Sender reputation explained: how Gmail, Outlook and Yahoo score you

Every inbox provider keeps an internal credit score on you. It updates daily, it follows your domain and your sending IP, and it decides whether your next message lands in the primary tab, the Promotions tab, the Spam folder, or nowhere at all. You cannot see the score directly. But you can absolutely see its effects — and you can move it.

What sender reputation actually is

Reputation is not a single number stored in a single table. Each major ISP computes its own score, using its own weights, and refreshes it on its own schedule. What they have in common is the set of inputs: how the mail is authenticated, how recipients behave when the mail arrives, how often it bounces, how often it's reported as spam, whether the sending pattern matches what a legitimate business looks like.

Two identifiers get scored independently. Your domain — the one in the From header and the one that signs DKIM — carries reputation across sending infrastructure. Your IP — the address your mail server connects from — carries reputation across domains. Switching ESPs typically keeps your domain score but resets your IP score. Switching domains keeps the IP score but resets the domain score. ISPs lean more on domain in 2026 than they did in 2018, but IP still matters, especially at Outlook.

What Gmail measures

Gmail exposes its inputs via Postmaster Tools (GPT). If you're sending more than a few hundred messages a day to Gmail users, you have to be checking this weekly. What GPT shows you:

• Spam rate — complaints divided by delivered messages. Hard ceiling is 0.3%. Anything sustained above 0.1% is a warning.
• Domain reputation — High, Medium, Low, Bad. High is 100% inbox eligibility. Medium means you're landing in the spam folder some of the time. Low and Bad are reputation emergencies.
• IP reputation — same High/Medium/Low/Bad scale, per sending IP. Mostly matters for self-hosted senders and dedicated IP customers.
• Authentication — percentage of your mail passing SPF, DKIM and DMARC. Should be 99%+ for all three.
• Encryption — percentage of outbound mail delivered over TLS. Needs to be 100% in 2026 — Gmail and Yahoo both expect it.
• Delivery errors — temporary vs permanent failure rates. "Our system has detected" errors show up here.

Gmail's score feeds the ML classifier that decides inbox vs Promotions vs Spam. Engagement — opens, replies, clicks, marking as Not Spam, moving to a folder — is the single biggest input. Gmail is the most engagement-sensitive of the big three.

What Outlook measures

Microsoft's equivalent is SNDS (Smart Network Data Services) plus JMRP (Junk Mail Reporting Program). SNDS shows you volume and complaint data for IPs you own. JMRP is the FBL — it forwards complaints back to you so you can suppress the complainer.

Outlook's filter — SmartScreen, plus the newer Sender Intelligence layer — weighs IP reputation more heavily than Gmail does. If you're on a shared ESP pool and your neighbours misbehave, Outlook hits you harder than Gmail will. Outlook also cares about content patterns in a way Gmail mostly doesn't anymore — the old Bayesian signals (ALL CAPS subjects, image-heavy templates, spammy phrases) still carry weight.

Specific Outlook signals to watch:

• SNDS complaint rate per IP — target under 0.1%.
• SNDS "filter result" — Green, Yellow, Red. Red means most of your mail is going to Junk.
• JMRP complaints — you must be enrolled, or you're guessing.
• "Recipient validation" errors in SMTP responses — a sign you're hitting unknown recipients, i.e. dirty list.

What Yahoo measures

Yahoo (which now includes AOL) has a simpler public surface. The main tool is the Complaint Feedback Loop (CFL) — sign your DKIM, register the domain at the Yahoo/AOL CFL portal, and you get forwarded every complaint.

Yahoo weights IP more than Gmail does — closer to Outlook's model — but less than it did in 2019. Domain reputation is rising in importance as Yahoo moves closer to Gmail's 2024 requirements model. Yahoo punishes two things particularly hard:

• Complaint spikes. Yahoo's tolerance window is shorter than Gmail's. A brief spike that Gmail would shrug off will land you in Yahoo's Junk for days.
• Authentication misalignment. Yahoo rejects misaligned DMARC more aggressively than Gmail, which tends to just downgrade the score.

The five levers you actually control

Most of what makes up reputation is historical and slow-moving. But there are five specific things you can move in the next 30 days.

1. Authentication completeness. SPF, DKIM and DMARC all passing with aligned From domain. This is binary — either it's right for 99%+ of mail or your reputation has a ceiling.
2. Consistent volume. Send approximately the same volume every sending day. Sudden spikes look like compromise. Sudden drops look like you've been blocked and followed up from a new identity. Smooth your curve.
3. Engagement. Replies and forwards count most. Clicks matter. Opens count less than they did (Apple MPP noise). Move inactive addresses out of your main list into a re-engagement track or delete them. Dead weight drags the score.
4. Complaint rate under 0.3%. Gmail's hard ceiling. Outlook prefers under 0.1%. The only way to control this: segmentation, clean opt-ins, and prominent unsubscribe.
5. List hygiene. Validate before send. Suppress hard bounces. Remove addresses that haven't engaged in 6–12 months. Never buy or scrape. Every spam-trap hit is a month of reputation rebuild.

Timeline: how long reputation takes to move

Reputation is weighted over time, so movements take patience. Rough numbers based on public data and common experience:

• Domain reputation recovery — 2–6 weeks of clean sending to engaged recipients, at steady volume.
• IP reputation recovery — 4–12 weeks. Slower because IP history is aggregated across more senders in a shared pool.
• New domain warm-up — 3–4 weeks of progressive volume to establish a baseline.
• New dedicated IP warm-up — 4–6 weeks. IPs start with effectively no reputation, not neutral reputation.

There is no way to speed this up. Tools that claim to "repair reputation in 48 hours" are selling warm-up traffic (other people's inboxes opening and replying to you), and Gmail has gotten better at detecting the artificial patterns.

What destroys reputation fast

The fast paths down are much shorter than the slow path up. The four ways to torch a good score in days:

• Spam trap hits. Typo traps (yhoo.com), recycled traps (old abandoned addresses), pristine traps (seeded onto bought lists). One pristine hit is a month of damage.
• Bought or scraped lists. Always torches reputation because the list contains traps, invalid addresses, and recipients who mark you as spam at 5–20x normal rate.
• Sudden volume spikes. Going from 10k/day to 100k/day in one day looks like a compromised account. Warm volume changes across 7–10 days.
• Content pattern breaks. If you usually send plaintext personal mail and suddenly blast HTML marketing, you look like a compromised account pivoting to spam. Keep sending patterns consistent per domain.

How to monitor reputation day-to-day

Build a weekly monitoring ritual that covers all three major ISPs:

• Google Postmaster Tools — add the domain, verify via DNS, check weekly. Needs ~100 messages/day to Gmail before data shows.
• SNDS — sign up with a Microsoft account, add your IP ranges, check weekly for Red/Yellow indicators.
• JMRP — enrol for Microsoft's FBL so complaints forward back to you.
• Yahoo/AOL CFL — sign up with a DKIM-signing selector.
• Inbox placement tests — a weekly placement test catches ISP-specific degradation before it shows up in your opens. Test against 15–20 seed accounts per major provider.

Frequently asked questions