Last post I got the auth records green on my side-project mail. SPF, DKIM, DMARC all passing, and I figured the hard part was behind me.
It wasn't. The first real campaign, about four thousand people, mostly never reached an inbox. Nothing bounced and nothing got rejected, it just got held back and quietly filtered. Every record still validated. Auth was perfect. Placement was terrible.
That gap took me an embarrassingly long time to understand, so here it is up front: authentication proves the mail is really from you. It says nothing about whether anyone should want it. A domain that started sending three days ago has no track record, and to Gmail one suddenly pushing 4,000 messages looks exactly like a compromised box or a spammer who registered a throwaway that morning. So it gets treated like one.
Reputation is a separate thing from auth, and it starts at zero
There are two reputations in play and neither of them cares that your DKIM signature validates.
Your IP reputation is tied to the address the mail actually leaves from. On a shared SES-style pool you inherit whatever the neighbours have been doing lately. On a dedicated IP you start from nothing.
Your domain reputation is tied to the domain in your From address, and it follows you everywhere, across every IP you ever send from. This is the one that matters long term, and on a fresh domain it is a blank page.
And a blank page doesn't get read as neutral. For a brand-new domain the default lean is "suspicious until proven otherwise," because the overwhelming majority of new domains sending real volume genuinely are junk. You're guilty until you build up a history of people wanting your mail.
Why it takes weeks, not an afternoon
You can't speed-run this, and the mailbox providers smooth it out on purpose so you can't fake a spike. Roughly how it plays out on a fresh domain:
- Days 1 to 7: almost no reputation data exists, so most mail defaults to spam. That feels broken the first time you watch it happen, but it's just day one with nothing on the record yet.
- Days 7 to 21: if the people you reach actually open and click, the signal accumulates and placement climbs.
- Days 21 to 45: reputation stabilises, inbox placement gets predictable.
- Days 45 to 60: mature domain, normal volume is sustainable.
The whole thing hinges on that engagement signal, which is where most people get the strategy backwards.
Send to your most engaged people first
Everyone's instinct is to warm up by dribbling a little out to the whole list. That's the wrong move. What you actually want in the first two weeks is the highest open rate you can manufacture, because reputation gets built almost entirely on whether people open and click.
So you send to your most engaged contacts first. The people who opened something in the last week, plus your own team while you're at it. Start with a few hundred a day to that segment only, then a thousand or two, doubling every day or so for as long as engagement holds and complaints stay near zero. The moment bounces or spam reports tick up, you stop climbing and sit at that volume until it settles. There's no schedule to hit. You keep an eye on the bounce and complaint numbers and move up when they let you.
Two ways to blow the whole thing up:
Mailing a cold or purchased list on a new domain. This is the single fastest way to kill a domain that still exists. Old lists are seeded with spam traps, addresses that were real once and got repurposed by the mailbox providers specifically to catch anyone mailing dead data. An established domain can absorb a couple of those. A fresh one has no reputation to spend, so scrub the list before it ever touches a cold domain. On a fresh domain one bad send is not a bad day, it is the domain.
Impatience. Skipping the ramp because it feels slow is exactly how "Postfix took an afternoon" turns into three weeks of wondering why nobody's replying. You can stand the server up in an afternoon. Earning enough trust to actually land in the inbox is the part that takes weeks, and there is no version of it you get to rush.
Watch the real numbers, not your gut
Don't guess at how it's going. Gmail Postmaster Tools gives you domain reputation, IP reputation, spam rate and auth pass rate straight from Google. Microsoft SNDS covers the Outlook side, per-IP complaint rate and spam-trap hits. What I actually react to:
- Auth passing under ~95% in Postmaster means SPF or DKIM is failing intermittently. Go re-check it before anything else.
- Spam rate over 0.3% is a content or list problem, not a ramp problem.
- A volume spike you didn't schedule means something is sending on its own. Find it, then back off.
None of this is glamorous. Warmup is the least exciting part of running your own sending, mostly patience and a spreadsheet. But it is the whole difference between a domain that reliably hits the inbox two months from now and one you have to burn and start over on. I have started over. Do the boring version the first time.
