You send a quote to a new customer and hear nothing back. A week later you find out your email was sitting in their spam folder. If you use Zoho Mail with your own company domain, this is more common than most people realize, and it is almost always fixable.
When you send an email, the receiving server asks three questions. Is this server allowed to send for this domain? Was the message changed on the way? And what should I do if the checks fail? Your domain answers those questions through three DNS records. If they are missing or wrong, spam filters get nervous.
The pressure is also higher than it used to be. Gmail and Yahoo now require authentication for bulk senders, and even small senders with no records are judged more harshly than before.
SPF, DKIM and DMARC Explained Simply
SPF Sender Policy Framework
A DNS record that lists the servers allowed to send email for your domain. For Zoho Mail, your SPF record needs to include Zoho servers. The exact value depends on your Zoho data center, such as the US, EU or India region, so copy it from the official Zoho setup page.
DKIM DomainKeys Identified Mail
A digital signature added to every email you send. The receiving server checks it against a public key in your DNS to confirm the message was not altered. In Zoho Mail you generate the key in the admin console and add it to your DNS as a TXT record.
DMARC
A policy that tells receiving servers what to do if SPF or DKIM fails, and sends you reports. You can start with a monitoring only policy so nothing gets blocked while you learn what is happening.
The 6 Mistakes We See Most Often
Two SPF records
A domain should have only one SPF record. If you also use another sender, such as a newsletter tool or CRM, all of them must be combined into a single record. Two separate records cause SPF to fail.
Wrong data center
Using the SPF value for the wrong Zoho region means the check fails even though it looks correct.
DKIM never turned on
Many domains have the key added but never enabled or verified in Zoho Mail. Check that it shows as verified.
Old MX records still in place
After moving from another provider, old MX records can send some email to the old system. Remove the previous provider records so only Zoho remains.
Other tools sending as your domain
Your website form, invoicing app or marketing tool may send mail from your domain without being authorized. Each one needs to be added to SPF and, ideally, have its own DKIM.
No DMARC at all
Without DMARC you get no visibility. You will not know who is sending as your domain or why mail is failing.
Stop losing customer emails to the spam folder.
Book a free planning and pricing sessionA Real World Scenario
Imagine a US based consultancy that moved its email to Zoho Mail. A few weeks later, clients start saying proposals never arrive. The team checks and finds the proposals are going to spam. The cause turns out to be two SPF records: one added during the move, and one left over from the previous provider. Combining them into one and enabling DKIM fixed the issue the same day. The company had lost nearly a month of possible replies.
How to Check and Fix Your Setup
Check your current records
Use a free DNS lookup tool to see your SPF, DKIM and DMARC records for your domain.
Fix SPF first
Make sure there is exactly one record and that it includes Zoho and any other tool that sends for you.
Enable DKIM in Zoho Mail
Generate the key in the admin console, publish it in DNS, and wait for it to verify. DNS changes can take a few hours.
Add a DMARC record in monitoring mode
Review the reports for a few weeks before moving to a stricter policy.
Send a test email
Send a message to a Gmail address, open it, and view the original message headers. You should see SPF, DKIM and DMARC all marked as pass.
Frequently Asked Questions
▼How long does it take for DNS changes to work?
Often within an hour, but it can take up to 24 to 48 hours depending on your DNS provider.
Will DMARC block my real emails?
Not if you start with a monitoring only policy. Tighten it only after you confirm everything legitimate is passing.
Do I need these records if I only send a few emails a day?
Yes. Even low volume senders get filtered more strictly when authentication is missing.
Conclusion
Spam folder problems are rarely about your message. They are about trust. Setting up SPF, DKIM and DMARC correctly tells email providers your domain is real and your emails are safe to deliver. It takes a short time to do, and it protects every quote, invoice and follow up you send.
Not sure whether your domain is set up correctly? We can review your Zoho Mail configuration and get your emails landing in the inbox.
Fix Your Operations
Ready to fix your email delivery?
Stop guessing why your emails are bouncing or landing in spam. We audit your DNS records, configure authentication correctly, and ensure your messages reach their destination safely.