Why are Zendesk Sell emails sent via Google API landing in Outlook/Hotmail spam despite passing SPF, DKIM, and DMARC?

Summary

Despite passing SPF, DKIM, and DMARC, Zendesk Sell emails sent via Google API may land in Outlook/Hotmail spam due to several technical and reputational factors. These include EC2 system configuration issues (EHLO, rDNS), Google Workspace IP reputation, general email configuration problems, complex filtering mechanisms beyond authentication, subdomain DMARC policies, improper bounce handling, incorrect return-path configuration, spam patterns created by the integration, content triggering spam filters, recipient spam complaints, volume spikes, and poor list hygiene. Addressing these requires a multi-faceted approach encompassing technical fixes, reputation management, and adherence to email best practices.

Key findings

  • EC2 Configuration: Incorrect EC2 configuration (EHLO, rDNS) can trigger spam filters.
  • IP Reputation (Google): Low sending volume and poor Google Workspace IP reputation can cause filtering.
  • Email Misconfiguration: Incorrect email configuration can affect email deliverability even with proper authentication
  • Advanced Filtering: Outlook/Hotmail uses filters beyond SPF, DKIM, DMARC, including user complaints and content analysis.
  • Sender Reputation: Low sender reputation (spam complaints, low engagement) leads to spam filtering.
  • Subdomain Policies: Incorrect subdomain DMARC policies cause deliverability issues.
  • Bounce Handling: Improper bounce handling damages sender reputation.
  • Integration Patterns: Zendesk Sell/Google Workspace integration creates spam patterns.
  • Content Issues: Spam trigger words or broken HTML flag emails as spam.
  • Volume Spikes: Sudden volume increases trigger spam filters.
  • List Hygiene: Old/unengaged addresses act as spam traps.
  • Return Path: Incorrect return path settings cause reduced deliverability rates
  • Poor subject lines: If the subject lines of the emails sent are not clear, concise and overly promotional this can lead to email's landing in the spam folder.

Key considerations

  • Fix EC2 Configuration: Correct EHLO and rDNS settings on the EC2 server.
  • IP Warm-Up: Gradually increase sending volume to warm up the Google Workspace IP.
  • Outbound Relay: Try a dedicated outbound relay or scrub headers with an MTA.
  • Authentication Setup: Check authentication setup in Zendesk Sell.
  • Monitor Reputation: Use Google Postmaster Tools and Microsoft SNDS.
  • Feedback Loops: Use feedback loops to monitor and reduce spam complaints.
  • List Management: Regularly clean your email list.
  • Volume Ramp-Up: Gradually increase sending volume.
  • Content Analysis: Analyze email content with spam testing tools.
  • Subdomain DMARC: Configure DMARC policies for subdomains.
  • Handle Bounces: Implement email bounce processing.
  • Email Configuration: Use mail flow logs and check settings for email configuration
  • Return path: Implement an email configuration check to ensure the return-path is setup correctly.
  • Use high quality subject lines: Always use subject lines that are clear, concise and not overly promotional

What email marketers say
11Marketer opinions

Even when SPF, DKIM, and DMARC are correctly implemented, Zendesk Sell emails sent via Google API may still land in Outlook/Hotmail spam due to a variety of factors. These factors include the reputation of Zendesk Sell's shared IPs, content triggering spam filters, recipient spam complaints, sudden spikes in email volume, poor list hygiene (old/unengaged addresses), issues in the email setup (like improper return path) and poorly optimised subject lines. Monitoring sender reputation and implementing best practices in content, list management, and sending volume are crucial for improving deliverability.

Key opinions

  • IP Reputation: Shared IPs used by Zendesk Sell can have a negative reputation due to other users' sending practices, leading to filtering even with proper authentication.
  • Spam Patterns: The integration between Zendesk Sell and Google Workspace may create email patterns that are recognized as spam by Microsoft's filters.
  • Content Issues: Specific email content, such as spam trigger words, excessive images, or broken HTML, can trigger spam filters despite authentication.
  • Recipient Complaints: High spam complaint rates from recipients can significantly damage sender reputation and lead to spam filtering.
  • Volume Spikes: Sudden increases in email volume, especially from new integrations, can trigger spam filters as a protective measure.
  • List Quality: Old or unengaged email addresses can act as spam traps, harming sender reputation and deliverability.
  • Poor email configuration: Improper email configuration, such as setting the return-path incorrectly, can negatively affect deliverability even with authentication.
  • Poor subject lines: If the subject lines of the emails sent are not clear, concise and overly promotional this can lead to email's landing in the spam folder.

Key considerations

  • Dedicated IP: Consider using a dedicated IP address for sending emails to maintain a good sender reputation.
  • Content Analysis: Use spam testing tools to analyze email content and avoid spam triggers.
  • Feedback Loops: Implement feedback loops to monitor spam complaints and address the underlying issues.
  • List Management: Regularly clean your email list to remove old, unengaged, and potentially harmful addresses.
  • Volume Ramp-Up: Gradually increase email volume to establish trust with mailbox providers and avoid triggering spam filters.
  • Reputation Monitoring: Track sender reputation using tools like Google Postmaster Tools and Microsoft SNDS to identify and address any deliverability issues.
  • Compare Headers: Compare email headers between Zendesk Sell sent messages vs a direct Gmail sent message to identify inconsistencies or potential issues.
  • Check email configuration: Check mail flow logs to correctly configure your email settings.
  • Check email configuration: Ensure the email subject lines that are used are clear, concise and not overly promotional.
Marketer view

Email marketer from Super User shares that shared IPs used by services like Zendesk Sell can have a negative impact on deliverability if other users are sending spam. He recommends using a dedicated IP address for sending emails to maintain a good sender reputation.

January 2025 - Super User
Marketer view

Email marketer from Reddit suggests that even with proper SPF, DKIM, and DMARC, third-party applications like Zendesk Sell can still cause deliverability issues due to their IP reputation or email formatting. He recommends checking if Zendesk Sell's IP is blacklisted and ensuring proper email authentication setup within Zendesk Sell.

February 2025 - Reddit
Marketer view

Email marketer from Email Marketing Forum shares that tracking sender reputation with tools like Google Postmaster Tools and Microsoft SNDS is key. Low reputation can lead to spam filtering, despite authentication.

December 2022 - Email Marketing Forum
Marketer view

Email marketer from ActiveCampaign shares that poor email subject lines can lead to emails being marked as spam, and suggests always using subject lines that are clear, concise and not overly promotional.

December 2022 - ActiveCampaign
Marketer view

Email marketer from EmailDrip Blog explains that a poor sender reputation, even with correct authentication, can result in emails landing in spam. They advise monitoring bounce rates, complaint rates, and engagement metrics to maintain a positive reputation.

February 2022 - EmailDrip Blog
Marketer view

Marketer from Email Geeks suggests to compare email headers from Zendesk Sell (the Google integration) with emails sent directly from gmail and check for comp auth failures.

November 2021 - Email Geeks
Marketer view

Email marketer from Stackoverflow responds that the issue might be with recipients marking emails as spam. Even with authentication, high spam complaints can damage reputation. He suggests using feedback loops to monitor complaints and improve list management practices.

October 2023 - Stackoverflow
Marketer view

Email marketer from Mailjet shares that certain email content, such as spam trigger words, excessive use of images, or broken HTML, can cause emails to be flagged as spam even with proper authentication. They suggest using spam testing tools to analyze email content before sending.

October 2022 - Mailjet
Marketer view

Email marketer from MarketingPro shares that old or unengaged email addresses are likely spam traps and can damage the sender's reputation and decrease email deliverability rates. He/She suggests implementing a strategy to clean your email list to improve email deliverability rates.

March 2025 - MarketingPro
Marketer view

Marketer from Email Geeks explains that the integration between Zendesk Sell and Google Workspace might be creating a pattern that is being matched against known spam. They suggest trying a dedicated outbound relay. As a 'cowboy fix', they propose putting an MTA in the middle to scrub the headers before passing on to Google, or relaying through SES to remove source headers.

September 2023 - Email Geeks
Marketer view

Email marketer from Email Deliverability Blog responds that sudden spikes in email volume from new integrations like Zendesk Sell can trigger spam filters, even if authenticated. Ramp up volume slowly to establish trust with mailbox providers.

February 2024 - Email Deliverability Blog

What the experts say
4Expert opinions

Even with proper email authentication (SPF, DKIM, DMARC), Zendesk Sell emails sent via Google API can end up in Outlook/Hotmail spam folders due to several expert-identified reasons. These include the EC2 configuration Zendesk uses (specifically the EHLO and rDNS), Google Workspace IP address reputation issues, and general email configuration problems. Addressing these underlying technical and reputation-based factors can improve deliverability.

Key opinions

  • EC2 Configuration Issues: Zendesk's EC2 system configuration, particularly the 'localhost' EHLO and lack of custom rDNS, can trigger spam filters at Hotmail due to 2nd received line filtering.
  • Google Workspace IP Reputation: A low sending volume combined with a potentially poor reputation of Google's IP addresses can cause Microsoft to filter emails.
  • Improper Email Configuration: General email misconfiguration can affect email deliverability even when the key email authentication methods are implemented correctly.

Key considerations

  • Fix EC2 Configuration: Consult with a competent vendor to correct the EHLO and rDNS settings on the EC2 server.
  • IP Warm-Up: Gradually increase sending volume to legitimate recipients to warm up the Google Workspace IP address and improve its reputation.
  • Review email configuration: Review email configuration by looking at mail flow logs and correct any errors to improve email deliverability rates.
Expert view

Expert from Email Geeks initially suggests that the DKIM signature might be the issue, recommending that it should be signed with the user's domain instead of Zendesk's/Amazon's. However, after reviewing the DKIM setup, they determine that it's configured correctly, ruling out an easy fix in that area. Also suggests the domain reputation could be an issue.

November 2022 - Email Geeks
Expert view

Expert from Email Geeks suggests the issue may stem from the configuration of the EC2 system Zendesk is using to connect to Google, specifically the EHLO being 'localhost' and the lack of custom rDNS. This configuration isn't resolved by relaying through Google and could be triggering 2nd received line filtering by Hotmail, which is causing the spam issue. They suggest finding a competent vendor to fix the EC2 server configuration.

April 2023 - Email Geeks
Expert view

Expert from Word to the Wise explains that one potential cause for deliverability issues when sending via Google Workspace (even with proper authentication) is a poor reputation associated with Google's IP addresses, especially if the volume from a particular sender is low. This can cause filtering at Microsoft (Outlook/Hotmail) due to reputation or rate limiting issues. She suggests warming up the Google Workspace IP by sending consistent volume to legitimate recipients.

July 2023 - Word to the Wise
Expert view

Expert from Spamresource shares that a common issue is an improper email configuration which can negatively affect deliverability even when SPF, DKIM, and DMARC is setup correctly. It suggests using mail flow logs to correctly configure your email settings and improve email deliverability rates.

February 2024 - Spamresource

What the documentation says
5Technical articles

Even when SPF, DKIM, and DMARC are correctly implemented, emails sent via Google API can land in Outlook/Hotmail spam due to several reasons outlined in official documentation. These reasons include complex filtering mechanisms beyond authentication, subdomain DMARC policies, improper bounce handling, and return-path configuration. Maintaining good sender reputation, consistent sending practices, and proper technical configuration are crucial for deliverability.

Key findings

  • Advanced Filtering: Outlook/Hotmail utilizes multiple filtering mechanisms besides SPF, DKIM, and DMARC, including user complaints, content analysis, and sender reputation.
  • Sender Reputation: Google and Microsoft emphasize the significance of sender reputation, which is influenced by spam complaint rates, engagement metrics, and list hygiene.
  • Subdomain Policies: DMARC policies for subdomains, if not explicitly set, can cause deliverability problems if the sending source is not properly authorized.
  • Bounce Handling: Incorrectly handling email bounces can negatively affect your sender reputation and lead to reduced deliverability rates.
  • Return-Path Configuration: Incorrectly configuring the return-path is critical when sending via a third-party tool such as Zendesk Sell and can negatively affect deliverability rates.

Key considerations

  • Monitor Reputation: Monitor sender reputation using tools like Microsoft SNDS to identify and address deliverability issues.
  • List Hygiene: Maintain proper list hygiene, which is the process of regularly cleaning email lists to remove unused or spam email addresses.
  • Subdomain DMARC: Ensure DMARC policies are correctly configured for all subdomains used for sending emails.
  • Handle Bounces: Implement email bounce processing to lower your sender reputation and increase email deliverability rates.
  • Configure return-path: Make sure to correctly configure the return-path to ensure your email is set up correctly.
Technical article

Documentation from RFC shares how important it is to correctly configure the return-path in your email setup when using a third-party tool such as Zendesk Sell. If the return-path is incorrect this will negatively impact deliverability rates.

March 2022 - RFC Documentation
Technical article

Documentation from Hotmail Postmaster explains that how you handle email bounces matters to Microsoft's spam filtering algorithms. Failure to handle bounces properly can lower your sender reputation and decrease email deliverability rates.

October 2024 - Hotmail Postmaster
Technical article

Documentation from Google Postmaster Tools details Gmail's bulk sender guidelines, emphasizing the importance of consistent sending volumes, low spam complaint rates, and proper list hygiene. It recommends using authentication methods like SPF, DKIM, and DMARC, but also highlights the significance of sender reputation and engagement.

December 2021 - Google Postmaster Tools
Technical article

Documentation from RFC explains that while SPF, DKIM, and DMARC may pass for the main domain, DMARC policies for subdomains, especially if not explicitly set, can cause deliverability issues if the sending source (Zendesk Sell) is not properly authorized for that subdomain.

September 2023 - RFC Documentation
Technical article

Documentation from Microsoft Support explains that Outlook/Hotmail uses various filtering mechanisms beyond SPF, DKIM, and DMARC, including user complaints, content analysis, and sender reputation. It advises monitoring your sender reputation using Microsoft's SNDS program.

September 2023 - Microsoft Support