Email Deliverability Checklist 2026: The 47-Point Pre-Send Audit

This is the checklist we run internally at SendHaven before every customer launches their first campaign on our infrastructure. It is not a 12-bullet blog listicle. It is the full audit — 47 checks across 8 categories — that separates senders who hit the inbox from senders who quietly rot in the spam folder wondering why their open rates collapsed.

Fair warning: this checklist is written for senders who take deliverability seriously. If you are a hobbyist sending 500 newsletters a month from a Gmail address, most of this will be overkill. If you are sending 10,000+ messages a month — transactional, marketing, cold outreach, or anything in between — every single item below will either save you or catch up to you eventually.

We built this list after years of running dedicated email infrastructure for operators in the industries most ESPs refuse to serve: iGaming, crypto, forex, CBD, adult, dating, cold outreach. High-risk senders have less margin for error than consumer-facing SaaS, so our standards are higher than the average deliverability guide you will find online. Print this, bookmark it, or turn it into a Notion database — just run it.

How to use this checklist

Run the full 47 points when you are setting up a new sending domain, migrating from another ESP, or diagnosing a deliverability drop. For ongoing sends, pull out the "pre-send audit" subset (sections 1, 2, 3 and 4) and run it before any major campaign.

Every check has a pass criterion. If you cannot confidently tick a box, the item is a fail — not a "maybe." Deliverability does not grade on a curve. Filter systems see binary signals: you pass the check or you contribute to a reputation decay that eventually lands you in the spam folder.

If you want the deeper theory behind any of these checks, we wrote a full email deliverability guide that walks through SPF, DKIM, DMARC, IP reputation and engagement signals in detail. This page is the quick-reference audit; that page is the textbook.

1. Domain & authentication (12 checks)

Authentication is non-negotiable in 2026. Google, Yahoo and Microsoft all require DMARC for senders above 5,000 messages per day, and "required" means rejected or spam-foldered if missing. This section is the single highest-leverage part of the entire checklist.

2. IP & infrastructure (7 checks)

The machine that sends your mail matters almost as much as the domain on it. This section is where cheap ESPs leak the most deliverability — they stuff thousands of senders onto shared IP pools and you inherit the reputation of whoever is sending next to you.

3. Content & formatting (6 checks)

Modern spam filters care less about "spam words" than they did a decade ago, but content still matters — especially structural signals like HTML validity, text-to-HTML ratio and link hygiene.

4. List hygiene (7 checks)

List hygiene is where most otherwise-competent senders torch their reputation. A list that was clean 12 months ago is full of abandoned accounts, spam traps and corporate addresses that now bounce hard. Bad lists are the #1 cause of sudden inbox-rate collapses we see when diagnosing new customers.

5. Engagement signals (4 checks)

Gmail and Yahoo both score senders primarily on engagement: opens, clicks, replies, forwards, "move to inbox" actions. This section is about making sure you are not accidentally killing engagement through segmentation mistakes or bad send-time logic.

6. Monitoring & feedback loops (4 checks)

You cannot manage what you do not measure. The free tools below give you the same visibility mailbox providers have into your sending reputation — and most senders do not even know they exist.

7. Compliance & legal (3 checks)

Compliance is not just a legal chore — missing footer elements and broken unsubscribe flows are direct reputation penalties with Gmail and Yahoo, regardless of jurisdiction.

8. High-risk industry extras (4 checks)

If you send email for iGaming, crypto, forex, CBD, adult, dating or cold outreach, you are operating under stricter filter rules than consumer SaaS senders. These four extras are the difference between surviving and thriving in the high-risk lane.

The 5 most common mistakes we see

We run this audit on every new SendHaven customer during onboarding. Across 50+ businesses we have migrated in the last year, these are the five failures that show up most often:

1. DKIM misalignment. The signature validates but the d= domain does not match the From header. DMARC fails silently, everything lands in spam, and the sender swears "authentication is set up correctly." It is not.
2. Single SPF record becoming multiple. Someone adds a new sending service via a separate TXT record instead of merging into the existing one. SPF breaks entirely.
3. Sending to unengaged segments from a new IP. Warmup lists the whole database instead of the top engaged 10%. Reputation never gets off the ground.
4. Using a mainstream ESP for a high-risk niche. The AUP ban comes weeks or months later, always at the worst possible time, and the sender wakes up to "your account has been suspended" with a live campaign in progress. We have seen this happen three times to a single iGaming operator on SendGrid — it is the story behind our most-quoted customer testimonial.
5. Ignoring Google Postmaster Tools. The free data is sitting right there and somehow most senders never look at it until they are already in trouble.

Frequently asked questions

What is a good email deliverability rate in 2026?

A healthy inbox placement rate is 95% or higher to Gmail, Yahoo and Microsoft combined. Anything under 90% means you have a fixable problem — usually authentication, list hygiene or IP reputation. Raw delivery rate (not bouncing) should sit above 98%; the gap between delivery rate and inbox rate is how much mail is landing in spam.

How often should I run a deliverability audit?

Run the full 47-point checklist quarterly. Run the pre-send subset (sections 1, 2, 3, 4) before every major campaign or new domain launch. Automated monitoring through Google Postmaster Tools and Microsoft SNDS should be checked weekly — both take five minutes and they will save you from a six-week inbox rate recovery.

Do I really need DMARC in 2026?

Yes, unconditionally. Since February 2024 Google and Yahoo have required DMARC for any sender above 5,000 messages per day. Microsoft now enforces the same threshold. Missing DMARC does not mean "slightly worse deliverability" — it means outright rejection at the largest inbox providers on the planet.

What is the single most important item on this checklist?

Authentication alignment. SPF, DKIM and DMARC must all pass and align with the visible From domain. Everything else on the list matters, but if you fail authentication you lose before the filter even reads your content. A single misaligned DKIM selector can destroy an entire campaign's inbox rate.

How long does IP warmup take?

Four to eight weeks for B2C senders, two to four weeks for B2B with a clean list. Day 1 starts at 50-200 messages to your most engaged subscribers, doubling volume every 2-3 days while keeping complaint rate under 0.1%. Rushing warmup is the fastest way to burn a new IP into uselessness.

Does a dedicated IP actually improve deliverability?

Only if your volume justifies it. Below roughly 100,000 messages per month, a reputable shared pool outperforms a cold dedicated IP because mailbox providers cannot build a reliable reputation signal on low-volume IPs. Above 100k/month, dedicated becomes non-negotiable — you stop paying the reputation tax of whoever else is on your shared pool. For high-risk industries, we recommend dedicated from day one regardless of volume.

What is a good spam complaint rate?

Below 0.1% — one complaint per 1,000 messages. Google Postmaster Tools shows this as your User Reported Spam Rate. Above 0.3% you will see throttling. Above 0.5% you are effectively blacklisted at Gmail until the rate recovers over several weeks of clean sending.

How do I check if my IP is on a blacklist?

Free tools: MXToolbox blacklist check, Spamhaus lookup, and MultiRBL.valli.org. The blacklists that actually matter to your deliverability are Spamhaus SBL and CSS, Barracuda, Invaluement and SURBL. URIBL listings matter as much as IP listings now — filters inspect the domains inside your message body.

The bottom line

Email deliverability is not a mystery. It is a checklist. Forty-seven boxes, eight categories, a handful of free monitoring tools, and a discipline of running the audit on a schedule rather than in panic mode after a campaign tanks.

The teams who consistently hit the inbox are not smarter than the teams who do not — they are just the ones who ticked every box on a list like this one before hitting send, and then did it again the next quarter. If you are running a high-volume or high-risk sending program and you want a human to walk this audit with you, book a free 15-minute audit call with our engineers. We will tell you honestly whether your current ESP can fix the issues you have, or whether you need dedicated infrastructure to get out of the shared-pool reputation drag.

And if you are already past the point of "can this ESP handle me" and staring at a suspension email, our full SendGrid alternatives guide walks through the 10 best migration options — with an honest breakdown of which ones actually accept iGaming, crypto, forex, CBD, adult and dating senders instead of quietly banning you six months in.