Email Sender Reputation: What It Is, How to Measure It, and How to Repair It

Your sender reputation is the sum of signals that ISPs and mailbox providers use to determine whether your email is trustworthy. Unlike a credit score — which produces a single number from a single bureau — email sender reputation is evaluated separately by every receiving provider, weighted differently at each one, and changes on a timeline of days to weeks in response to your sending behaviour. Understanding what constitutes sender reputation, how to measure it, and what specifically changes it is the foundation of sustainable inbox placement.

What Sender Reputation Actually Is

There's no single universal sender reputation score. Gmail's assessment of your domain is entirely separate from Microsoft's, Yahoo's, or Comcast's assessment. Each provider maintains its own internal reputation signals based on how recipients at that provider interact with your mail.

Sender reputation operates at two levels:

IP reputation

The reputation of the specific IP address(es) sending your email. ISPs track complaint rates, spam trap hits, bounce patterns, and volume history per IP. IP reputation is more volatile than domain reputation — it can change quickly in response to sending behaviour and can be partially reset by moving to a new IP (though this requires a warm-up period). IP reputation matters most at Microsoft (tracked via SNDS) and Yahoo (reflected in TS error codes).

Domain reputation

The reputation of your From: header domain, tracked by ISPs based on how recipients at their properties engage with your mail over time. Domain reputation is more persistent than IP reputation — it follows your domain regardless of which IP sends the mail, which ESP you switch to, or which server infrastructure you use. Domain reputation is the primary signal at Gmail (reflected in Gmail Postmaster Tools' domain reputation dashboard and now the Compliance Status dashboard).

The industry trend over the past 3–5 years has been toward increasing the weight given to domain reputation relative to IP reputation. The practical implication: you cannot escape a damaged domain reputation by changing IPs. The domain must be rehabilitated directly.

The Signals That Build and Damage Reputation

Negative signals (damage reputation)

Spam complaint rate (the most important): Every time a recipient clicks "Report Spam" or "Mark as Junk," it sends a complaint signal to the ISP. Gmail tracks this as the spam rate visible in Postmaster Tools. The thresholds that matter:

# Email accepted to inbox — reputation "High":
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net;
Authentication-Results: mx.google.com;
    dkim=pass header.i=@yourcompany.com;
    spf=pass smtp.mailfrom=noreply@yourcompany.com;
    dmarc=pass (p=REJECT) header.from=yourcompany.com;
X-Spam-Status: No, score=-4.1

# Email routed to spam — reputation "Medium" or lower:
Authentication-Results: mx.google.com;
    dkim=pass header.i=@yourcompany.com; spf=pass;
    dmarc=pass (p=NONE) header.from=yourcompany.com;
X-Spam-Status: Yes, score=0.2
# Note: authentication passes but still lands in spam.
# Cause: sustained low engagement signal, not auth failure.

• Below 0.10%: Acceptable. Maintain this consistently.
• 0.10%–0.30%: Warning zone. Gmail begins applying elevated filtering.
• Above 0.30%: Gmail rejects the domain's mail. Immediate action required.

Hard bounce rate: Attempting to deliver to non-existent email addresses (550 5.1.1 user unknown) is a strong signal of poor list quality or purchased lists. Sustained hard bounce rates above 2% signal careless sender behaviour. Hard bounces must be immediately suppressed from all future sending.

Spam trap hits: Spam traps are email addresses maintained by ISPs and anti-spam organisations that exist only to catch senders who are sending without permission or who haven't cleaned their lists. Types include: pristine traps (addresses never used by humans, leaked into lists via harvesting), recycled traps (formerly valid addresses that have been deactivated), and typo traps (common typo domains like yaho.com that receive misaddressed mail). Hitting a Spamhaus CSS spam trap causes immediate blacklisting.

Volume spikes: Sudden increases in sending volume from an IP or domain, especially from a new or rarely-sending source, look like compromised account abuse or purchased-list blasting. ISPs apply conservative throttling to spikes. The solution is consistent, gradual sending patterns and proper IP warm-up for new infrastructure.

Positive signals (build reputation)

Recipient engagement: Opens, clicks, replies, forwards, and moving mail from spam to inbox are all positive signals. Gmail's filtering is heavily personalised — whether a specific recipient's Gmail account opens your mail affects whether future mail from your domain reaches that specific recipient's inbox. Engaged subscribers are your reputation insurance policy.

Authentication completeness: Consistently passing SPF, DKIM, and DMARC doesn't improve reputation directly, but failing them reduces it. Authentication is the floor, not the ceiling of reputation.

Sending consistency: Regular, predictable sending patterns build ISP familiarity. An email programme that sends similar volumes at similar times to similar audiences looks like a stable, legitimate sender.

Domain age: Older domains with clean histories have established reputation. New domains start at zero and face inbox placement penalties of 20–30 percentage points compared to established domains. Domain age cannot be accelerated — it requires time and consistent positive patterns.

How to Measure Sender Reputation

Gmail Postmaster Tools

The most important reputation monitoring tool for most senders. After verifying your sending domain at postmaster.google.com, the Compliance Status and Spam Rate dashboards show your standing at Gmail. The spam rate dashboard is particularly valuable — it shows the complaint rate per day, with reference lines at the 0.10% and 0.30% thresholds.

Microsoft SNDS (Smart Network Data Services)

At postmaster.live.com, SNDS provides per-IP complaint rate and spam trap hit data for traffic delivered to Microsoft's properties. Colours indicate status:

• Green: Spam rate below 10% — good standing
• Yellow: Spam rate 10%–90% — watch list
• Red: Spam rate above 90%, or spam trap hits — Microsoft is actively filtering your mail

Sender Score (Validity)

Available at senderscore.org, Sender Score provides a 0–100 numerical reputation score per IP address based on data from Validity's network. It's not used directly by any major ISP for filtering decisions, but it correlates with deliverability and provides a useful benchmark:

• Above 90: Excellent reputation
• 70–89: Good reputation, minor issues present
• 55–69: Fair — some ISPs are applying elevated filtering
• Below 55: Poor reputation — significant deliverability problems likely

Blacklist monitoring

Check.spamhaus.org and mxtoolbox.com/blacklists provide current blacklist status for your IPs. Active Spamhaus SBL, CSS, or ZEN listings cause hard rejection at most major ISPs that query these lists. Monitor continuously — weekly at minimum, daily for high-volume senders.

Seed list inbox placement testing

Tools like GlockApps, Litmus, and Inbox Monster send your messages to a panel of test email accounts and report where each message landed: primary inbox, promotions tab, spam, or not delivered. This is the most direct measurement of inbox placement rate — the number that actually matters operationally. Run seed tests before major campaigns and whenever engagement metrics drop unexpectedly.

Reputation by ISP: How Each Provider Thinks Differently

The Reputation Repair Sequence

When reputation has been damaged and inbox placement has dropped, the repair sequence is specific. The instinct to "send more to get data" is wrong — it accelerates damage. The correct sequence:

1. Stop sending to anyone who hasn't engaged in the past 30 days. Send only to your most engaged segment: clicked in the last 30 days. This concentrates positive signals and stops the negative signals from non-engaged recipients.
2. Verify your authentication is complete and passing. Check that SPF, DKIM, and DMARC all show pass in Gmail Postmaster's Authentication dashboard and in test email headers.
3. Check and resolve any blacklist listings. Active blacklist listings must be removed before recovery is possible. Fix the root cause before requesting removal.
4. Reduce volume by 50–80%. Send fewer total messages but at higher engagement rates. This reverses the engagement ratio that damaged reputation.
5. Wait. Reputation recovery takes time: 2–4 weeks for minor damage, 4–8 weeks for moderate, 8–16 weeks for severe. There is no shortcut.
6. Expand audience gradually. Once Postmaster Tools shows improving spam rate trends, begin expanding the mailing segment incrementally — 30-day clickers → 60-day → 90-day — monitoring closely at each expansion step.