Why are IPv6 emails going to spam even with SPF?

Summary

Even when using SPF, IPv6 emails often end up in spam due to a confluence of factors. DKIM and DMARC are crucial for establishing trust and authenticating IPv6 emails, as legacy systems may not fully trust IPv6 based solely on SPF. Reputation plays a significant role, with ISPs often assigning reputation to larger IPv6 blocks, meaning a small part of a block's poor activity can affect the entire range. Older spam filters may not fully support IPv6, and some ISPs have inconsistent IPv6 support. New IPv6 addresses require careful warm-up to build a positive reputation. Content can trigger spam filters, and maintaining good list hygiene is essential. Reverse DNS (PTR) records need to be properly configured. Monitoring tools like Google Postmaster Tools and Microsoft SNDS can help identify deliverability issues, and checking against blocklists is recommended.

Key findings

  • DKIM/DMARC Essential: DKIM and DMARC are nearly mandatory for IPv6 to achieve good deliverability due to stricter authentication requirements.
  • Reputation Scope: IPv6 reputation is often assigned to larger address blocks (/56 or larger), affecting the deliverability of the entire block.
  • Legacy Systems: Legacy systems may not fully trust IPv6 with SPF alone, requiring stronger authentication methods.
  • New IP Warm-up: A careful warm-up process is essential to establish a positive reputation for new IPv6 addresses.
  • List Hygiene: Poor list hygiene can negatively impact IPv6 reputation and increase the likelihood of spam filtering.

Key considerations

  • Implement DKIM/DMARC: Implement and properly configure DKIM and DMARC for your IPv6 sending domain.
  • Monitor Reputation: Regularly monitor the reputation of your entire IPv6 address range using available tools.
  • Configure PTR Records: Ensure that your IPv6 address has a properly configured reverse DNS (PTR) record that matches your sending domain.
  • Warm-up Gradually: Start with a very low sending volume and gradually increase it over time to warm up new IPv6 addresses.
  • Maintain List Hygiene: Regularly clean your email list to remove invalid and unengaged addresses.
  • Check Blocklists: Periodically check your IPv6 address against known blocklists.
  • Review Content: Check email content, including links and formatting, for potential spam triggers.
  • Use Monitoring Tools: Utilize Google Postmaster Tools and Microsoft SNDS to monitor your IPv6 deliverability.

What email marketers say
10Marketer opinions

Even with SPF in place, IPv6 emails often land in spam due to factors such as strict enforcement of authentication (DKIM and DMARC), poor or new IP reputation, older spam filters not fully supporting IPv6, issues with reverse DNS records (PTR), content triggering filters, inadequate IP warmup, ISP inconsistencies, and poor list hygiene.

Key opinions

  • Authentication: DKIM and DMARC are crucial for IPv6 deliverability, often more so than for IPv4.
  • Reputation: IPv6 address reputation is a significant factor, with new or shared ranges often having a lower score.
  • Reverse DNS: Properly configured reverse DNS (PTR) records are essential for IPv6 addresses.
  • Spam Filters: Older spam filters may not fully support IPv6, leading to misclassification.
  • Content Sensitivity: Content filters can be more sensitive with new or less reputable IPv6 addresses.
  • IP Warmup: New IPv6 addresses require a 'warmup' period to establish a positive sending reputation.
  • List Hygiene: Poor list hygiene negatively impacts IPv6 reputation and increases spam filtering.

Key considerations

  • Implement DKIM/DMARC: Ensure DKIM and DMARC are correctly configured alongside SPF.
  • Monitor Reputation: Actively monitor the reputation of your IPv6 address range.
  • Configure PTR Records: Verify that your IPv6 address has a properly configured reverse DNS record.
  • IP Warmup: Gradually increase sending volume from new IPv6 addresses.
  • Segment and Test: Segment your list and test deliverability with smaller volumes of IPv6 email.
  • Review Content: Review email content for spam triggers.
  • List Hygiene: Maintain a clean and engaged email list.
Marketer view

Email marketer from Marketing Discussions shares that poor list hygiene (sending to old, invalid, or unengaged email addresses) can hurt your IPv6 reputation and cause spam filtering. Always maintain a clean and engaged email list.

September 2023 - Marketing Discussions
Marketer view

Email marketer from Email Marketing Forum mentions the importance of having a properly configured reverse DNS (PTR) record for the IPv6 address, matching the sending domain. A missing or incorrect PTR record can negatively impact deliverability.

April 2024 - Email Marketing Forum
Marketer view

Email marketer from Email Marketing Tips Site notes that sometimes the issue isn't IPv6 itself, but the content of the email triggering spam filters due to keywords, links, or formatting. Content filters might be more sensitive with new or less-reputable IPv6 addresses.

January 2023 - Email Marketing Tips Site
Marketer view

Email marketer from Email Marketing Community mentions that some ISPs might require both SPF and DKIM records to pass for IPv6, even if SPF technically passes alone. They advise to always implement both authentication methods.

June 2021 - Email Marketing Community
Marketer view

Email marketer from Reddit shares that many older spam filters don't properly handle IPv6 addresses, leading to misclassification even with SPF. He suggests ensuring the IPv6 address has a clean reputation and is not on any blacklists, as well as properly setting up DKIM.

April 2024 - Reddit
Marketer view

Email marketer from Email Deliverability Blog shares that some ISPs still have less-than-perfect IPv6 support, leading to inconsistent filtering. Try segmenting your list and sending a smaller volume of IPv6 email to test deliverability.

June 2023 - Email Deliverability Blog
Marketer view

Email marketer from StackExchange responds that although SPF passes, the IPv6 address range might be relatively new or shared, leading to a lower reputation score. She recommends warming up the IPv6 address gradually and monitoring its reputation.

December 2024 - StackExchange
Marketer view

Email marketer from Email Service Provider Forum responds that even with SPF, a new IPv6 address needs a 'warmup' period. Start with very low volumes of mail and gradually increase over weeks to establish a positive sending reputation.

May 2024 - Email Service Provider Forum
Marketer view

Marketer from Email Geeks confirms that IPv6 addresses can have a reputation and may be treated with suspicion because it is easy to 'shoeshine'.

October 2024 - Email Geeks
Marketer view

Marketer from Email Geeks shares that Google is strict on IPv6 emails lacking proper authentication (SPF and DKIM), having poor reputation, or being associated with spam. A new IPv6 address may also be treated with a poor reputation.

March 2023 - Email Geeks

What the experts say
3Expert opinions

Experts agree that IPv6 emails often land in spam despite SPF due to a combination of factors. IPv6 reputation is crucial and applies to larger address blocks (/56 or bigger), so monitoring the entire range is important. Authentication is also strictly enforced, making DKIM and DMARC almost mandatory for deliverability. While content and mailstream reputation are important, IPv6 has no legacy support for unauthenticated mail.

Key opinions

  • IPv6 Reputation Range: IPv6 reputation applies to larger address blocks (/56 or bigger), affecting the entire range.
  • Strict Authentication: Authentication is more strictly enforced on IPv6; DKIM and DMARC are almost mandatory.
  • No Legacy Support: IPv6 lacks legacy support for unauthenticated mail, unlike IPv4.

Key considerations

  • Range Monitoring: Carefully monitor the reputation of your entire IPv6 address range.
  • Implement DKIM/DMARC: Ensure DKIM and DMARC are correctly configured for IPv6 sending.
  • Mailstream and Content: Pay attention to mailstream and content reputation in addition to IPv6 specific factors.
Expert view

Expert from Email Geeks explains that IPv6 does have a reputation, usually applying to at least /56s, and probably bigger. Also, since there are no legacy IPv6 sources of mail there's no need to support unauthenticated mail from IPv6. However, similar to IPv4, it's less important than mailstream and content reputation.

September 2023 - Email Geeks
Expert view

Expert from Spam Resource, John Levine, responds that one reason IPv6 emails go to spam is that IPv6 address blocks are often assigned in larger chunks than IPv4, and if a small part of a block gets a bad reputation, the entire block can be affected. He recommends carefully monitoring the reputation of your entire IPv6 range.

February 2022 - Spam Resource
Expert view

Expert from Word to the Wise, Laura Atkins, shares that one of the significant reasons IPv6 email ends up in spam even with SPF is that authentication is more strictly enforced on IPv6 than on IPv4. She suggests that besides SPF, DKIM and DMARC are almost mandatory for IPv6 to achieve decent deliverability.

December 2023 - Word to the Wise

What the documentation says
6Technical articles

Even with SPF, IPv6 emails often land in spam because legacy systems may not fully trust IPv6 without DKIM. Maintaining a positive sender reputation is crucial, and IPv6 addresses are treated similarly to IPv4 addresses regarding reputation. Anti-spam best practices include robust authentication (SPF, DKIM), accurate reverse DNS records, and volume control. Checking against blocklists, like those maintained by Spamhaus, and using tools like Google Postmaster Tools and Microsoft SNDS for monitoring, can help identify and resolve deliverability issues. Implementing DMARC is recommended for enhanced trust and prevention of email spoofing.

Key findings

  • DKIM Crucial: DKIM is essential for IPv6 deliverability, as legacy systems may not fully trust IPv6 without it.
  • Reputation Matters: A positive sender reputation, including IPv6 reputation, is vital for inbox placement.
  • Authentication: Robust authentication techniques (SPF, DKIM) and accurate reverse DNS records are recommended.
  • Blocklist Checks: Being listed on IPv6 blocklists, such as those maintained by Spamhaus, can cause deliverability issues.
  • Monitoring Tools: Tools like Google Postmaster Tools and Microsoft SNDS help identify and resolve IPv6 deliverability issues.
  • Implement DMARC: Implementing DMARC improves trust with ISPs and prevents email spoofing.

Key considerations

  • Implement DKIM: Implement DKIM in addition to SPF for IPv6 email.
  • Monitor Reputation: Monitor your IPv6 reputation using available tools.
  • Check Blocklists: Regularly check your IPv6 address against blocklists.
  • Configure rDNS: Ensure accurate reverse DNS records are set up for your IPv6 address.
  • Use Monitoring Tools: Utilize Google Postmaster Tools and Microsoft SNDS to identify issues.
  • Implement DMARC: Implement DMARC for enhanced security and trust.
Technical article

Documentation from Google Postmaster Tools explains that while SPF is a good start, DKIM is crucial for IPv6, especially since many legacy systems may not fully trust IPv6 without it. Also, monitor spam rates via Postmaster Tools to identify any deliverability issues specific to IPv6.

October 2023 - Google
Technical article

Documentation from Microsoft SNDS shares that they use their own reputation system, and IPv6 addresses are treated like any other IP. It advises regularly checking the SNDS portal for any issues related to your sending IPs, including IPv6.

December 2022 - Microsoft
Technical article

Documentation from Validity discusses the importance of maintaining a positive sender reputation, which includes IPv6. They emphasize that reputation is a key factor in determining whether email reaches the inbox, regardless of authentication protocols.

March 2025 - Validity
Technical article

Documentation from Spamhaus details that they also maintain IPv6 blocklists, and being listed on one of them will definitely cause deliverability issues. Check your IPv6 address against their blocklists to ensure it's clean.

November 2024 - Spamhaus
Technical article

Documentation from DMARC.org responds that for IPv6, like IPv4, implementing DMARC can increase trust by ISPs and help prevent email spoofing. DMARC requires both SPF and DKIM to be properly aligned, making it an important step for IPv6 email deliverability.

January 2025 - DMARC.org
Technical article

Documentation from RFC Editor details recommended anti-spam best practices for IPv6 mail streams, mentioning authentication, reputation, and volume control as important mechanisms for IPv6 email to be considered legitimate. It advises administrators to implement robust authentication techniques like SPF and DKIM and maintain accurate reverse DNS records.

May 2022 - RFC Editor