In this article (16 sections)
A customer books an appointment on your website. Your system sends the confirmation. They never see it. They're standing on a train platform, phone in hand, wondering if the booking went through.
You check your sent folder. The email is there. It left fine. It just never reached their inbox. When your emails are going to spam, the cause is usually not your customer or your software. It's three DNS records that tell Gmail the email is really yours.
Quick answer: Most booking confirmations, quotes and invoices go to spam because Gmail can't prove they came from you: the domain has no SPF, no DKIM, or no DMARC record. In our check of 466 Orange County business domains on 4 Nov 2026, 47.9% had no DMARC record. Diagnosing emails going to spam takes five minutes; most fixes are DNS changes, not a new website.
Customers saying "I never got your email"? We'll test your domain's SPF, DKIM and DMARC with your website forms and tell you which cause it is. Get a free website and email check
How common is it for local business emails to go to spam?
Short answer: common enough that it's the default, not the exception. In our study of 466 Orange County business domains that receive email on their own domain, 223 (47.9%) had no DMARC record and 76 (16.3%) had no SPF record.
Another 12 domains published two SPF records. That's an invalid setup: a domain may have only one, so mail servers treat both as broken. Only 77 domains (16.5%) had DMARC set to quarantine or reject, the strongest proof a domain can give an inbox.
The full method and the provider and industry splits are in our email spoofing study.
| Cause | What it means | 5-minute test |
|---|---|---|
| No SPF, or two SPF records | Inboxes can't tell which servers may send as your domain | Gmail "Show original": SPF line |
| Form or booking tool sends as you without DKIM | A tool puts your domain in From but isn't authorized | Same report: DKIM line |
| No DMARC record | No policy tells Gmail what to do when checks fail | Same report: DMARC line missing or FAIL |
| Form sends from a free Gmail address | From says gmail.com, the signature says your business | Read the sender on a form email you receive |
| Phishing-like links, attachments or wording | Filters score the content, not only the sender | Compare a plain-text test with your real template |
| New or cold domain sending a burst | No sending history, sudden volume | Domain age and daily send count |
Sources: causes from Google's email sender guidelines; domain rates from the RankMeHi study, DNS checked 4 Nov 2026.
Signs your emails are going to spam
Short answer: the clearest sign of emails going to spam is a pattern of customers who act surprised by messages you know you sent, so track it for a week before you change anything.
Watch for these four signs:
- Customers book online but call to ask if the booking went through.
- No-shows say they never got a reminder.
- Quote requests go quiet after you reply, then the customer asks for the quote again.
- A test message to your own Gmail lands in the Spam folder or under Promotions.
One sign can be bad luck. Two or more in the same week means your emails are going to spam for a reason you can find. Write down which kind of email each one was (confirmation, reminder, quote, invoice), because each kind often comes from a different tool, and the tool is where the fix lives.
How does Gmail decide if your email goes to the inbox or to spam?
Short answer: Gmail first checks whether your domain vouches for the message with SPF, DKIM and DMARC, then scores the content and your sending history; fail the first check and the rest barely matters.
Here's what each record does, in plain words:
- SPF (Sender Policy Framework) lists the servers allowed to send email for your domain. If your booking tool sends for you but isn't listed, SPF fails.
- DKIM (DomainKeys Identified Mail) is a signature on each message. It proves the email wasn't changed on the way and came from a system you authorized.
- DMARC (Domain-based Message Authentication, Reporting and Conformance) tells Gmail what to do when SPF or DKIM fails, and sends you reports.
Since February 2024, Google and Yahoo require bulk senders (5,000+ messages a day to their users) to have all three, and every sender to have at least SPF or DKIM. Yahoo's version is on its sender best practices page. A salon sending 40 confirmations a day isn't a bulk sender, but the baseline still applies. If Gmail cannot prove the email is yours, it treats it like a stranger's.
Cause 1 of emails going to spam: no SPF record, or two of them
Short answer: without one valid SPF record, Gmail has no list of who may send for you, so every message starts under suspicion.
76 of 466 domains in our study had no SPF at all. The quieter problem is the 12 with two records. That usually happens when a new tool's setup guide says "add this SPF record" and someone adds a second one instead of merging it into the first.
The fix is one merged line that names every sender, ending in ~all or -all. A second record doesn't add a sender. It breaks the first one.
Cause 2: Your website form or booking tool sends as you, without DKIM
Short answer: booking, scheduling and form tools often send from an address on your domain, and unless that tool is in your SPF record and signs with DKIM for your domain, Gmail sees an unverified sender using your name.
A confirmation from bookings@yourbusiness.com looks right to a person. To Gmail it's a claim. The tool's sending server has to be in your SPF record, and it has to sign with a DKIM key published on your domain.
Most tools have a "domain authentication" or "custom sending domain" page that gives you two or three DNS records to add. The fix isn't to drop the tool. It's a one-time setup, not a monthly chore.
Cause 3: No DMARC record (47.9% of local domains)
Short answer: DMARC is the record most owners never add, because nobody touches DNS after the website launches; in our study 223 of 466 domains had none and 165 more stopped at p=none.
p=none means "watch and report." It's a fine first step, but it gives Gmail no instruction to trust you more. Only 77 domains (16.5%) reached quarantine or reject.
Mail on Google was no exception. Of the 164 domains in our study whose mail runs through Google, 77 had no DMARC record. Using a big mail provider doesn't add the record for you.
Cause 4: Your website form sends from a free Gmail address
Short answer: if your contact form sends from a free @gmail.com or @yahoo.com address while the email says it's from your business, inboxes see a mismatch that looks like phishing.
This happens when a form gets set up in a hurry at launch with whatever mailbox was handy, and nobody revisits it. Gmail can't vouch for a gmail.com address sent from your web server, so it fails DMARC by design.
The fix is to send form mail from an address on your own domain, through a service that's in your SPF record. Your web designer can change this in an afternoon.
Cause 5: Links, attachments and wording that look like phishing
Short answer: SPF, DKIM and DMARC prove who sent the message, but filters still score what's inside it, so a fully authenticated email can still land in spam.
Shortened links, attachments from an unusual pattern, images with no text, and urgent lines like "action required immediately" all raise a message's spam score. A confirmation with your address, the date, the time and one link to your own domain looks like a confirmation. A confirmation with three tracking links and a PDF looks like a trap.
Cause 6: A new or cold domain sending a burst
Short answer: a domain with no sending history that suddenly sends hundreds of messages looks like a spammer's fresh domain, so start slow on a new domain or after a long quiet period.
If you just moved to a new domain, or you're sending a holiday promo to your whole list for the first time in a year, send in smaller batches over a few days. Keep your confirmations on the main domain and your promotions on a separate subdomain if your provider supports it.
The 5-minute "Show original" test
Short answer: send an email from your business address to a Gmail account, open it, choose "Show original," and read three lines: SPF, DKIM and DMARC should each say PASS.
- From your business email (and separately, from your booking tool or website form), send a message to a Gmail address you control.
- Open the message in Gmail on a computer.
- Click the three vertical dots at the top right of the message.
- Choose "Show original." Google's own steps are on its help page for message headers.
- Read the SPF, DKIM and DMARC lines at the top. PASS, PASS, PASS is the goal.
If your emails are going to spam, any FAIL, SOFTFAIL, NEUTRAL or missing line is your starting point. Test each tool separately: your mailbox can pass while your booking tool fails.
Got a FAIL you can't explain? Forward us the "Show original" text. We'll tell you which record is wrong and what to change. Get a free website and email check
What order should you fix it in, and what do you ask your web designer?
Short answer: fix SPF first, then DKIM for every tool that sends as you, then DMARC at p=none with reports, and only then look at content and volume.
Send these five questions to your web designer, or whoever manages your domain:
- "What is our SPF record, and does it list every tool that sends as our domain, including the booking tool and the website form?"
- "Is DKIM set up for each of those tools, on our domain?"
- "Do we have a DMARC record, what's the p= value, and who gets the reports?"
- "Does our website form send from our own domain or from a free Gmail address?"
- "When we add a new tool that sends email, who updates SPF and DKIM?"
| Step | Who does it | Typical time |
|---|---|---|
| Merge SPF into one line | Web designer or domain host | 1 hour |
| DKIM for each sending tool | Same, inside each tool's settings | 1 hour per tool |
| DMARC p=none with rua | Same | 15 minutes, then 2-4 weeks of reports |
| Form sends from your domain | Web designer | An afternoon |
| Content and batch sizes | You | Next send |
Sources: times are our own working estimates for a small business with 2 to 5 sending tools.
Vague answers to these questions mean nobody is watching your email for you.
When you don't need an email audit
Short answer: if every tool passes SPF, DKIM and DMARC in the Show original test and your DMARC policy is already quarantine or reject, your setup is fine and the spam problem is content or volume.
In that case, simplify the template, cut the extra links and send in smaller batches. Don't pay anyone, us included, to fix a record that already passes.
What RankMeHi does about it
Short answer: RankMeHi, a web design and SEO studio in Orange County, California, checks your email records as part of a free website audit and fixes them in its audit and fix service from $490.
The free audit comes back within one business day and names which of the six causes applies to your domain. If you want it fixed, audit and fix starts at $490, takes 1 to 2 weeks and has no hourly rate. Forms that send from your own domain are part of every site we build in our web design and web development work, so the next confirmation lands where your customer looks.
If your site also gets visits but no calls, start with why your website isn't bringing you leads. A confirmation in spam is one of the quieter ways a booked lead disappears.
Key takeaways
- Emails go to spam mostly because Gmail can't verify the sender: missing or broken SPF, DKIM or DMARC.
- 47.9% of 466 Orange County business domains had no DMARC record and 16.3% had no SPF (DNS checked 4 Nov 2026).
- Booking tools and website forms are the usual blind spot: they send as you without being authorized.
- The Gmail "Show original" test shows SPF, DKIM and DMARC results in five minutes; test every tool separately.
- Fix in order: one SPF line, DKIM per tool, DMARC p=none with reports, then content and volume.
FAQ
Why are my emails going to spam when they used to work?
The usual reason is a change nobody connected to email. A new booking tool, a second SPF record, a website rebuild that moved the contact form, or stricter Gmail rules since February 2024. Run the Show original test on each tool; whichever one fails is the change that broke it.
How much does it cost to fix emails going to spam?
The DNS records themselves are free to add at your domain host. The cost is the time to find every tool that sends as you and set them up correctly. RankMeHi's audit and fix service starts at $490 with no hourly rate, after a free check that shows what's wrong first.
How long does it take to fix email authentication?
The diagnosis takes five minutes with the Gmail Show original test. SPF and DKIM changes usually take effect within hours of being published. DMARC needs two to four weeks of reports at p=none before it's safe to enforce. A full audit and fix with RankMeHi takes 1 to 2 weeks.
Will SPF, DKIM and DMARC guarantee my emails reach the inbox?
No. Authentication removes the biggest reason Gmail distrusts a small business sender, but filters still score content and sending history. Links, attachments, urgent wording and sudden bursts can still push an authenticated email into spam.
Why do my booking confirmations go to spam but my normal emails don't?
Because they come from a different system. Your mailbox may pass SPF and DKIM while your booking tool sends as your domain without being authorized. Send a test booking to a Gmail address and run Show original on that confirmation, not on a normal email.
Can a website contact form cause emails to go to spam?
Yes. If the form sends from a free Gmail address, or from your domain through a server that isn't in your SPF record, Gmail can't verify it. Ask your web designer to send form mail from an address on your own domain through an authorized service.
Get your confirmations back in the inbox
"I never got your email" is usually three DNS records and one forgotten tool. Five minutes with a test email tells you which. If the answer isn't PASS, PASS, PASS, send us your domain for a free website and email check and we'll tell you what to change, in order.
Services mentioned in this article
RankMeHi designs and builds business websites, then makes sure they are found and convert. Start with the two pages below.
Keep reading
Can Someone Email as Your Business? Our Email Spoofing Study of 466 Local Firms
Email spoofing study: we checked the DNS of 466 local businesses on 4 Nov 2026. 83.5% can't stop a fake email in their name. Check yours in five minutes.
Read article
Why Your Website Isn't Bringing You Leads — and What to Fix First
A website that doesn’t generate leads often has three major problems: poor design that reduces trust, low search visibility that limits traffic, and unclear calls-to-action that fail to convert visitors. Fixing these in order — starting with design, then SEO, then conversion elements — improves results faster than tackling them randomly. You built the website. …
Read article
We Tested 662 Local Business Websites in Orange County. Here's What Actually Works
Local business website study 2026: we tested 662 Orange County sites. 15% don't load, 26% lack tap-to-call and only 7% pass Google's mobile speed test.
Read article
Website Maintenance Services: What's Included, What It Costs, and What Happens If You Skip It
What do website maintenance services include, and what should they cost? See 2026 prices, a monthly checklist, and how to choose a plan that protects leads.
Read article