Disclaimer: We encourage “rolling” in the case of fire… Just not emails

By Julia, Deliverability Expert

Similar to the response time one may have to being engulfed in flames, I will make this insightful tidbit brief and to the point.

When it comes to block mitigation and server communication, we cannot control how the server responds… or even IF they respond. What we CAN control is how WE respond to the block.

To help make this as simple as possible, our email team has developed a memory tool from the simple and commonly-known (well, I hope it’s commonly known…) phrase “Stop, Drop and Roll.”

STOP

Stop sending completely

Pros – The issue will not progress/worsen; may help to refresh or recover IP/domain reputation

Cons – Domain/IP warming progress may be reversed (in some cases to the point of restarting)

DROP

Drop sending volume

Pros – Can halt a block or prevent further damage; may help to defend our sending practices in server communications

Cons – Can just prologue the inevitable (block) or prevent throttling limits from ever increasing

ROLL

Roll with it (proceed as you would if no issue occurred)

Pros – In rare cases, this issue resolves itself with no loss of volume or engagement for future sends

Cons – In many cases, this worsens the block, making it harder to resolve in this case and future cases for an indefinite amount of time

In contrast to one who may be caught on fire, our team actually discourages “rolling” in response to emailblocks and deliverability errors in most cases. As in the game of poker or the investment of stock, your risks should always be calculated.

Having reviewed that information, keep in mind that every case is different, and nothing is ever definite in the world of email marketing.

If you think you may have encountered a deliverability issue to any capacity and are considering how your team should respond, do not hesitate to reach out to your point of contact for further assistance.

For more information, contact our team for training or insight and visit your Nucleus Resource Library!

By Julia, Deliverability Expert

At Nucleus, we understand that it can be hard to put a schedule on hard-hitting news. But, did you know that utilizing consistency in your email practices can actually help to improve your sender reputation?

The WHY:

By remaining uniform in certain areas of your email sending, you allow yourself to become more recognizable to both the recipients & the server. This makes it much more likely for recipients to remain engaged in your email content.

The HOW:

Some ways we can apply this method are as follows:

Series Edition: Section 2 - Authentication Protocols “Your Emails' Identity Crisis”

Your Emails Need an ID Card

SPF, DKIM, DMARC Explained (Without the Jargon)

Here’s an example: You write the ideal email. It has everything. You have a good copy and good design. You send it to 50,000 recipients. Gmail blocks your email.

Why?

Because you didn’t verify your identity.

This is called authentication, and you must do it.

The Trust Problem

These days, ISPs (Internet Service Providers: Gmail, Yahoo, Outlook, et al.) do not trust anything by default. The first thing they want to ask about an incoming email is whether it is legitimate and whether it really came from whoever the sender claims to be.

And why do they do that? Because spammers are sneaky. They use fake domain names, masquerade as your bank, clone organizations, and send you emails which are supposedly sent "from: [email protected]," whereas they were sent from some shady server located in Russia.

To establish authenticity, ISPs designed a special mechanism that we refer to as an email's ID card and authentication protocols!

But here's how things are different: In February 2024, just two years ago, Gmail and Yahoo implemented this rule. If you're not authenticated, and you're trying to send 5,000 emails per day, they will not be accepted or moved to the junk folder without any consideration for the content. You'll be rejected. And today, in 2026, there are even more severe measures in place. There are no temporary warnings from ISPs anymore. Your emails get immediately rejected.

So if you haven't set this up yet, you have a serious problem right now.

The Three Protocols

There are three authentication systems. They work together like a security team. SPF is your basic ID check. DKIM is your certified signature. DMARC is the enforcement layer.

SPF: The Clipboard

SPF stands for Sender Policy Framework. Here's the simple version: SPF is a whitelist.

You make a list of the servers that are allowed to send emails using your domain name. The email will be passed by Gmail if the email comes from any of those servers. Otherwise, the email will fail.

Imagine a bouncer with a list at the entrance of a nightclub. "Names on the list, come in. Not on the list? Then you can stay outside!"

Now here’s the downside: SPF checks the source only. However, a smart attacker can spoof an email if they know the right server. Yet it is crucial. Every domain need SPF.

DKIM: The Wax Seal

DKIM, which stands for DomainKeys Identified Mail, is tougher to spoof than SPF. This involves digitally signing your message, like stamping a wax seal on an envelope.

Here's how it works: Whenever you send an email, DKIM digitally signs it (this is done automatically by your email provider). Once the recipient gets your email, they authenticate this digital signature and ensure two things: (1) that it is genuinely from you, and (2) that it hasn’t been tampered with since sending.

ISPs consider DKIM very important when evaluating emails. If your email has been DKIM-signed, the ISPs give it priority. On the other hand, if it is unsigned, they are suspicious of it.

Good news: Your email provider takes care of DKIM signing automatically.

DMARC: The Boss

DMARC stands for Domain-based Message Authentication, Reporting & Conformance. It's the boss of the group. It combines SPF and DKIM and tells ISPs what to do when something goes wrong.

DMARC has two functions:

1. Enforcement: You inform ISPs about what should happen if an email fails SPF and/or DKIM. Should they reject the email? Quarantine it? Or should they simply monitor it?

2. Visibility: Reports come in that will let you know exactly what's going on in your authentication process.

Here's where you have some serious control and insight.

How They Work Together

SPF checks: Is this coming from an authorized server?

DKIM checks: Is this properly signed digitally?

DMARC policy: If either fails, this is your response.

All three work together to create a castle. Basically, you're saying, "Email security is important to me. IISPs can rely on my emails."

If one of them is missing, there is a vulnerability. The ISPs will take advantage of this by using more filtering.

And it must be monitored. You don’t set it up once and leave it alone.

Why ISPs Got Strict

ISPs are overwhelmed with spam. In fact, approximately 46% of email traffic consists of spam. Thus, ISPs are ruthless when it comes to filtering. And one of the first criteria is authentication.

If your email lacks SPF, DKIM, and DMARC authentication protocols, ISPs will instantly assume that you're a spammer. No "maybe" or "possibly." Assume. Because legitimate businesses always authenticate their messages. Professionals don't send unauthenticated emails. Spammers do.

When Google and Yahoo required authentication two years ago, they weren't being jerks. They were saying, "Look, we are overwhelmed with spam. If you want us to consider looking at your message, show us it isn't a scam."

Why ISPs Became a Bouncer

Approximately 46% of all email that is being sent at this very moment is spam. Yeah, about 46%. That's crazy!

Gmail receives 15 billion unsolicited emails EVERYDAY. Yes, you heard right. 15 BILLION!

That is why they decided to tell everyone that “Nobody can be trusted anymore. Everyone must show ID.”

Having SPF, DKIM and DMARC will mean that you are telling Gmail, “I’m here legally and I take security seriously.” Gmail listens to that.

Not having these three means that Gmail treats you as spam. Since only legitimate businesses authenticate emails.

The Death Spiral (This Is What Actually Happens)

1. You fail authentication -> ISPs won’t recognize you

2. ISPs won’t recognize you -> your emails go through filtering

3. Emails are filtered -> people ignore them -> ISPs see low user activity

4. ISPs see low user activity -> they’ll be stricter with filtering next time

5. You’re on the spam permanently -> nothing goes through anymore

And the worst part about it is that the recovery process is long. We’re talking about weeks or even months. You’re going to be struggling against Gmail and Yahoo to get off the spam blocklist. Your reputation is ruined. And even when you do fix the authentication, Gmail’s not going to trust you anytime soon.

But there’s no need for it at all. This is entirely preventable.

Real Talk

If you’re not positive that SPF, DKIM, and DMARC are configured, chances are good they’re not.

Check it right now. Seriously.

Look up “SPF DKIM DMARC checker,” type in your domain, and you’re done in five minutes. If there’s a problem, send an email to your email service provider ASAP. They’ll get it sorted out.

Not done setting them up. Better get started right now. Don’t wait. Do it today. Gmail and Yahoo aren’t playing games.

What You Need to Remember

Authentication is mandatory. This is true for Gmail and Yahoo, which will enforce it by 2026.

No authentication means automatic fraud. ISPs make no exceptions.

There are serious consequences for making mistakes. Loss of income. Reputational damage. Contractor expenses. Support costs. Loss of elections.

It takes time and money to rebuild your reputation. Preventative measures are less expensive than remedial ones.

You need SPF, DKIM, and DMARC, all three.

Next Section

Authentication is the first hurdle that ISPs put up for your emails. They need to confirm that your emails are authentic before looking at anything else.

But there's a second barrier: sender reputation.

Even when emails are perfectly authenticated, ISPs will still question if they should trust the sender by asking: “Are we sure about this sender?” The answer lies in various metrics such as how many users open your email, how often are you reported as spam, your history of sending, and whether you send to invalid email addresses.

If you walked up to a stranger on the street and asked them for $20, odds are they’re going to look at you like you're crazy and walk away. I cannot blame them; I’d do the same. Now… what if, instead, you engaged them in conversation, swapped contact information, developed a friendship over the course of many weeks, and THEN asked for $20? You might have a better shot.

Well, in some ways, email marketing is a lot similar. People are much more likely to support a cause that they are familiar with and trust. So, with that in mind, it might be time to consider how we can be building trust with our subscribers so that we see the most possible success with our emails.

This means that we need to provide content that makes the recipient feel valued as opposed to just another donor. Before we ask for money and support, we need to show the subscriber how much they matter to us; that we do not just care about their wallets.

So what kind of content can we send out that would align with this goal of building trust? I have a few ideas…

Newsletters and informational content

• These emails can be used to inform your recipients on your mission and the news you find most important. Subscribers will be able to see how their values align with your own and, in turn, may acquire more support for your cause.

Feedback

• Do not be afraid to ask your subscribers about their opinions. Whether you need advice on how to go about things or you’d like to know what you can do better in the future, your recipients should be the first people you ask. Their opinions matter most!

Prospecting

• Sometimes the easiest way we can appeal to our subscribers is to ask them what they care to hear about. Our Nucleus CRM allows us to quickly tag our recipients so we can be ensuring we are reaching out to them with their interests in mind.

These are just a few types of emails we can be sending to our subscribers to ensure that we are building trust before forcing asks down their throat. I think you’ll all find that embedding a little love and care into all of our emails will always pay off in the long run.

For more information regarding how to send less aggressive copy while yielding higher return, contact our team for training or insight and visit your Nucleus Resource Library!

OR