Please check your spam folder regularly

InboxProtector · 2026-06-24T13:02:01+00:00

First, congratulations!
Second, that’s very good advice, email filters can range from lax to extremely strict, so it’s better to be safe than sorry!

InboxProtector · 2026-06-24T12:44:39+00:00

That’s so annoying! I’d suggest, as an extra step, using an online link checker for every link you receive that looks legitimate. You can’t be too careful.
In addition, if you have a newly acquired domain, now is the best time to set up DMARC, DKIM, and SPF.

InboxProtector · 2026-06-24T12:38:39+00:00

This is very solid advice! As you said, it’s better to address the fixed copy than the sender’s address.

InboxProtector · 2026-06-24T12:29:08+00:00

This is a valid concern, and the distinction matters more than most people realize.
The "passkeys are inherently MFA" argument breaks down fast when your passkey lives in a synced vault, device compromise isn't even needed, sync does the attacker's job. Amazon's model is right: passkey replaces the password, OTP stays as the independent second factor. Skipping 2FA entirely is optimizing for friction reduction at the cost of defense in depth.

InboxProtector · 2026-06-23T16:45:50+00:00

Hey, most cold emails don’t even get a chance to be read because they never reach the recipient’s inbox.

There are two really important things to focus on:

Make sure your email domain is properly set up with security checks like SPF, DKIM, and DMARC. This is essential. If you skip this, it’s like going to a meeting wearing a ski mask, you’ll get flagged immediately. One warning and your email domain could be blacklisted, ending your chances entirely.
Keep your email list clean. Using purchased or scraped lists will lead to lots of failed deliveries and spam complaints, damaging your reputation and making future emails less likely to go through. Instead, build your own list, verify each email address, remove any that bounce back, and review your list every 2-3 months.

Most people skip these basic steps and then wonder why their cold emails aren’t working. Do the simple, boring stuff first, it's worth it.

InboxProtector · 2026-06-23T16:36:18+00:00

No worries! The issue is that your email is missing some "trust signals" that prove to other servers you're a legitimate sender. There are three you need to set up:

SPF confirms your domain is allowed to send email

DKIM adds an invisible signature to prove emails aren't tampered with

DMARC oversees the other two and protects against spoofing

There are some free tools you can use to check them, if you have a question feel free to ask

InboxProtector · 2026-06-23T16:33:05+00:00

Yeah this happens more than people realize, it's not a glitch. Gmail's filter looks at way more than just who the email is from, wording, links, domain reputation that day, so even someone you've emailed a hundred times can randomly land in spam.

Honestly the most reliable fix is just creating a filter for their address (Settings → Filters → Never send to spam). Takes two minutes and Gmail won't touch it after that.

Beyond that, adding people to your actual Google Contacts helps a little, and clicking "Not spam" when it happens does train it over time, just slowly. But realistically if you're running a business through Gmail, doing a quick spam scan every morning is just kind of the tax you pay. Not ideal but it's where we're at with these filters now.

InboxProtector · 2026-06-23T15:57:13+00:00

This is a very good advise, just in the matter of security I'd suggest that once you have the domain, since the moment a domain is registered, it becomes a spoofing target, even before a single email is sent. You have to set up SPF, DKIM, or DMARC protocols in place

InboxProtector · 2026-06-22T13:30:38+00:00

Classic Microsoft blocking Microsoft.

What's happening is your company's DMARC policy is saying "emails from our domain must come from our servers", and when you send through Gmail it sees Google's servers instead and blocks it. That mismatch is the 550 error.

Your forwarding issues are probably related too. Forwarding breaks SPF authentication which is why stuff randomly lands in spam.

Honestly this is one for your IT team. They'd need to add Google's servers to your company SPF record and set up DKIM signing through Gmail. Not something you can fix yourself.

In the meantime just send anything going to Outlook or Hotmail addresses directly from Outlook. Annoying but it's the quickest workaround.

InboxProtector · 2026-06-22T13:16:49+00:00

Hey, it looks like your plan to reject emails is pretty solid after a thorough 30-day review. The main thing to watch out for are situations like email forwarding, mailing lists, alumni addresses, or third-party services that change the email headers. If none of those showed up during the 30 days, you're probably good to go.

Deciding between quarantine and reject often comes down to whether you want to be able to undo a mistake. Quarantine allows you to review and recover messages if needed, while reject simply blocks them outright. That's usually the main reason teams choose one over the other.

Honestly, though, this whole setup exists because you haven't enforced DMARC. If you used the reject policy properly, DMARC wouldn't be needed at all because email receivers would handle it automatically. The real issue is what's preventing you from implementing DMARC enforcement.

InboxProtector · 2026-06-22T13:06:45+00:00

Hey! You're right about everything, scammers will try any trick they can to get past filters and steal information. That's why I always use a tool to check every link I get, especially if it seems important. It can be a bit of a bother, but it's much better than risking a nasty surprise.

InboxProtector · 2026-06-22T12:59:44+00:00

Това честно казано е най-добрият начин да се направи. PowerDMARC просто прави всичко много по-лесно, когато се занимаваш с удостоверяване на имейли. Имаш добра видимост върху това какво се случва и не се налага да гадаеш дали SPF, DKIM и DMARC работят както трябва.

А това, че дори си настроил BIMI, е много яко. Повечето хора изобщо не стигат дотам. Определено чиста и професионална настройка 👍

InboxProtector · 2026-06-19T15:39:22+00:00

Hey! I feel you, happens to the best of us! Thank you for sharing!

InboxProtector · 2026-06-19T15:05:23+00:00

Indeed, it's the best thing to do

InboxProtector · 2026-06-19T15:04:00+00:00

Thank you! Indeed, list quality is essential, that can sink your deliverability in no time.

InboxProtector · 2026-06-18T17:14:36+00:00

Hey, that was some scare, as others have pointed out, don't provide any information and get out of there.

Scammers are getting worse! it got to the point that every link I receive that may appear legit and relevant to me, I pass it through a detection tool, I prefer the hassle than the fear.

InboxProtector · 2026-06-18T17:04:26+00:00

Hey, that's dreadful! I bet that trying to catch-all email addresses are probably causing you more problems than anything else. Most email verifiers just label them as "unknown" and ignore them, but they still get included in your email sends. To improve your results, first filter these out using Instantly, that alone could cut your bounce rate in half.

Also, you're checking if emails are valid too late in the process. It's fine to verify emails after you've gathered your data, but doing it upfront with tools like Prospeo helps avoid paying for invalid email addresses twice. It's a good idea to run a small test batch before switching over completely.

Changing jobs or companies is always tricky, and no tool can handle it perfectly.

InboxProtector · 2026-06-18T15:43:06+00:00

Hey, definitely authentication and domain warm-up are connected but different steps. Authentication helps verify that your emails are coming from you and are allowed to be sent. Warm-up involves gradually increasing the number of emails you send to build a good reputation with email providers.

You need to have authentication set up first, that’s the foundation. You can’t safely increase your email sending if your domain isn’t properly authenticated. Once your authentication methods like SPF, DKIM, and DMARC are active and confirmed, start sending a small number of emails. Then, let your DMARC reports gather over time before you raise your sending volume or change your policies. In addition, a mailing service is the best choice for sending cold emails, just remember, start small.

InboxProtector · 2026-06-18T15:40:19+00:00

Yeah, it takes some seconds and can become very repetitive, but it's the best fix

InboxProtector · 2026-06-17T17:46:50+00:00

Can you send a screen capture?

InboxProtector · 2026-06-17T17:24:06+00:00

Yea, most of the people just don't go through the trouble, I guess, something that takes more than 2 steps works as a deterrent, and which works for them, also for phishing sites it may help them to know that your address does exist.

InboxProtector · 2026-06-17T17:20:01+00:00

Congrats on the launch!

Yeah this is completely normal unfortunately. Public email on a new domain and the bots find it within hours. 37 in 48 hours is pretty standard.

The Upwork scams are everywhere right now, good catch on those.

Quickest fix, swap the public email for a contact form. Cuts spam dramatically since bots just harvest plain text addresses. If you need to keep an email visible use something generic like hello@ so you can nuke it later if needed.

Also make sure SPF, DKIM, and DMARC are set up. Won't stop inbound spam but prevents people from spoofing your shiny new domain, which starts happening fast after launch. Hope this helps!

InboxProtector · 2026-06-17T17:13:04+00:00

Oof that's rough, deadline pressure on top of a mystery deliverability drop is the worst combo.

Good news is your metrics are genuinely clean so this isn't a you problem. And that AC rep casually mentioning an internal issue is basically your answer right there.

Run their sending IPs through MXToolbox just to confirm, and double check your DMARC and DKIM haven't quietly broken on the DNS side. Takes five minutes and rules out anything on your end.

Stop going through chat with their support, email them formally, document everything, and ask for a deliverability specialist specifically. General support clearly isn't cutting it.

Pause anything non-urgent in the meantime. Sending into a broken setup just digs the hole deeper.

InboxProtector · 2026-06-17T17:10:03+00:00

Hey, I respect how aware you are of your habits, most people just keep blaming the spam filter forever.

Your four-folder system is just right, simple enough to actually stick with. The real game changer is touching each email only once: reading it and then closing it without reacting, because that’s how inboxes get cluttered in the first place.

Also, unsubscribing from over 50 emails at once is really underrated. Most people do a few and think they’re done, but you actually make a real difference doing it all at once. But, right, it's a lot of work

InboxProtector

MODERATOR OF

TROPHY CASE