Insights
Deliverability in 2026: The Quiet Enforcement That's Killing Your Sender Reputation
Your opens are dropping and nothing about your program changed. Here's why enforcement from Google, Yahoo and Microsoft has quietly gotten brutal and the fixes that actually help.
Did your list change? No. Your content strategy? No. What about your send cadence? Still no. Then why are your opens, your inbox placement and revenue-per-send all down?
Google and Yahoo's requirements haven't changed since February 2024 and Microsoft adopted the same standards in May 2025. What has changed everywhere is how strictly these standards are being enforced. And that is exactly why brands feel like they're being punished for something they didn't do.
The stakes surrounding email deliverability are too high to shrug this off, as the medium remains resilient with returns averaging $36 for every $1 spent. Yet, recent deliverability benchmarks show spam placement remains elevated, with some provider groups exceeding 14%.
A meaningful share of marketing emails never reaches the inbox. And if you’re B2C, that's a major revenue risk.
The Timeline Nobody Sent You a Memo About
Microsoft, Apple, Google and Yahoo together control roughly 80% of consumer inboxes. As their sender requirements have converged, enforcement has grown noticeably stricter over the past few years.
Feb 1, 2024 — Google and Yahoo start enforcing bulk sender rules. Non-compliant senders (5,000+/day to Gmail) get temporary errors.
April 2024 — Google began gradually rejecting a percentage of non-compliant Gmail traffic outright, with the rejection rate increasing over time.
June 1, 2024 — One-click unsubscribe becomes mandatory. Google drew a hard line at a 0.3% spam complaint rate, with higher rates making senders ineligible for mitigation.
April 2025 — Yahoo tightened enforcement and placed greater weight on domain reputation, which some described as a deliverability crash.
May 5, 2025 — Microsoft began rejecting non-compliant high-volume mail to Outlook.com, Hotmail and Live with 550 5.7.515 errors rather than just warning senders.
Sept 30, 2025 — Google retired the old reputation dashboards, replacing them with a more compliance-focused view.
November 2025 — Gmail began hard-rejecting non-compliant mail. Now, messages that fail the sender requirements are blocked before delivery entirely.
What's Actually Enforced Right Now?
Authentication. SPF, DKIM and DMARC all need to be aligned to your visible From domain. Even if SPF and DKIM pass, they can still fail alignment if they’re tied to a different domain than the one in the From address. Mailbox providers now reject unauthenticated bulk mail outright, instead of routing it to spam.
The spam-complaint cliff. Google says to keep your reported spam rate below 0.10% and never let it reach 0.3% or higher. Since June 2024, crossing that 0.3% line makes you ineligible for mitigation and you don't get relief until you've held below 0.3% for seven straight days.
Yahoo makes complaint rates look harsher by measuring them against inbox-delivered mail only, so the same number of complaints can produce a much higher rate.
One-click unsubscribe. This has been mandatory for over a year. Your emails need a real unsubscribe link, it needs to work automatically and opt-outs have to be honored quickly. If anything on your list deserves a spot check first, it’s this one. Either you have it, or you don’t.
Your Dashboard Makes Deliverability Deceptive
Apple's Mail Privacy Protection now accounts for more than half of all email opens. Every one of those "opens" may just be Apple's servers pre-fetching your tracking pixel, and not a human looking at your email. Plus, Gemini can auto-open and summarize mail, inflating the number further.
Shift your primary health metrics from opens to clicks, conversions, revenue per email and the slope of your complaint rate over time. See what to focus on—and how to shift your focus there—in our guide Metrics That Matter: How Retail Marketers Will Measure Email Success in 2026.
The Fix List: How to Address Email Deliverability Issues
Get your authentication sorted first. Make sure SPF, DKIM and DMARC are set up correctly for the exact domain you send from. Your email or CRM team usually handle this, so they can check that the domain is authenticated, the setup matches the real send stream and nothing is broken before the next campaign goes out.
Use real HTML, not image-only emails. Text-based, properly coded HTML beats image-only or image-heavy design for deliverability, every single time.
Spam filters can’t reliably read text that’s baked into an image, and image-heavy emails have long been associated with spammy tactics. So if your email is mostly pictures and barely any text, it can look suspicious and hurt deliverability. In fact, up to 40% of email users may view messages with images turned off. Screen readers can't parse images either. And with the European Accessibility Act now in force, it’s a compliance issue and not just a design preference.
Some tips for building HTML emails?
You don't need to obsess over an old-school "60/40 text-to-image ratio" anymore. Independent testing against 23 major spam filters found that once an email has 500+ characters of live text, image ratio stops affecting deliverability at all. Every email tested at that threshold passed, regardless of image count.
File size matters more than people think. Emails in the 15–100KB range sailed through filters. Everything from 110KB to 650KB started failing filters. Bloated HTML gets clipped by Gmail's iOS app behind a "Download entire message" link that people rarely click.
We wrote the full guide on how to build HTML emails for the AI inbox. Use this definitive guide as a resource for tips on using live text for headlines and CTAs, coded (not image) buttons, images that support the message (rather than carry it) and real alt text throughout.
The technical side matters too. It’s the stuff that helps mailbox providers trust your email and keeps one bad campaign from damaging the rest of your work.
PTR/reverse DNS: Your sending server should clearly identify itself, so it doesn’t look suspicious.
TLS: Your email should be sent over an encrypted connection.
RFC 5322 formatting: Your email needs to be built in the standard format, so receiving systems can read it properly.
Separate subdomains for transactional vs. marketing mail: Keep receipts and shipping updates separate from promos, so an underperforming marketing send doesn’t hurt important emails.
BIMI: This is a trust badge that can show your logo in some inboxes, but only after your authentication is already in good shape.
Where AI Really Helps in Email Deliverability
Getting authenticated gets your email through the door. Whether it keeps performing well depends on how people react to it. That part can’t be fixed with a one-time audit, because engagement changes from send to send.
This is the argument for predictive engagement scoring over static list rules. The most successful ecommerce brands are modeling who's actually likely to open, click or convert before your complaint rate creeps toward that 0.3% cliff. Automated sunset policies matter too, because email lists decay fast without regular cleaning when teams still don’t systematically suppress chronically unengaged contacts. At the end of the day, a smaller and genuinely engaged list beats a bigger passive one, on complaints and on revenue.
Today’s enforcement rules are brutal, and they’re not slowing down. Ecommerce marketers need to think of their sender reputation as a living, breathing score that engagement moves every day, whether you're watching it or not.
That's exactly the problem Backstroke's AI is built to sit on top of: predictive engagement scoring and send optimization that adapts as inbox providers keep raising the bar, so your reputation stays intact through the next enforcement wave. If your team is still running list hygiene on a quarterly calendar, now's the time to see what a more proactive approach will do for your deliverability.
