Inbox providers decide what is spam by evaluating sender reputation, authentication records, and recipient engagement signals, not by scanning your subject line for trigger words. The keyword myth persists because it was partially true fifteen years ago. Today, Gmail, Outlook, and Yahoo run layered filtering systems that weigh how recipients behave when they receive your mail far more heavily than what your email says. If you are optimising your copy while ignoring the system underneath, you are solving the wrong problem.
What Signals Do Inbox Providers Actually Evaluate?
Inbox providers collect dozens of signals on every message and score them against models trained on billions of daily sends. But not all signals carry equal weight. Some are binary gates that must pass before anything else is evaluated. Others are behavioural indicators that accumulate over time and shift your reputation gradually. From my experience running deliverability audits, the senders who struggle most are treating all signals as equally important, obsessing over word choice while their DMARC record is misconfigured.
Here is how the major signals rank, based on published provider guidelines and what I have seen across hundreds of audits.
The Spam Signal Ranking Table
| Signal | Weight | What Providers Check | Your Control Level | |---|---|---|---| | Authentication (SPF, DKIM, DMARC) | High | Valid DNS records, cryptographic signatures, policy alignment | Full | | Complaint rate | High | Percentage of recipients clicking "Report Spam" per send | High | | Engagement signals | High | Opens, clicks, replies, deletes-without-reading, moves to spam/inbox | Moderate | | Sender reputation (domain + IP) | High | Historical sending behaviour aggregated across all signals | Moderate | | List quality and bounce rate | Medium-High | Hard bounce percentage, spam trap hits, invalid address ratio | High | | Sending consistency | Medium | Volume patterns, frequency regularity, sudden spikes or drops | High | | Content signals | Medium | Spam-like formatting, link density, image-to-text ratio, URL reputation | High | | Infrastructure and IP reputation | Medium | Shared vs. dedicated IP history, IP warmup status, reverse DNS | Moderate | | Unsubscribe mechanism | Medium | Presence of List-Unsubscribe header, RFC 8058 compliance, processing speed | Full | | Header and technical compliance | Low-Medium | Proper MIME formatting, valid Message-ID, RFC 5322 compliance | Full |
Use this as a diagnostic priority list. If your authentication is failing, no amount of engagement optimisation will help. If your complaint rate is above 0.3%, content quality is irrelevant. The signals compound in order.
How Does Authentication Affect Spam Filtering?
Authentication is the gate. If your mail fails SPF, DKIM, or DMARC checks, inbox providers treat it as potentially spoofed, and downstream signals never get a chance to help you. Google requires DMARC for bulk senders, and Yahoo enforces the same standard. Outlook applies similar evaluation, though its documentation focuses more on IP reputation alongside authentication.
From what I have seen, authentication problems are the most common "invisible" deliverability issue. A DNS change, an ESP migration, or a new third-party tool can quietly break DKIM alignment. The mail still sends. It might even deliver for a while. But the negative signal accumulates, and by the time you notice placement dropping, the reputation damage has been compounding for weeks. The fix is mechanical: verify SPF includes for every authorised sending service, confirm DKIM signing is active and aligned, and publish a DMARC policy starting at p=none with reporting enabled. Our Gmail and Yahoo bulk sender rules guide covers the specifics.
Why Do Complaint Rates Matter More Than Content?
Because a complaint is the strongest signal a recipient can send. When someone clicks "Report Spam," they are telling the provider directly that they did not want that email. Providers treat this as ground truth. No engagement metric and no content optimisation overrides a pattern of recipients actively flagging your mail.
Google publishes explicit thresholds in its sender guidelines. Stay below 0.10% and you are in safe territory. Climb above 0.30% and your mail will be blocked. Yahoo applies a similar framework through its feedback loops, as does Outlook through its SNDS and JMRP programs. Complaint rates are usually a list problem, not a content problem. People hit "Report Spam" when they do not remember subscribing or when the unsubscribe link is hard to find. The fix almost always lives in your acquisition practices or your list hygiene process, not in your email copy.
Want a faster path to better conversions? Get a free Conversion Infrastructure Audit and we will review your site, score your conversion path, and walk through the highest-leverage fixes on a live call.
How Do Engagement Signals Shape Inbox Placement?
Engagement is where filtering gets behavioural. Inbox providers track what recipients do after your mail is delivered: whether they open it, click links, reply, forward it, delete it immediately, or let it sit unread. Providers aggregate these signals across your entire recipient base to form a picture of how wanted your mail is.
Gmail uses engagement signals to determine placement within its tabbed inbox. A message that generates opens, replies, and clicks is more likely to land in Primary. A message that consistently gets deleted without opening drifts toward Promotions or Spam. The filtering is per-recipient and per-sender, which means your reputation with Gmail is a distribution across every person you send to, not a single number.
This is where the leak happens. A portion of your list has simply stopped engaging. Those recipients are not complaining or bouncing. They are just ignoring the mail. That pattern of being ignored, across enough recipients, quietly erodes your placement for everyone, including your most engaged readers. Sunsetting inactive subscribers is not just a list hygiene exercise. It is a deliverability intervention.
What Role Do Content and Structure Actually Play?
Content signals matter, but they sit below authentication, complaints, and engagement in the hierarchy. Providers scan message content for structural patterns rather than individual keywords. Heavy image-to-text ratios, excessive link density, URL shorteners, and links pointing to domains with poor reputations all raise flags. So does HTML that is malformed or overly complex.
The keyword myth is largely outdated. Modern spam filters use machine learning models trained on billions of messages, and those models evaluate content in context. A well-authenticated sender with strong engagement can use the word "free" in a subject line without consequences. A sender with a damaged reputation will struggle to reach the inbox even with perfectly neutral copy. From my experience, content problems that actually trigger filtering tend to be structural: a template that renders poorly, a broken link pointing to a flagged domain, or an email that is entirely an image with no text fallback. These are fixable in an afternoon.
How Do Sending Patterns and Infrastructure Factor In?
Inbox providers watch your sending behaviour over time. Consistent volume on a predictable schedule builds trust. A sudden spike, like sending to a dormant segment you have not mailed in six months, looks suspicious and often triggers throttling. This is especially true when that spike is accompanied by higher bounce rates or complaints, which it usually is.
IP reputation adds another layer. On a shared IP through your ESP, your reputation is partially shaped by the behaviour of other senders on that infrastructure. A dedicated IP gives you full control but means you own every consequence. Our piece on sender reputation metrics covers the tradeoffs in detail. Technical compliance rounds out the picture. Proper MIME formatting, valid Message-ID headers, working List-Unsubscribe headers with RFC 8058 support, and correct reverse DNS are all baseline expectations. They do not earn you inbox placement on their own, but failing any of them gives providers a reason to downgrade your mail.
How Do All These Signals Interact?
No single signal determines whether your email reaches the inbox. The signals compound. Strong authentication is necessary but not sufficient. Low complaint rates help, but not if your engagement is poor across a large segment of your list. Good engagement protects you from content-level filtering, but it cannot overcome a broken DMARC record.
The compounding works in both directions. A sender with passing authentication, low complaints, strong engagement, and consistent sending patterns builds a reputation that acts as a buffer. Minor issues, like an occasional content flag or a small bounce spike, get absorbed because the overall signal profile is healthy. Conversely, a sender with marginal authentication and middling engagement has no buffer. One bad send, one list import with stale addresses, one campaign that generates a complaint spike, and the whole thing tips over.
From what I have seen, the teams that maintain strong deliverability are the ones who monitor the full signal stack, not just the metric that hurt them last time. They check authentication quarterly, review complaint rates after every send, segment by engagement level, and maintain consistent sending volumes. It is not glamorous work. It compounds quietly into reliable inbox placement, which compounds into a functioning owned audience.
Frequently Asked Questions
What signals do inbox providers use to filter spam?
Inbox providers use a layered set of signals that includes authentication checks (SPF, DKIM, DMARC), spam complaint rates, recipient engagement patterns (opens, clicks, replies, deletes), sender reputation at the domain and IP level, list quality indicators like bounce rates and spam trap hits, sending volume consistency, content structure, and technical header compliance. Authentication and complaint rates carry the most weight. Content keyword scanning, while still a factor, is far less important than most senders assume. The signals are evaluated together and compound over time, so a weakness in one area accelerates damage from weaknesses in others.
How does Gmail decide if an email is spam?
Gmail evaluates incoming mail against a multi-layered filtering system. It starts with authentication. If SPF, DKIM, and DMARC pass, the message moves to reputation and behavioural evaluation. Gmail tracks your domain reputation through Postmaster Tools, and it factors in how recipients interact with your mail at an individual level. High engagement from a specific recipient makes future delivery to that person more likely. High complaint rates across your sends push mail toward spam for everyone. Gmail also uses machine learning models that evaluate content patterns, link reputation, and structural characteristics, but these operate downstream of the reputation and engagement layers.
Can good content still land in spam?
Yes. Content quality does not override authentication failures, elevated complaint rates, or poor sender reputation. If your DMARC record is misconfigured, your mail may be rejected or filtered regardless of how well-written it is. If your complaint rate exceeds Google's 0.3% threshold, your messages will be blocked even if every word is perfect. Good content helps by driving engagement, which feeds positive signals back into your reputation. But it is one input among many, and it sits below authentication, complaints, and reputation in the filtering hierarchy.
Want Help Applying This?
If your emails are landing in spam and you are not sure which signal is the problem, a structured audit is the fastest way to find out. We will review your authentication setup, check your sender reputation across major providers, and identify the specific signals that are working against you.
Get your free deliverability audit
The question worth sitting with is not "is my content good enough to avoid spam filters." It is "what does the system underneath my sending programme actually look like, and which signals have I not been watching." Because from what I have seen, the senders who stay in the inbox are not the ones writing better subject lines. They are the ones who built the infrastructure and the discipline to keep every signal in the green, consistently, over time. That is the work that compounds.