Why ecommerce emails land in spam, how to measure deliverability, and the authentication, list and Spam Act steps Australian online stores need to fix it.

Email Deliverability for Ecommerce: How to Reach the Inbox

Email deliverability is whether the emails your store sends actually land in the inbox, rather than the spam folder or the promotions tab. It is different from delivery, which only means the recipient’s mail server accepted the message. Placement after acceptance is what deliverability measures, and for an online store it decides whether your abandoned cart flow, your campaigns and your order confirmations ever get seen. This guide covers what drives it, how to measure it, the technical setup, list habits and the Australian rules you need to follow.

Moormarketing

Build a Stronger Ecommerce Growth Strategy

Moor Marketing develops tailored digital strategies for ecommerce brands, with senior strategists working collaboratively to address specific growth obstacles.

Visit Moor Marketing

TL;DR

Delivery means a mail server accepted your email. Deliverability means it reached the inbox. Your platform’s “delivered” count only tells you the first.
Inbox providers judge you on who you send to, how they engage, how you send and what you send, so reputation is built mostly through list quality and engagement.
Set up SPF, DKIM and DMARC on your own sending domain before you scale volume.
Watch spam complaints and hard bounces weekly. Keep complaints under 0.08% and hard bounces under 0.5%.
In Australia, consent, sender identification and a working unsubscribe are legal requirements under the Spam Act 2003, and you remain responsible even when a platform sends for you.

Delivery and deliverability are not the same thing
Why ecommerce emails go to spam
How to measure deliverability
Set up authentication properly
Build a list that inbox providers trust
Content and sending habits
Protect your order confirmations
Australian rules that affect deliverability
Perspective
How we help stores fix deliverability
A simple 30 day plan
FAQ
Sources

Delivery and deliverability are not the same thing

Most store owners check the “delivered” figure in their email platform and assume all is well. That number says the receiving server took the message. It does not say where the message went next.

A receiving server can accept an email and then route it to junk, to a promotions tab, or quarantine it. Australian platform support guidance makes the same point: a delivered event shows acceptance by the recipient’s server, not inbox placement, and a company’s internal server may quarantine mail even after accepting it. If that happens consistently for contacts at one business domain, those contacts can ask their IT team to allow-list your sending domain.

This distinction prevents bad diagnoses. If a flow shows a 99% delivery rate but revenue has fallen, the problem is probably placement, not sending.

Why ecommerce emails go to spam

Stores are exposed to deliverability problems because they send a lot, to lists collected in many ways, with image-heavy promotional content. The usual causes, as listed in platform troubleshooting guidance, are:

poor sender reputation
low engagement
high sending volume or frequency
bounces
spam complaints
authentication failures
spammy content

Those factors group into four areas: who you send to and how they engage, your sending habits, your email content and your sending infrastructure. Engagement matters because inbox providers watch what recipients do. Deleting without opening, mass-deleting and marking a message as spam are negative signals that damage sender reputation. Replies, forwards and moving a message from promotions to the primary inbox are positive ones.

In practice, most stores we see run into the same pattern. A list grows quickly from a discount popup, a large share of those subscribers never open again, the store keeps mailing everyone at the same frequency, and reputation slides. The fix is rarely a clever subject line. It is a smaller, more engaged audience and a cleaner setup.

How to measure deliverability

You cannot see inbox placement directly in most platforms, so you build a picture from several signals. Start with delivery, bounce, open and click rates across your campaigns and flows. Compare results by recipient domain (Gmail, Outlook, Yahoo, business domains). If a problem shows up at only one provider, it is likely a reputation issue there. If it spans all providers, check the sending IP, the integration and your authentication.

For weekly tracking, a common set of targets is:

Metric	What to watch	Target
Open rate trend	Sustained drops by domain	Stable or rising
Spam complaint rate	Complaints per email sent	Under 0.08%
Hard bounce rate	Invalid or non-existent addresses	Under 0.5%

Two cautions on opens. Privacy features on some mail apps inflate open counts, so treat the trend as a direction, not an exact figure. And clicks and revenue per recipient are more reliable signs that people are seeing your email.

If your platform supports webhooks, stream delivery, bounce, open and click events into your store’s systems. A gap between emails accepted by your sending platform and emails delivered to recipient servers can point to full mailboxes, blocks or invalid addresses, and seeing it in near real time shortens the time to a fix.

Set up authentication properly

Authentication tells mailbox providers that you are who you say you are. It will not guarantee inbox placement, but without it you are fighting uphill.

The Australian Cyber Security Centre explains that SPF and DKIM can authorise email providers to send or relay on your organisation’s behalf, while DMARC lets receiving servers notify the domain owner of unauthorised email. It recommends reviewing DMARC reports to spot misconfigured infrastructure and phishing. In simple terms:

SPF checks emails against a list of approved IP addresses.
DKIM adds a digital signature so the content can be validated.
DMARC tells receivers what to do when a message fails those checks, and sends you reports.

A practical order of work for a store:

Send from your own domain (for example, a subdomain such as mail.yourstore.com.au), not a free webmail address.
Add the SPF and DKIM records your email platform gives you for that domain.
Publish a DMARC record, starting in monitoring mode so you can read the reports before enforcing anything.
Check every other tool that sends in your name: your ecommerce platform, helpdesk, review app and any SMS-to-email tool. Each one needs to be authorised, or it will fail checks and drag your reputation down.

This is the part stores most often get wrong, because the records are changed in the domain’s DNS settings, which the person who runs marketing often does not control. Make one person responsible for it.

Build a list that inbox providers trust

A clean list does more for deliverability than almost any technical tweak. Practices that help include validating addresses to remove invalid ones, and gradually warming your sending infrastructure. List hygiene means automating validation to remove invalid, duplicate or inactive addresses before you send to them again.

Here is how to apply that in a store:

Validate at signup. Catch typos (gmial.com) and fake addresses at your popup, checkout and account forms.
Use a sunset rule. If someone has not opened or clicked in a set period that suits your buying cycle, move them to a win-back sequence, then stop mailing them if they stay silent.
Warm up gradually. New domain, new platform or a big list import? Start with your most engaged contacts and increase volume in steps, not all at once.
Segment by engagement. Send your largest campaigns to people who have recently interacted. Your best audience protects your reputation for everyone else.
Never buy or rent lists. Besides wrecking reputation, it breaks Australian consent rules (see below).

Your lead capture matters too. Offers that attract people who actually want your products build a healthier list than a blanket discount that attracts bargain hunters who never return. We map this in our guide to ecommerce lead magnets, pages and automation.

Content and sending habits

Content is one of the four factors, and it is the easiest to fix. Balanced text-to-image ratios help: emails with at least 500 characters of text and clear, non-spammy subject lines are less likely to be filtered. An email that is one large image with a button is both an accessibility problem and a filtering risk.

A short checklist before each send:

Real text content, not only a single image
A subject line that says what is inside, without all caps or excessive punctuation
A consistent “from” name and address that customers recognise
Working links that point to your own domain where possible
A visible unsubscribe link

Frequency is the other lever. High volume or frequency is on the list of spam causes, so scale your sending to what your audience engages with, not to what your sales target demands. Triggered emails such as abandoned cart and post-purchase tend to perform well because they are relevant and timely. We explain how to build them in our guide to ecommerce email flows that drive revenue.

Protect your order confirmations

Transactional emails (order confirmations, shipping updates, password resets) are the emails customers actively look for. When they go missing, support tickets climb and trust drops.

The risk is that receivers assess mail from the same sending domain together. Poor marketing-email performance can affect whether order confirmations reach inboxes, because the receiving side looks at mail associated with your domain. The same source names bounce rate, spam complaints and inbox-placement rate as the key measures for transactional email.

To protect them:

Send transactional and marketing email from separate subdomains, with separate authentication, so a campaign problem does not spill over.
Keep transactional messages focused on the transaction, with only light cross-sell content.
Place test orders from time to time using addresses at the main providers, and check that confirmations land in the inbox.
Monitor bounces on transactional sends separately from campaigns.

Australian rules that affect deliverability

Compliance and deliverability overlap. Complaints rise when people did not agree to hear from you or cannot easily leave.

The Australian Communications and Media Authority (ACMA) states that under the Spam Act 2003, commercial electronic messages sent in Australia must have the recipient’s express or inferred consent, clearly identify the sender and include a functional, easy-to-use unsubscribe mechanism. Unsubscribe requests must be actioned within 5 working days, and the process must not require payment, logging in to an account or extra personal information.

Two points specific to ecommerce:

Automated welcome series must let people opt out of the whole series at any time.
You are liable for your own spam compliance even when a third-party email platform does the sending, so you need to oversee how your tools handle consent and unsubscribes.

We break down the three rules that matter most in our Spam Act guide for Australian email senders. If you also send texts, the same discipline applies, and our SMS compliance checklist covers it.

Perspective

We treat deliverability as a revenue problem, not an IT problem. When a store comes to us with flat email revenue, the cause is usually upstream: a list built on one-off discounts, ads sending traffic to a popup that attracts the wrong people, and flows that were set up once and never reviewed.

Our approach is to fix the system, not the symptom. A senior strategist looks at the full path: the offer that brings a subscriber in, the consent and authentication behind the send, the flows that follow, and how email and paid media feed each other. We do not outsource this work, because a diagnosis only helps when the person making it understands the whole funnel and the numbers behind it.

The brands that scale best are not the ones that email most. They send fewer, better-timed messages to people who want them, and they protect that reputation like an asset, because it is one.

Liza

How we help stores fix deliverability

If your email revenue has stalled and you suspect inbox placement, our team reviews your authentication, list quality, flows and how email connects to your paid channels, then builds a plan to grow revenue from the list you have. You can see our email marketing service or talk to us about the wider ecommerce growth programme.

For owners who want a head start, The Ultimate eCommerce Email Kit is a good place to begin.

A simple 30 day plan

You do not need to fix everything at once. A workable order:

Week 1: audit. Confirm SPF, DKIM and DMARC for every sending tool. Pull complaint and bounce rates by campaign and by recipient domain.
Week 2: clean. Validate the list, suppress hard bounces and move long-inactive contacts into a win-back sequence.
Week 3: restructure. Separate transactional and marketing sending. Segment campaigns by engagement. Check unsubscribe and consent handling against the Spam Act.
Week 4: monitor. Set a weekly review of complaints, bounces and open trends. Place test orders and check where confirmations land.

Expect improvement to be gradual. Reputation is built over weeks of consistent behaviour, not a single change.

FAQ

What is a good email deliverability rate for ecommerce?

There is no single figure, because inbox placement is not directly visible in most platforms. Track proxies instead: spam complaints under 0.08% and hard bounces under 0.5%, plus stable open and click trends by recipient domain. A sudden drop at one provider is a signal to investigate.

Why are my emails delivered but not opened?

A “delivered” status only shows that the recipient’s server accepted the message. It may then have been filtered to spam, promotions or quarantine. Check your authentication, engagement by domain and recent complaint rates, and send a test to your own accounts at major providers.

Do I need DMARC for my online store?

It is strongly advisable. The Australian Cyber Security Centre notes that DMARC lets receiving servers notify the domain owner of unauthorised email, which helps you find misconfigured senders and spoofing of your brand. Start in monitoring mode and read the reports before tightening the policy.

Am I responsible if my email platform sends the messages?

Yes. ACMA’s guidance says businesses remain liable for their own spam compliance when using third-party providers and must keep oversight of their practices. Check how consent is recorded and how unsubscribes are processed.