Why small senders land in spam
Mailbox providers decide where your email goes by two things: whether it provably came from your domain, and whether recipients want it. Since 2024 the big three have written those rules down, and they apply to a café's monthly newsletter as much as to a bank.
The common failure is on the first point, before the second even matters: campaigns sent from a Gmail address, a domain with no DKIM, or a newsletter tool that was never connected to the domain's DNS.
What Gmail, Yahoo and Outlook require
| Requirement | Gmail | Yahoo | Outlook.com |
|---|---|---|---|
| Applies to | All senders; extra rules at 5,000+ a day | Bulk senders | 5,000+ a day |
| SPF | Yes (SPF or DKIM for all; both for bulk) | Yes | Yes |
| DKIM | Yes | Yes | Yes |
| DMARC | Bulk: at least p=none, aligned | At least p=none | At least p=none |
| One-click unsubscribe | Bulk, marketing mail | Yes, honour within 2 days | Recommended |
| Spam rate | Below 0.10%, never 0.30% | Below 0.3% | Not published as a number |
| In force since | 1 Feb 2024 | 2024 | 5 May 2025 (Junk first) |
"One-click unsubscribe" is a technical standard, RFC 8058: two email headers that let Gmail or Yahoo show their own "Unsubscribe" button. Every serious email service sets them if you enable the feature; a link at the bottom of the email alone doesn't count.
The complaint arithmetic for a small list
The spam rate is complaints divided by delivered emails. Small lists have almost no room:
| Campaign size | 0.10% (Google's target) | 0.30% (the limit) |
|---|---|---|
| 500 | 0.5 complaints | 1.5 complaints |
| 2,000 | 2 | 6 |
| 10,000 | 10 | 30 |
Six people clicking "Report spam" on a 2,000-person send puts you at Google's limit. That is why consent matters for deliverability, not just for the law: people who never asked for your email are the ones who report it.
Setup checklist
- Send from your domain (offers@yourbusiness.ae) through an email service provider, never from a personal mailbox.
- SPF: one TXT record listing your mail servers and the email service. Only one SPF record per domain.
- DKIM: the email service gives you a key to publish in DNS. Turn on signing.
- DMARC: start with p=none and a reporting address, read the reports for a few weeks, then move to quarantine.
- One-click unsubscribe: enable the List-Unsubscribe headers in your email service, and make unsubscribes take effect immediately, well within Yahoo's 2 days.
- Register in Google Postmaster Tools to see your spam rate and domain reputation.
- Warm up a new domain: start with your most engaged customers and grow volume over weeks, not in one blast.
Consent under UAE law
The PDPL (Federal Decree-Law 45 of 2021) applies to the personal data on your list. Article 6 requires consent you can prove, requested clearly and simply, with an easy way to withdraw it, and Article 17 lets people object to direct marketing. Its executive regulations are still pending; the principles apply now.
In practice:
- Separate checkbox, unticked, next to the booking or contact form: "Send me offers by email."
- Record the date, the source (website form, in-store tablet, event) and the wording.
- Customers who bought are not automatically subscribers. Ask at checkout.
- Unsubscribe in every email, processed automatically.
Website forms and cookies are covered in our PDPL guide for websites. SMS and WhatsApp marketing have their own rules, approval, sending hours and fines; see WhatsApp marketing rules in the UAE.
Four emails worth automating
A small business doesn't need a weekly newsletter. These four, sent automatically to people who opted in, do most of the work:
| When | Purpose | |
|---|---|---|
| Welcome | Right after opt-in | Confirms the subscription, sets expectations: what you'll send and how often |
| After the visit or purchase | 1–3 days later | Thank you, care tips, the Google review link |
| Monthly update | Once a month | New menu, new service, seasonal offer such as Ramadan or Dubai Shopping Festival |
| Win-back | After 90 days with no visit | One reason to come back; if no opens, stop emailing that address |
The review email links directly to your Google profile; how reviews feed Maps is in our local SEO plan.
What nobody tells you
Your invoices share the domain's reputation. If marketing campaigns get your domain flagged, booking confirmations and invoices from the same domain suffer too. Many businesses send marketing from a subdomain (news.yourbusiness.ae) to keep the main domain clean.
Mail to Russian-speaking clients may go to Yandex and Mail.ru. Those providers run their own filters and postmaster tools. If a large part of your list uses them, check delivery there separately.
An old list is a risky list. Addresses that haven't opened anything in a year include abandoned mailboxes, some of which are turned into spam traps. Re-confirm or remove them before a big campaign.
Vladimir Chernyshev, GM: for most Dubai service businesses, email is the follow-up channel, not the first touch. A short monthly email to people who actually bought from you, sent from a properly set-up domain, does more than a weekly blast to a list nobody remembers joining.
