.515is Microsoft refusing the message because the From domain failed high-volume authentication. That mail was not delivered. Follow the Outlook rejection guide instead of a spam-folder cleanup. - In Google Postmaster Tools, record Compliance status and the spam rate for the sending domain. Postmaster data runs 24 to 48 hours late, so it describes the last day or two, not this hour; use the bounce text and seed placement for the current picture. Google asks senders to stay under 0.10% and to avoid 0.30% or higher. At or above 0.30%, Google says mitigation is unavailable until the rate has been under 0.30% for seven consecutive days. That is an eligibility rule, not an inbox guarantee.
- If a domain or IP reputation card is still on screen, write down the tier. Google has said those cards will be retired, with no date published, so do not block the rest of the day waiting for the badge to move.
- Note the last send that was healthy: audience, size, and whether a flow overlapped it. Why emails suddenly go to spam is the branching diagnosis.
Hours 2 to 8: stop the sends that add complaints
- Pause campaigns and flows aimed at people who have not clicked recently. Keep only the mail customers are waiting on, such as order and shipping notices, and only if that stream is not the one failing authentication.
- Suppress addresses that complained. Do not mail them again to “win them back” this week.
- Turn off win-back, sunset, and any re-engagement that is in market or in a flow. Those audiences are the complaint source.
- Leave the sending domain and the ESP where they are. A new domain on day one throws away the history you still need and starts a warm-up in the middle of an incident.
Hours 8 to 24: one fix, then a small proof
- If authentication failed on the message you inspected, correct that DNS record and wait until a new message shows pass. Do not bundle a template rewrite, a list import, and a domain change into the same evening.
- If authentication passed and the spam rate or the folder is the problem, the only send you make is to people who clicked recently. Check placement at Gmail, Yahoo, AOL, and Outlook on that send. InboxEagle’s seed list covers those four providers. Outlook authentication rejections (550 5.7.515) happen at SMTP time, so those still come from the bounce log.
- Write down the numbers you will compare tomorrow: Postmaster spam rate, the placement split, and the bounce codes. Step 5, the recovery sending plan, starts from those numbers, not from a hope that tomorrow’s open rate recovered.
If you cannot name the provider and the cause by the end of the day, do not resume the full list in the morning.
Step 1: Confirm You Have a Crisis and Define the Scope
Before changing anything, get accurate data on what is actually happening. Two tools are non-negotiable.
Google Postmaster Tools shows you how Gmail sees your sending domain. Log in and check the v2 Compliance status, then your spam rate, which is the percentage of Gmail recipients who marked your mail as spam. Google’s guideline is to stay under 0.10% and never reach 0.30%. If an older Domain or IP Reputation card is still visible, treat it as a lagging summary: Google has said those dashboards are being retired, with no date published. All Postmaster data is 24 to 48 hours late. Postmaster Tools is the only place you can see these numbers for Gmail specifically. Your ESP dashboard does not have this data.
Inbox placement monitoring tells you the actual placement percentages: what share of sends to Gmail, Yahoo, AOL, and Outlook landed in the inbox versus spam. InboxEagle shows this per campaign, after every send, so you can cross-reference when the problem started and what changed.
These two tools together tell you: how bad is it, which providers are affected, and when did it start. Without both, you’re guessing at the root cause.
Step 2: Identify the Root Cause
Once you have accurate placement and reputation data, the next question is why. The most common root causes, and how to confirm each:
High spam complaint rate. Check Postmaster Tools. If your spam rate is above Google’s 0.10% guideline (see Gmail spam rate thresholds), this is the likeliest driver of Gmail filtering. The usual trigger is a campaign sent to a segment with low recent engagement, a re-engagement or winback sequence, or a welcome series that continued past the initial email to subscribers who never opened.
Blacklist listing. Run your sending domain and IP through MXToolbox. A listing on Spamhaus or Barracuda can block delivery at providers that query those lists. The blacklist entry itself shows the listing date and reason, which gives you the root cause. For the full removal process for each major blacklist, see the email blacklist removal guide.
Authentication failure. Read the Authentication-Results header on a recent message for SPF, DKIM, and DMARC. InboxEagle checks your SPF, DKIM and MX records and your DMARC policy record every 24 hours and alerts on a change, but it does not report pass or fail on individual campaigns. A new custom sending domain, a recent ESP switch, or a DNS misconfiguration can all cause this.
Sudden volume spike. If you sent a significantly larger campaign than usual to a cold or broad segment, the spike signals to mailbox providers that your sending pattern has changed. Combined with lower engagement signals from a colder audience, this drives reputation down quickly.
Most crises involve more than one factor. A volume spike often happens alongside elevated complaints because the spike reaches more disengaged subscribers. Fix the root cause first, then work through any secondary factors.
Step 3: Stop the Bleeding
While you’re diagnosing, take these actions immediately.
Pause all sends to disengaged subscribers. Define engaged as clicked in the last 30 days. Do not send to anyone outside that segment until you’re in recovery mode. Every send to a disengaged address right now is adding more negative signals to a domain reputation that is already damaged.
Suppress recent complainers. Pull any addresses who generated a spam complaint in the last 30 days and add them to your suppression list permanently. Klaviyo auto-suppresses on unsubscribes but complaint-based suppression depends on your feedback loop setup.
Hold high-risk sends. Pause any re-engagement campaigns, winback sequences, or sunset flows currently active. These target cold addresses by design and are exactly the wrong sends to continue during a crisis.
Don’t change your sending domain or ESP. A crisis is not the time to switch infrastructure. Moving to a new domain or IP during active reputation damage doesn’t reset your problem; it starts a new warm-up period while the original domain is still damaged.
Step 4: Resolve the Root Cause
For authentication failures: Fix the DNS records for SPF, DKIM, and DMARC. Use your domain registrar or DNS provider to verify the records are publishing correctly. Authentication fixes take effect within 24-72 hours of the DNS change propagating. Confirm it by sending a new message and reading its Authentication-Results header.
For blacklist listings: Identify the specific list and listing reason through the blacklist operator’s lookup page. Fix the underlying behavior that caused the listing: clean the addresses that generated spam trap hits, reduce complaint rate, or resolve the authentication issue. Only submit a delisting request after the fix is complete. Submitting before you’ve fixed the root cause almost always results in re-listing within days.
For high complaint rates: The fix is segmentation. Send only to subscribers who clicked in the last 30 days until the complaint rate stops rising. Review any flows that might be sending to cold segments and pause them. Check whether your list-unsubscribe header is correctly configured so recipients can unsubscribe easily rather than hitting the spam button.
For volume spikes: The fix is time and reduced volume. Send consistently to your engaged segment at moderate frequency (2-3 times per week maximum) until placement holds. Do not try to send your way out of a reputation problem with high frequency.
Step 5: The Recovery Sending Plan
Once the root cause is addressed, send next to people who still engage. Expand only after that slice is placing and the complaint or bounce signal that broke has stopped rising. Mailbox providers do not publish a week count for this. How long sender reputation takes to recover is the limit of what Gmail documents, including the seven-day mitigation rule, which is not a promise that placement returns on a date. Rushing the expansion is how the same incident starts again.
Step 6: Confirm Recovery Before Returning to Normal
Don’t declare recovery based on a single good campaign. When the bad send is stopped, record what happened in the postmortem template. That document is the aftermath. It is not a second response plan. The signals to confirm genuine recovery:
Postmaster Tools Compliance status shows every requirement passing. Google has said the Domain and IP Reputation dashboards will be retired, so do not wait on them.
Spam rate in Postmaster Tools stays under Google’s 0.10% guideline across multiple recent sends (remember the 24 to 48 hour delay).
Inbox placement in InboxEagle is back to your pre-crisis baseline at Gmail, Yahoo, AOL, and Outlook across at least three consecutive campaigns.
Authentication is passing on a fresh test message: SPF, DKIM, and DMARC all showing pass in its headers, and your DNS records unchanged.
Once all four are holding, resume normal sending patterns gradually. Start by expanding to your 90-day engaged segment rather than jumping to your full list immediately. The full list should come back into rotation only after several weeks of stable post-recovery sending.
What Not to Do During a Crisis
A few common mistakes that extend recovery time significantly:
Sending more volume to “prove” you’re a legitimate sender. Mailbox providers don’t infer legitimacy from high volume. They infer it from positive engagement signals. Sending to disengaged addresses at high volume during a crisis is the opposite of what helps.
Switching to a new sending domain to escape the problem. Mailbox providers track both your old and new domains if you’re on the same IP pool. A domain switch without an IP change doesn’t help. A domain and IP change simultaneously just means you’re starting from zero reputation while your problem domain is still being watched.
Submitting blacklist delisting requests before fixing the root cause. Every blacklist operator explicitly states that premature requests result in re-listing. Fix the behavior, then request removal.
Using opens as the signal for recovery. Apple Mail Privacy Protection inflates open rates regardless of whether your emails are landing in the inbox. Check Postmaster Tools spam rate and Compliance status and InboxEagle placement percentages, not your Klaviyo open rate dashboard.
How InboxEagle Fits Into Crisis Recovery
Two things InboxEagle gives you that are difficult to get any other way during a crisis:
First, per-campaign placement data. During recovery, you need to know whether each individual send is moving in the right direction or not. InboxEagle shows you the Gmail, Yahoo, AOL, and Outlook placement percentage for every campaign, alongside the email performance score, after every send. You can see whether campaign 3 of your recovery sequence is better than campaign 1, or whether you’ve had a setback. Without placement data at this granularity, you’re reading tea leaves from open rates that Apple has partially corrupted.
Second, DNS change alerts. InboxEagle checks your SPF, DKIM and MX records and your DMARC policy record every 24 hours and alerts you when one changes. If a DNS edit during recovery broke a record, the alert lands alongside the placement data, which shortens the diagnosis. It does not replace reading the headers of a test message.
For monitoring Gmail domain reputation signals alongside your placement data, connecting Google Postmaster Tools to InboxEagle puts both in the same view. That combination covers the two most important signals during recovery: how Gmail sees your compliance and spam rate (with Google’s 24 to 48 hour delay), and where your campaigns are actually landing.
InboxEagle
See where the next send lands
Start the 14-day free trial (no credit card) for seed placement at Gmail, Yahoo, AOL, and Outlook after every send, plus DNS and DMARC policy record alerts. Or rule out a blocklist first with the free checker.
Once you are past the crisis, the eCommerce email deliverability guide covers how to build the ongoing hygiene, monitoring, and seasonal preparation practices that prevent a repeat.
Note: Content created with the help of AI and human-edited and fact-checked to avoid AI hallucinations.

