Customers not getting my emails is the single most common email complaint we hear from Southwest Michigan contractors and service businesses. The reason is almost always the same: your domain is not authenticated, and the receiving mail server rejected your message before it ever reached the spam folder. This became a genuine crisis after Gmail and Microsoft updated their email sender requirements in late 2025. If your email was working fine before that and started misfiring after, that is almost certainly why.
Here is what is happening and how to fix it.
Why aren't my customers getting my emails?
Most of the time, the answer is missing or broken email authentication.
Your email looks real to you. To Gmail or Outlook on the other end, it is an unsigned message from a domain with no authentication records telling the server it is legitimate. Without SPF (which defines who is allowed to send as you), DKIM (which cryptographically signs each outbound message), and DMARC (which tells the server what to do when authentication fails), the receiving server either quietly routes your email to spam or rejects it outright. The customer never sees it. You never know.
Other causes worth ruling out: your email address looks like spam (all-caps subject, lots of links, a PDF attachment on a cold message), you are sending from a shared IP with a bad reputation, or the customer's company runs aggressive inbound filtering. But authentication gaps cause the overwhelming majority of "they never got it" problems today.
Did Gmail or Outlook change their rules recently?
Yes, and the changes were significant enough to catch a lot of legitimate businesses off guard.
In November 2025, Google shifted from filtering unauthenticated messages to rejecting them at the gateway. Previously, failing authentication meant your email went to spam. After November 2025, it may not arrive at all. Google's official sender requirements document this change and apply to all senders, not just bulk mailers.
In May 2025, Microsoft introduced a hard bounce error for unauthenticated messages to Outlook and Hotmail addresses. If you have ever received a delivery failure that includes the code "550 5.7.515," that is Microsoft rejecting your email because your domain failed DMARC or SPF alignment. The customer's inbox received nothing and you got a non-delivery report.
Both changes happened within six months of each other. If your outbound email was working and then started failing in mid-to-late 2025, this is the timeline that explains it.
How do I know if my emails are landing in spam?
The fastest check is a free DNS audit.
Go to MXToolbox Email Health and enter your domain name. It runs in about 30 seconds and shows you exactly which authentication records are missing, broken, or misconfigured. No account required.
You can also ask a customer who says they did not receive your email to search their spam folder directly. If they find your messages there, you have a deliverability problem that authentication fixes. If they find nothing, you may have a hard bounce, meaning the message was rejected before delivery.
For a Southwest Michigan business, the Parallax DMARC audit service runs the same DNS check and walks you through what needs to be fixed and in what order.
What is DMARC and why does it affect whether my emails arrive?
DMARC is a DNS record that tells receiving mail servers what to do when an email from your domain fails authentication checks. Without it, the server decides on its own. That decision increasingly goes against you.
The gap is bigger than most business owners expect. A Parallax Intelligence DNS audit of 435 Southwest Michigan business domains found that 85.9% have no DMARC enforcement in place. Nearly 9 in 10 local businesses have no policy telling Gmail or Outlook how to handle a suspicious message sent from their domain. The full breakdown by county is in the Southwest Michigan Email Security Report.
Setting DMARC up is not complicated. It is a single DNS TXT record. Our SPF, DKIM, and DMARC explainer covers what each record does and why you need all three. What matters is the order: SPF first, then DKIM, then DMARC starting at "p=none" so you can see the reports before enforcing anything. The how to stop quotes going to spam guide covers each DNS step in plain language if you want to do it yourself.
Could someone be impersonating my business email?
Yes, and that is exactly what an unenforced domain enables.
If your domain has no DMARC enforcement, anyone can send an email that appears to come from your address. Your customers may receive fake invoices, phishing messages, or scam quotes that look like they came from your business. According to the FBI Internet Crime Complaint Center 2025 Annual Report, business email compromise caused over $3 billion in verified losses in the United States in 2025, making it the second most financially damaging cybercrime category tracked by the FBI.
Small businesses are not too small to be targeted. A fake invoice from what looks like a known local contractor is a common pattern. The same fix that restores your deliverability also closes the spoofing window.
How do I fix it and how long does it take?
The fix is a sequence. It takes most businesses with a single email provider under an hour if DNS access is straightforward.
Start with SPF. Add or update the TXT record that lists the servers authorized to send email as your domain. If you use Google Workspace, the value is "v=spf1 include:_spf.google.com ~all." Microsoft 365 uses "v=spf1 include:spf.protection.outlook.com ~all." If you use another service, they document the exact value. If you are still deciding between Microsoft 365 and Google Workspace, that choice determines which SPF values go here.
Next, enable DKIM. For Google Workspace and Microsoft 365, DKIM signing is configured in the admin console. They provide the public key to paste into a DNS record. Once the DNS propagates, outbound email is signed.
Then add DMARC, starting at "p=none" with a reporting address. This lets you see who is sending as your domain without disrupting existing delivery. After 30 days of clean reports, step up to "p=quarantine" or "p=reject" to actively enforce the policy.
If you send from multiple services such as a CRM, billing software, and a contact form, each one needs an SPF include, and each needs DKIM configured separately. That is where most small businesses hit friction.
If you run a service business in Battle Creek, Kalamazoo, or anywhere in Southwest Michigan and you would rather have this handled than do it yourself, Parallax's DMARC audit service covers the full setup, testing, and a follow-up report confirming enforcement is working. Reach out at (269) 460-1772 or through the contact form.