The Unspam 2026 Email Deliverability Benchmark Report is one of the most interesting deliverability datasets of the year, and its two headline findings point in opposite directions. Primary inbox placement rose 14 points, from 49% of tested email in 2025 to 63% in 2026, while DMARC adoption fell from 59% to 48% of tested domains. DMARC was the only authentication signal to decline while SPF, DKIM and reverse DNS all climbed.
The report aggregates every deliverability test and seed mailbox placement test run through Unspam between January and September 2026, compared against the full 2025 calendar year, using seed mailboxes at eight providers: Gmail, Outlook, Yahoo, AOL, Zoho, ProtonMail, GMX and Amazon WorkMail. One caveat matters when reading the numbers: the sample reflects senders who actively test their email, so it skews toward senders diagnosing a deliverability problem rather than the whole email world.
Senders improved almost everything they control
Seventeen of the twenty-one metrics in the benchmark improved. Spam placement fell from 36% to 33%, tab placement dropped from 11% to 3%, and mail that went missing or was blocked fell from 4% to 1%. The deliverability health score, which weights placement at 60%, authentication at 25%, reputation at 10% and technical compliance at 5%, rose from 83 to 88 out of 100, and checks returning a critical failure fell from 7% to 2%.
Authentication tells a split story. SPF adoption rose from 86% to 93%, DKIM from 82% to 90% and reverse DNS from 96% to 99%, all close to their ceiling. DMARC moved the other way, and the report explains why: DMARC is the first authentication check that asks a sender for a decision, because the record has to tell receivers what to do with failing mail. Fewer tested senders made that decision in 2026 than in 2025, at the exact moment the protection became more valuable.
Mailbox providers split further apart
The average inbox rate across the eight provider panel held almost perfectly flat, 64.0% in August 2026 against 63.9% in December 2025, while the gap between the best and worst provider widened from 71.4 to 83.9 points. A blended inbox rate now describes almost no individual sender.
Gmail peaked at 77.3% in February 2026 and slid to 51.7% by August, repeating the shape of its 2025 curve. Outlook went the other way, climbing from 41.2% in January to pass Gmail in April at 72.6% against 65.2%, and settling at 66.8% in August. The collapses came at Yahoo and AOL, which fell 30.1 and 33.7 points from December 2025 to 15.3% and 14.7% in August. Their monthly rates correlate at 0.94 and they run on shared filtering infrastructure, so the report treats them as one provider. AT&T consumer domains already run on Yahoo infrastructure and Comcast is migrating comcast.net mailboxes to Yahoo Mail, so those filters reach far more addresses than the ones that say Yahoo.
The cheapest fixes remain unclaimed
The List-Unsubscribe header moved two points in a year, from 12% to 14% of tested email. More than two years after Google and Yahoo required the one-click header from bulk senders, six tested senders in seven still omit a header that takes about an hour to add and converts would-be spam complaints into clean unsubscribes.
IP blacklist listings tripled from 2% to 6% of tested senders, pointing at shared or rented sending infrastructure rather than the domains themselves. Short URL safety fell from 100% to 90%, so one email in ten routes recipients through a shortener that hides its destination from both the reader and the filter. Compliance metrics jumped ahead of every technical metric: CASL compliance rose from 19% to 62%, CAN-SPAM from 3% to 35%, GDPR from 49% to 76% and CCPA from 72% to 85%.
Why this matters for DMARC
The DMARC decline lands at a bad time. RFC 9989, the DMARCbis standard published in May 2026, retired the pct, ri and rf tags, which means a policy staged at a partial percentage behaves inconsistently across receivers. A record parked at p=none or with a leftover pct tag now behaves differently depending on which receiver reads it, and the only way to a predictable outcome is a full enforcement policy. DMARC at p=quarantine or stricter also gates BIMI, which stayed under 1% of tested domains, so the falling adoption locks more than half of senders out of the logo layer before cost is even discussed.
The report’s own priorities for 2027 read like a DMARC checklist: report and act by mailbox provider, rescue Yahoo and AOL with hard suppression of non-openers, take DMARC to enforcement rather than monitoring, add the unsubscribe header, audit IP reputation and drop link shorteners, and optimize sending consistency rather than content. With 89% of tested email already passing body content checks and 88% scoring in the safe SpamAssassin band, content is no longer the constraint. Identity and consistency are.
Your DMARC record is the one part of this benchmark that went backwards industry wide, and it is fully within your control. Excello Mail shows you every source sending as your domain and walks you from monitoring to enforcement. Sign up for free to Excello Mail and make sure your domain is not part of that 48%.