Email Sender Reputation and Warmup, Explained for 2026
Varun BagrodiaCo-founder, mkdirNov 20269 min read
Email sender reputation decides if your mail reaches the inbox. What Gmail and Outlook measure, how to check yours, what warmup does and how to recover.
Email sender reputation is the trust Gmail, Outlook and Yahoo keep on record for your sending domain and the servers your mail leaves from. It decides whether a message reaches the inbox, goes to spam or gets refused. Spam complaints, bounces, authentication and steady sending build it. Once it drops, it comes back slowly.
Most owners first hear the phrase after replies stop. The copy gets blamed, the list gets blamed, and a month later someone finds the emails had been landing in spam the whole time. Reputation problems hide well because every email still shows as sent.
What is email sender reputation, in plain terms?
Every large mailbox provider keeps a running record of how its users react to your mail. If people open it, reply and move it out of spam, your standing rises. If they mark it as spam, or your messages bounce off addresses that do not exist, it falls. The provider then uses that record to decide where your next email goes.
There are two records. One belongs to the IP address the mail is sent from, and one belongs to the domain in your From address. This split matters for a small company. If your team sends from Google Workspace or Microsoft 365 mailboxes, the IP addresses are Google's or Microsoft's, shared with millions of other senders. You do not control them. The reputation you own is your domain's.
That is why cold email should go out from a separate sending domain, never from the one your invoices and customer support use. If a campaign goes badly, the damage stays on the sending domain and your main inbox keeps working.
What hurts sender reputation the most?
Gmail is the only large provider that publishes hard numbers, so its rules are the useful benchmark. Its sender guidelines ask every sender to keep the spam rate shown in Postmaster Tools below 0.3%, and recommend staying below 0.1%. Senders of more than 5,000 messages a day to personal Gmail accounts also need SPF, DKIM and DMARC, plus one-click unsubscribe on marketing mail. Microsoft added similar rules for Outlook.com and Hotmail in May 2025.
| Signal | What the provider sees | The published line | What to do about it |
|---|---|---|---|
| Spam complaints | Recipients pressing Report spam | Gmail: below 0.3%, ideally below 0.1% | Narrow the list to people the email is relevant to |
| Bounces | Mail sent to addresses that no longer exist | No published number | Verify the list before each send and remove dead addresses |
| Authentication | Whether SPF, DKIM and DMARC pass and match your From domain | Gmail and Outlook: required above 5,000 a day | Set all three up on every sending domain, at any volume |
| Sending pattern | Sudden jumps in volume from a new or quiet domain | Gmail: increase volume gradually | Ramp slowly and spread volume over more mailboxes |
| Unsubscribes | Opt outs that are ignored or slow | Gmail: act on them within 48 hours | Honor every opt out, including a reply that says stop |
| Blocklists | Your domain or IP listed as a spam source | Set by each list operator | Check weekly and find the cause before asking for removal |
Microsoft's enforcement is worth knowing in detail. From May 5, 2025, domains sending more than 5,000 emails a day to Outlook.com, Hotmail and Live addresses must pass SPF and DKIM and publish a DMARC record. Mail that fails goes to Junk for now. Microsoft has said it will later reject it outright with the error 550 5.7.515, and adding yourself to a recipient's Safe Senders list does not get around it.
Few small cold email programs come near 5,000 a day. Set the records up anyway. Below the threshold the same checks still feed into filtering, and an unauthenticated domain starts every send at a disadvantage.
How do you check your sender reputation?
Start with Google Postmaster Tools. It is free, and you add your sending domain by putting a verification record in its DNS. The newer version leads with a Compliance status dashboard that marks each Gmail requirement as compliant or needing work. Next to it sits the spam rate dashboard. Google has said it is retiring the old Domain and IP Reputation dashboards, because reputation scores were hard for senders to act on.
Two details catch people out. The spam rate counts complaints against mail that reached the inbox, so a domain whose mail mostly lands in spam can show a low rate. And on days with low volume, Google leaves data out to protect its users' privacy. A small campaign of a few hundred emails a week may see blank charts for days at a time, which tells you nothing either way.
Outlook has nothing as useful for a domain. Microsoft's SNDS reports on IP addresses you own, which most small senders do not. Yahoo has a sender hub with its own guidelines.
The check that covers every provider is a placement test. You send the campaign's real email to a set of test inboxes across Gmail, Outlook and others, then look at which folder each one landed in. Several sequencers include one, and separate services run them too. Do it before a campaign starts and on a schedule after. On campaigns we run, inbox placement is checked daily and held at 90% or above.
What is email warmup, and does it work?
A new domain has no history, and providers treat mail from an unknown domain with suspicion. Warmup is the period where you build that history by sending small amounts and raising them over two to four weeks. Most sequencers have a warmup feature that trades messages between a network of mailboxes, which open them, reply and pull them out of spam.
It helps with one thing: a new mailbox stops looking brand new. It does nothing for a bad list or an email nobody asked for. Once real campaigns start, providers judge you on how real recipients react, and no warmup network can outvote a few hundred people pressing Report spam.
So keep warmup running in the background after launch, but treat it as a floor. When you need more volume, add mailboxes and domains instead of pushing more mail through each one. A small daily number per mailbox, spread across several, looks like a team of people writing email. A single mailbox jumping from 20 a day to 500 does not.
| Stage | What you do | What to watch |
|---|---|---|
| Days 1-3 | Buy the sending domain, create mailboxes, set up SPF, DKIM and DMARC, add the domain to Postmaster Tools | Authentication passes on a test email |
| Weeks 1-3 | Warmup runs at low volume and rises slowly; no campaign mail yet | Warmup mail lands in the inbox, not spam |
| Week 3 or 4 | First campaign at a few emails per mailbox per day, to a verified list | Bounces, complaints, first placement test |
| After launch | Raise volume by adding mailboxes; keep warmup running | Spam rate, placement tests, blocklists, reply rate |
How long does it take to fix a damaged sender reputation?
Weeks, sometimes longer, and the clock only starts once you have stopped the cause. Gmail is open about part of this. A bulk sender with a spam rate above 0.3% cannot ask for mitigation until the rate has stayed below 0.3% for 7 days in a row. Its compliance dashboard can take up to 7 days to show a fix.
The order we work in when a domain has gone bad:
- > Pause campaign sending from the affected domain. Leave warmup running at low volume.
- > Find the cause. A spike in bounces points at the list. A spike in complaints points at who you are emailing or what you said. A failed DNS check points at a record someone changed.
- > Fix that cause first. Re-verify the list, cut the segment that complained, repair the records.
- > Restart at a fraction of the old volume and raise it over a couple of weeks, with a placement test at each step.
- > If the domain stays in spam after all that, retire it and move to a fresh one with its own warmup. That is why sending domains are kept separate in the first place.
What does not work is sending more to make up for lower reply rates. That adds complaints to a domain that already has too many.
What should a business owner check every week?
You do not need to read DNS records yourself. You need someone who can answer five questions with a yes or a number each week:
- > Does every sending domain pass SPF, DKIM and DMARC today?
- > What is the Gmail spam rate in Postmaster Tools, and is there enough data to show one?
- > What did the latest placement test show, by provider?
- > What was the bounce rate on last week's sends?
- > Is any sending domain on a blocklist?
If nobody can answer them, deliverability has no owner. We wrote about why this job falls between marketing and sales in our post on who owns email deliverability.
How kriyo handles sender reputation
On kriyo, mail goes out from separate sending domains, never your main one. Every mailbox has a health score, DNS records are checked and inbox placement is tested, and you see all of it on your deliverability screen.
There are two ways to use it. With Run it yourself, your team runs its own campaigns in kriyo, helped by kriyo's AI agents, and starts with a free trial on your own market. With Run it for you, mkdir's GTM engineers plan and run your outbound on kriyo, including the domains, the warmup and a placement check every day. By default a person approves every reply before it goes out. That starts with a free market audit.
Sources
- Email sender guidelines, Google Workspace Admin Help (support.google.com/a/answer/81126)
- Email sender guidelines FAQ, Gmail Help (support.google.com/mail/answer/14229414)
- Postmaster Tools dashboards, Gmail Help (support.google.com/mail/answer/14668346)
- Learn about the deprecation of the old Postmaster Tools interface, Gmail Help (support.google.com/mail/answer/16594218)
- Strengthening the email ecosystem: Outlook's new requirements for high volume senders, Microsoft Tech Community (techcommunity.microsoft.com/blog/microsoftdefenderforoffice365blog/4399730)
- Sender best practices, Yahoo Sender Hub (senders.yahooinc.com/best-practices/)
