Sender reputation dropped. Now what?

Emails stopped reaching the inbox. Google Postmaster is showing red. Spamhaus or Barracuda sent a notification. You're on a blacklist. That's not a death sentence, but it won't resolve itself either. Recovery takes two to eight weeks if you work through it systematically.

Signs your sender reputation is damaged

Sometimes it's obvious: your ESP sends an alert, bounce rate spikes to 15%, half your list stops receiving mail. More often, reputation degrades quietly. Open rate dips 1-2% each week. Mail lands in Promotions instead of Primary. Gmail starts showing "This message seems dangerous" to a subset of recipients.

Three metrics worth checking every week:

• Google Postmaster Tools showing Domain Reputation as "Low" or "Bad." If you don't have Postmaster Tools set up yet, do it now. It's free and takes five minutes.
• Bounce rate above 5% across the last three campaigns. A single spike can be a technical glitch. Three in a row points to a systemic problem.
• RBL listing (Real-time Blackhole List). Check via mxtoolbox.com/blacklists.aspx. One hit on an obscure list out of 80 minor ones can be ignored. Spamhaus, Barracuda, SORBS, Proofpoint cannot.

According to Validity (formerly ReturnPath), 83% of deliverability problems trace back to sender reputation. Not content, not subject lines, not HTML layout. Reputation.

Why reputation drops

Mail providers score reputation across hundreds of signals, but 90% of the damage usually comes from five sources.

A dirty list. Dead addresses, spam traps, role-based contacts like info@ and sales@. Every hard bounce and every trap hit pulls your sender score down. Based on our data, clients with bounce rates above 8% see Google Postmaster flip to "Bad" within two or three campaigns.

Spam complaints. Gmail's threshold is 0.3% (3 complaints per 1,000 messages). Cross it and you're in the risk zone. Yahoo's threshold is tighter: 0.1% at volume. Each complaint carries more weight than ten opens.

Missing authentication. No SPF, DKIM, or DMARC. Since February 2024, Google and Yahoo reject mail from senders pushing more than 5,000 messages per day without all three records in place.

Volume spikes. Sending 2,000 messages on Monday and 50,000 on Tuesday looks like a textbook spammer pattern to mail providers. Doesn't matter if every address on the list is legitimate and opted in.

Shared IP with bad neighbors. On a shared IP pool you inherit the reputation of every other sender on it. One spammer in the pool drags everyone down. Ask your ESP which pool you're on and what its current reputation looks like.

Step 1. Run a proper audit

Before touching anything, understand the scope. Spend an hour on diagnosis. It will save weeks of trial and error.

Audit checklist:

1. Check your IP and domain against blacklists at mxtoolbox.com/blacklists.aspx. Write down every list you appear on.
2. Open Google Postmaster Tools. Pull Domain Reputation and IP Reputation graphs for the last 30 days. Find the exact point where the decline started.
3. Pull stats from your ESP on the last ten campaigns: bounce rate, spam complaints, open rate. Look for the anomaly.
4. Check your DNS records: SPF, DKIM, DMARC. A single misconfiguration can be the whole problem.
5. Run mail-tester.com — send a test message and look at the score. Anything below 7 out of 10 needs attention.

After the audit you'll have a concrete list of problems. Not "deliverability dropped" but "domain on Spamhaus SBL, bounce rate 12%, DMARC stuck on p=none for eight months."

Step 2. Clean the list thoroughly

This is the painful part. You'll be removing addresses you paid to acquire. The alternative is worse: keep mailing dead addresses and dig your reputation deeper into the ground.

What to remove:

• Every address with a hard bounce. No exceptions. One hard bounce means the address is dead. Mailing it again makes things worse.
• Subscribers who haven't opened a single message in six months. Before deleting, try a re-engagement sequence of two or three messages with a direct question: "Do you want to stay subscribed?" No response means archive them.
• Role-based addresses: info@, support@, sales@, admin@. Random people read these inboxes. Spam complaint probability is above average.
• Addresses from disposable domains: Mailinator, Tempmail, Guerrilla Mail. These inboxes live for hours, sometimes days.

Run the whole list through a validator. In uChecker, uploading a list takes minutes: the output breaks addresses into categories — valid, risky, invalid, role-based, disposable. Keep only the green ones.

One of our clients cut their list from 45,000 to 28,000 addresses after cleaning. Bounce rate dropped from 11% to 0.8%. Open rate climbed from 9% to 22%. Fewer addresses. Better results.

Step 3. Get off the blacklists

Each blacklist operates differently. There's no single procedure, but the general sequence is the same.

Spamhaus SBL/XBL. The most influential blacklist in the world. A listing here means 30-40% of global mail servers will reject you. To request removal, go to spamhaus.org/lookup, find your IP or domain, and follow the instructions. Spamhaus expects proof that you fixed the root cause: cleaned the list, implemented double opt-in, eliminated the spam trap source. Processing a request takes 24 hours to a week.

Barracuda (BRBL). Submit the removal form at barracudacentral.org/rbl/removal-request. Usually processed within 12-24 hours. Get re-listed within 30 days and the next removal will be harder.

SORBS. Automatic delisting 48-72 hours after spam activity stops. A manual request is also possible but slower.

Microsoft SNDS. If mail isn't reaching Outlook.com or Hotmail, register with Smart Network Data Services at sendersupport.olc.protection.outlook.com. The dashboard shows your IP reputation, traffic volume, and trap hit rate. Submit the delisting request through Sender Support.

Do not submit a removal request until you've fixed the root cause. Blacklist operators track repeat listings. Two or three recurrences and they stop accepting removal requests.

Step 4. Re-warm the IP

After cleaning the list and getting delisted, you can't jump straight back to your previous volumes. Mail providers will be watching you more closely than ever. Treat it like starting from zero.

Warm-up schedule for recovery:

• Days 1-3: 200-500 messages per day. Only your most engaged subscribers — those who opened and clicked within the last 30 days.
• Days 4-7: double the volume each day. 500 → 1,000 → 2,000 → 4,000. Watch bounce rate (keep it under 2%) and spam complaints (under 0.1%).
• Week 2: 5,000-15,000 per day. Expand the segment by adding subscribers who opened within the last 90 days.
• Weeks 3-4: 15,000-50,000 per day. Bring in the remaining valid subscribers. Keep monitoring.

If bounce rate exceeds 3% or spam complaints exceed 0.2% at any stage, stop. Drop back to the previous volume, find the problem segment, clean it, and continue.

The full warm-up takes three to four weeks. Trying to rush it will get you re-listed. The second recovery is harder than the first.

Step 5. Review and strengthen authentication

While warming up the IP, get the technical side right. Even if you had SPF, DKIM, and DMARC configured before, review each one now.

SPF: confirm that every sending service is listed in the record. Check the DNS lookup count (the limit is 10). A common miss: an ESP was added six months ago and its include was never added to SPF. Mail from that service has been failing SPF ever since.

DKIM: use 2048-bit keys. Verify that the selector matches between DNS and your server configuration. Rotate keys if you haven't done so in over a year.

DMARC: if you're still on p=none, now is the time to move toward p=quarantine. Start with pct=25, watch the aggregate reports for two weeks, then raise it to 100%. A strict DMARC policy directly improves domain reputation in the eyes of mail providers.

Step 6. Set up ongoing monitoring

Recovering reputation is only half the work. The other half is not losing it again. Set up alerts that fire before the situation turns critical.

• Weekly blacklist check via MXToolbox or similar. Can be automated through their API.
• Google Postmaster Tools once a week. Watch Domain Reputation and Spam Rate. Any downward movement is worth investigating immediately.
• ESP bounce rate alert. Threshold: 2% for hard bounces. If your ESP supports webhooks, configure automatic hard bounce removal after each campaign.
• Spam complaint rate. Threshold: 0.1%. Mailchimp, Brevo, and SendGrid all surface this metric in their dashboards. If it climbs, check what changed recently — a new segment, a new template, a different sending frequency.

Also: validate your list on a quarterly schedule. Addresses go dead constantly — people leave jobs, companies fold, free mailboxes get abandoned. A list loses 20-25% of its active addresses over a year. Without regular cleaning, those addresses turn into hard bounces and spam traps.

Mistakes that make it worse

Panic leads to bad decisions. Here's what not to do when reputation drops.

Switching to a new domain. A new domain with zero history isn't a clean slate — it's a suspicious one. Mail providers treat new domains with extra skepticism. And if your old domain was blacklisted and you keep mailing the same list from a new one, providers will connect the dots quickly.

Switching ESPs without cleaning the list. A dirty list will damage reputation on any platform. Moving from Mailchimp to SendGrid doesn't solve the problem. It moves the problem.

Buying "pre-warmed" IPs. This market exists, and it's a lottery. You don't know the IP's history. The previous owner might have used it to send spam you definitely don't want associated with your domain.

Sending low volumes to the whole dirty list. Warm-up only works on a clean segment. Sending 500 messages to random addresses from a dirty list generates 500 potential problems instead of 500 quality engagement signals.

Realistic timelines

Full recovery depends on how bad things got. If the domain sat on the Spamhaus SBL for more than a month, budget six to eight weeks. If the problem was caught early and comes down to a dirty segment, two to three weeks is realistic.

Rough timeline:

• Day 1: audit, diagnosis, root cause identification.
• Days 2-3: list cleaning, validation, removal of risky addresses.
• Days 3-5: delisting requests, DNS record corrections.
• Weeks 1-4: IP warm-up with gradual volume increases.
• Week 5+: monitoring, consolidating gains, ramping to full sending volume.

Don't rush. Reputation breaks in days and heals in weeks. Each day of disciplined warm-up is an investment in long-term deliverability.