{"id":1449,"date":"2026-09-15T09:49:47","date_gmt":"2026-09-15T04:19:47","guid":{"rendered":"https:\/\/www.cnc-system.com\/blog\/?p=1449"},"modified":"2026-09-11T17:01:07","modified_gmt":"2026-09-11T11:31:07","slug":"business-email-going-to-spam-spf-dkim-dmarc-delhi","status":"publish","type":"post","link":"https:\/\/www.cnc-system.com\/blog\/business-email-going-to-spam-spf-dkim-dmarc-delhi\/","title":{"rendered":"Business Email Going to Spam? Fix SPF, DKIM &amp; DMARC \u2014 Delhi Office Guide (2026)"},"content":{"rendered":"<p>You sent an important proposal to a client. They never replied. Three days later they call to say they found your email in their spam folder. Or worse \u2014 they never found it at all.<\/p>\n<p>This is not a one-off problem. For most Delhi SMEs and offices running their own domain email \u2014 whether on Microsoft 365, Google Workspace, or a hosting-based mail server \u2014 email deliverability failures are quiet, expensive, and completely fixable. The fix lives in three DNS records: <strong>SPF<\/strong>, <strong>DKIM<\/strong>, and <strong>DMARC<\/strong>. Most offices either have them misconfigured, missing entirely, or set up once years ago and never touched since.<\/p>\n<p>This guide explains what each record does, why yours is likely broken, and what it costs to fix it properly. CNC has handled email authentication setup for Delhi offices since the days when it was called &#8220;anti-spoofing&#8221; \u2014 here is what we see every time.<\/p>\n<p><!-- CTA BLOCK --><\/p>\n<div style=\"background: #fff7ed; border-left: 4px solid #ea580c; padding: 18px 22px; margin: 28px 0; border-radius: 4px;\"><strong>Quick help from CNC \u2014 West Patel Nagar, Delhi<\/strong><\/p>\n<p>Email authentication broken? CNC diagnoses and fixes SPF, DKIM &amp; DMARC for Delhi offices.<br \/>\nSetup from <strong>\u20b92,500 + GST<\/strong>. Most fixes done remotely in one session.<\/p>\n<p>\ud83d\udcde <a href=\"tel:+919810130131\">Call CNC \u2014 9810130131<\/a><br \/>\n\ud83d\udcac <a href=\"https:\/\/wa.me\/918130992267?text=Hi+CNC,+my+business+emails+are+going+to+spam.+Can+you+help+fix+SPF+DKIM+DMARC%3F\" rel=\"noopener\" target=\"_blank\">WhatsApp for Free Email Diagnosis \u2192<\/a><br \/>\n\u2b50 4.9\u2605 \u00b7 996 Google reviews \u00b7 Since 1996 \u00b7 GST invoice<\/div>\n<h2><span class=\"ez-toc-section\" id=\"Why_Business_Emails_End_Up_in_Spam\"><\/span>Why Business Emails End Up in Spam<span class=\"ez-toc-section-end\"><\/span><\/h2><div id=\"ez-toc-container\" class=\"ez-toc-v2_0_87_1 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.cnc-system.com\/blog\/business-email-going-to-spam-spf-dkim-dmarc-delhi\/#Why_Business_Emails_End_Up_in_Spam\" >Why Business Emails End Up in Spam<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.cnc-system.com\/blog\/business-email-going-to-spam-spf-dkim-dmarc-delhi\/#The_Most_Common_Mistakes_CNC_Finds_in_Delhi_Offices\" >The Most Common Mistakes CNC Finds in Delhi Offices<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.cnc-system.com\/blog\/business-email-going-to-spam-spf-dkim-dmarc-delhi\/#1_No_SPF_Record_at_All\" >1. No SPF Record at All<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.cnc-system.com\/blog\/business-email-going-to-spam-spf-dkim-dmarc-delhi\/#2_SPF_Record_with_Too_Many_Lookups\" >2. SPF Record with Too Many Lookups<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.cnc-system.com\/blog\/business-email-going-to-spam-spf-dkim-dmarc-delhi\/#3_DKIM_Not_Configured_for_the_Current_Mail_Provider\" >3. DKIM Not Configured for the Current Mail Provider<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.cnc-system.com\/blog\/business-email-going-to-spam-spf-dkim-dmarc-delhi\/#4_DMARC_at_pnone_Forever\" >4. DMARC at p=none Forever<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.cnc-system.com\/blog\/business-email-going-to-spam-spf-dkim-dmarc-delhi\/#5_Multiple_Conflicting_SPF_Records\" >5. Multiple Conflicting SPF Records<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.cnc-system.com\/blog\/business-email-going-to-spam-spf-dkim-dmarc-delhi\/#How_to_Check_Your_Current_Email_Authentication_Status\" >How to Check Your Current Email Authentication Status<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.cnc-system.com\/blog\/business-email-going-to-spam-spf-dkim-dmarc-delhi\/#What_a_Correct_Setup_Looks_Like_%E2%80%94_2026_Delhi_Office_Reference\" >What a Correct Setup Looks Like \u2014 2026 Delhi Office Reference<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.cnc-system.com\/blog\/business-email-going-to-spam-spf-dkim-dmarc-delhi\/#SPF_for_Microsoft_365\" >SPF (for Microsoft 365)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.cnc-system.com\/blog\/business-email-going-to-spam-spf-dkim-dmarc-delhi\/#DKIM_for_Microsoft_365\" >DKIM (for Microsoft 365)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.cnc-system.com\/blog\/business-email-going-to-spam-spf-dkim-dmarc-delhi\/#DMARC\" >DMARC<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/www.cnc-system.com\/blog\/business-email-going-to-spam-spf-dkim-dmarc-delhi\/#If_Your_Domain_Is_on_a_Blacklist\" >If Your Domain Is on a Blacklist<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/www.cnc-system.com\/blog\/business-email-going-to-spam-spf-dkim-dmarc-delhi\/#Email_Authentication_and_Your_Cyber_Security\" >Email Authentication and Your Cyber Security<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/www.cnc-system.com\/blog\/business-email-going-to-spam-spf-dkim-dmarc-delhi\/#What_CNC_Fixes_and_What_It_Costs\" >What CNC Fixes and What It Costs<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/www.cnc-system.com\/blog\/business-email-going-to-spam-spf-dkim-dmarc-delhi\/#Related_reading\" >Related reading<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/www.cnc-system.com\/blog\/business-email-going-to-spam-spf-dkim-dmarc-delhi\/#Frequently_Asked_Questions\" >Frequently Asked Questions<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/www.cnc-system.com\/blog\/business-email-going-to-spam-spf-dkim-dmarc-delhi\/#Why_are_my_business_emails_going_to_spam_even_though_I_havent_changed_anything\" >Why are my business emails going to spam even though I haven&#8217;t changed anything?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/www.cnc-system.com\/blog\/business-email-going-to-spam-spf-dkim-dmarc-delhi\/#Does_my_Microsoft_365_or_Google_Workspace_plan_include_SPF_DKIM_and_DMARC_setup\" >Does my Microsoft 365 or Google Workspace plan include SPF, DKIM and DMARC setup?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/www.cnc-system.com\/blog\/business-email-going-to-spam-spf-dkim-dmarc-delhi\/#How_long_does_it_take_for_the_email_fix_to_work\" >How long does it take for the email fix to work?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/www.cnc-system.com\/blog\/business-email-going-to-spam-spf-dkim-dmarc-delhi\/#Will_fixing_SPF_DKIM_and_DMARC_guarantee_my_emails_reach_the_inbox\" >Will fixing SPF, DKIM and DMARC guarantee my emails reach the inbox?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/www.cnc-system.com\/blog\/business-email-going-to-spam-spf-dkim-dmarc-delhi\/#Can_my_emails_be_spoofed_%E2%80%94_someone_sending_fake_emails_pretending_to_be_from_my_company\" >Can my emails be spoofed \u2014 someone sending fake emails pretending to be from my company?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-23\" href=\"https:\/\/www.cnc-system.com\/blog\/business-email-going-to-spam-spf-dkim-dmarc-delhi\/#My_email_provider_says_they_handle_this_%E2%80%94_do_I_still_need_to_do_anything\" >My email provider says they handle this \u2014 do I still need to do anything?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-24\" href=\"https:\/\/www.cnc-system.com\/blog\/business-email-going-to-spam-spf-dkim-dmarc-delhi\/#What_is_the_difference_between_SPF_DKIM_and_DMARC_in_plain_language\" >What is the difference between SPF, DKIM and DMARC in plain language?<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n\n<p>Receiving mail servers \u2014 Gmail, Outlook, Yahoo, corporate gateways \u2014 run every incoming email through a trust check before delivery. The check asks: is this email genuinely from the domain it claims to be from, and does the sending domain have a published policy that I should follow?<\/p>\n<p>If the answer to either question is no, or cannot be verified, the email is either dropped into spam or rejected entirely. The three DNS records that answer these questions are:<\/p>\n<ul>\n<li><strong>SPF (Sender Policy Framework)<\/strong> \u2014 lists the mail servers authorised to send email on behalf of your domain. If your mail comes from a server not on this list, it fails the SPF check.<\/li>\n<li><strong>DKIM (DomainKeys Identified Mail)<\/strong> \u2014 adds a cryptographic signature to every outgoing email. The receiving server uses your public DNS key to verify the signature. A failed DKIM check means the email may have been tampered with \u2014 or was never signed.<\/li>\n<li><strong>DMARC (Domain-based Message Authentication, Reporting &amp; Conformance)<\/strong> \u2014 tells receiving servers what to do when SPF or DKIM fails: deliver it anyway (none), put it in spam (quarantine), or reject it outright (reject). Without DMARC, every server makes its own call \u2014 and most spam filters err on the side of blocking.<\/li>\n<\/ul>\n<p>All three work together. A domain that has SPF but no DKIM still fails DMARC alignment. A domain that has DMARC set to <code>p=none<\/code> (which just monitors, never acts) is indistinguishable from having no DMARC at all as far as deliverability is concerned.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"The_Most_Common_Mistakes_CNC_Finds_in_Delhi_Offices\"><\/span>The Most Common Mistakes CNC Finds in Delhi Offices<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>When we check a client&#8217;s DNS records before starting a <a href=\"https:\/\/cnc-system.com\/network-solution\">network setup or security<\/a> engagement, email authentication is broken in one of five predictable ways almost every time.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"1_No_SPF_Record_at_All\"><\/span>1. No SPF Record at All<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>The domain was registered, email was set up through the hosting provider or a third-party mail service, and nobody added an SPF record. This is the single most common finding. Every email from the domain looks unverified to receiving servers.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"2_SPF_Record_with_Too_Many_Lookups\"><\/span>2. SPF Record with Too Many Lookups<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>SPF records are limited to 10 DNS lookups. Many older SPF records \u2014 especially on domains that have switched between mail providers over the years \u2014 exceed this limit. When the lookup limit is breached, the SPF check returns a <code>permerror<\/code> result, which most spam filters treat as a failure.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"3_DKIM_Not_Configured_for_the_Current_Mail_Provider\"><\/span>3. DKIM Not Configured for the Current Mail Provider<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>A business moves from a shared hosting email to Microsoft 365 or Google Workspace, but the old DKIM keys remain in DNS (or none were added for the new provider). DKIM signing either fails or is absent on every outgoing email.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"4_DMARC_at_pnone_Forever\"><\/span>4. DMARC at <code>p=none<\/code> Forever<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Microsoft 365 and Google Workspace both prompt you to add a DMARC record during setup. Many administrators add <code>p=none<\/code> \u2014 which is correct as a starting point \u2014 but never move to <code>p=quarantine<\/code> or <code>p=reject<\/code>. In this state, DMARC is a reporting tool, not a protection tool. Spam filters give the domain minimal trust benefit.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"5_Multiple_Conflicting_SPF_Records\"><\/span>5. Multiple Conflicting SPF Records<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Only one SPF TXT record is allowed per domain. When hosting migrations, CRM tools, or marketing email platforms are added over the years, a second or third SPF record is often created instead of editing the existing one. Having multiple SPF records is an automatic SPF failure on many mail systems.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"How_to_Check_Your_Current_Email_Authentication_Status\"><\/span>How to Check Your Current Email Authentication Status<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>You do not need specialist tools to do a first check. These three steps take under five minutes:<\/p>\n<ol>\n<li><strong>MXToolbox SPF Lookup<\/strong> \u2014 go to mxtoolbox.com\/spf.aspx and enter your domain. It will tell you whether an SPF record exists, whether it has errors, and whether the lookup limit is exceeded.<\/li>\n<li><strong>Google Admin Toolbox Check MX<\/strong> \u2014 go to toolbox.googleapps.com\/apps\/checkmx\/ and run a check on your domain. It flags SPF, DKIM and DMARC issues in plain language.<\/li>\n<li><strong>Send a test email to mail-tester.com<\/strong> \u2014 go to mail-tester.com, get a temporary address, send a normal business email to it, then check your score. A score below 8\/10 means something is broken. Below 6\/10 means your emails are very likely ending up in spam.<\/li>\n<\/ol>\n<p>If any of these show issues, the fix is not complicated \u2014 but it does require DNS access and knowledge of your current mail provider&#8217;s specific requirements.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"What_a_Correct_Setup_Looks_Like_%E2%80%94_2026_Delhi_Office_Reference\"><\/span>What a Correct Setup Looks Like \u2014 2026 Delhi Office Reference<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The following shows what correctly configured records look like for a Delhi office on Microsoft 365. The values differ for Google Workspace, Zoho Mail, and hosting-based mail \u2014 but the structure is the same.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"SPF_for_Microsoft_365\"><\/span>SPF (for Microsoft 365)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<pre>TXT  @  \"v=spf1 include:spf.protection.outlook.com -all\"<\/pre>\n<p>The <code>-all<\/code> at the end is important \u2014 it means fail any server not on the list. Using <code>~all<\/code> (soft fail) gives less deliverability benefit.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"DKIM_for_Microsoft_365\"><\/span>DKIM (for Microsoft 365)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>DKIM for Microsoft 365 requires two CNAME records published in DNS \u2014 the keys are generated inside the Microsoft 365 admin portal under Email Authentication. The CNAME format looks like:<\/p>\n<pre>CNAME  selector1._domainkey  selector1-yourdomain-com._domainkey.yourtenant.onmicrosoft.com<\/pre>\n<h3><span class=\"ez-toc-section\" id=\"DMARC\"><\/span>DMARC<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<pre>TXT  _dmarc  \"v=DMARC1; p=quarantine; rua=mailto:dmarc-reports@yourdomain.com; pct=100\"<\/pre>\n<p>Start with <code>p=quarantine<\/code> rather than jumping to <code>p=reject<\/code> \u2014 this lets you catch any legitimate mail sources you missed in SPF before they start bouncing hard. Move to <code>p=reject<\/code> after two to four weeks of clean DMARC reports.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"If_Your_Domain_Is_on_a_Blacklist\"><\/span>If Your Domain Is on a Blacklist<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Sometimes the email deliverability problem is not just missing records \u2014 the domain or sending IP address has been blacklisted because a previous mail account on the same server was compromised, or because marketing emails were sent without proper opt-in lists.<\/p>\n<p>Blacklist removal requires:<\/p>\n<ul>\n<li>Identifying which blacklists you are on (MXToolbox Blacklist Check is a free starting point)<\/li>\n<li>Fixing the authentication records first \u2014 submitting a removal request while still failing SPF\/DKIM\/DMARC is almost always rejected<\/li>\n<li>Submitting a delisting request directly to each blacklist operator<\/li>\n<li>Monitoring for 2\u20134 weeks to confirm the delisting held<\/li>\n<\/ul>\n<p>CNC handles blacklist removal as part of the same email deliverability service for Delhi offices. Most major blacklist removals complete within 48\u201372 hours of a successful submission.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Email_Authentication_and_Your_Cyber_Security\"><\/span>Email Authentication and Your <a href=\"https:\/\/cnc-system.com\/cyber-security-solution\">Cyber Security<\/a><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>SPF, DKIM and DMARC do more than improve deliverability. They are also the primary technical defence against email spoofing \u2014 where an attacker sends emails that appear to come from your domain (your company name, your CEO&#8217;s address) to trick your clients, suppliers, or employees.<\/p>\n<p>A domain with no DMARC record \u2014 or DMARC at <code>p=none<\/code> \u2014 can be spoofed by anyone. Your clients can receive emails appearing to be from you@yourcompany.com asking for a payment or a document, and there is no technical barrier stopping it. This is called a business email compromise (BEC) attack, and it is the leading cause of financial fraud targeting Indian SMEs in 2025\u201326 according to CERT-In advisories.<\/p>\n<p>Proper DMARC at <code>p=reject<\/code> makes spoofing your domain effectively impossible. It is one of the highest-value, lowest-cost security measures a Delhi office can implement.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"What_CNC_Fixes_and_What_It_Costs\"><\/span>What CNC Fixes and What It Costs<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<table>\n<thead>\n<tr>\n<th>Service<\/th>\n<th>What&#8217;s Included<\/th>\n<th>Indicative Price<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Email Authentication Audit<\/td>\n<td>Full SPF\/DKIM\/DMARC check, blacklist check, mail-tester score, written findings report<\/td>\n<td>\u20b91,000 + GST (credited against fix)<\/td>\n<\/tr>\n<tr>\n<td>SPF + DKIM + DMARC Setup<\/td>\n<td>DNS record creation\/correction, provider-specific DKIM configuration, DMARC policy set, verification test<\/td>\n<td>\u20b92,500 + GST<\/td>\n<\/tr>\n<tr>\n<td>Blacklist Removal<\/td>\n<td>Blacklist identification, root-cause fix, delisting submissions, monitoring for 30 days<\/td>\n<td>\u20b93,500 + GST<\/td>\n<\/tr>\n<tr>\n<td>Full Email Deliverability Fix<\/td>\n<td>Audit + SPF\/DKIM\/DMARC + blacklist removal + DMARC report monitoring for 60 days<\/td>\n<td>\u20b95,500 + GST<\/td>\n<\/tr>\n<tr>\n<td>Ongoing Email Health (as part of IT AMC)<\/td>\n<td>Quarterly authentication check included in <a href=\"https:\/\/cnc-system.com\/amc-and-services\">IT AMC plans<\/a><\/td>\n<td>From \u20b9800\/device\/year<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><em>Prices are indicative. Please confirm current rates with CNC before proceeding.<\/em><\/p>\n<p>Most fixes are done remotely \u2014 no site visit required. CNC needs read\/write access to your domain&#8217;s DNS panel (GoDaddy, Cloudflare, BigRock, or your hosting provider&#8217;s cPanel DNS zone editor), plus read access to your Microsoft 365 or Google Workspace admin panel to generate the correct DKIM keys.<\/p>\n<p>Time to complete: typically one to two hours for a standard SPF\/DKIM\/DMARC fix. DNS propagation takes up to 24\u201348 hours after that, though most changes take effect within a few hours.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Related_reading\"><\/span>Related reading<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ul>\n<li><a href=\"https:\/\/www.cnc-system.com\/blog\/network-security-guide-delhi-business-2026\/\">Network security guide for Delhi businesses<\/a><\/li>\n<li><a href=\"https:\/\/www.cnc-system.com\/blog\/microsoft-365-vs-google-workspace-india-smb-2026\/\">Microsoft 365 vs Google Workspace for Indian SMBs<\/a><\/li>\n<li><a href=\"https:\/\/cnc-system.com\/cyber-security-solution\">CNC Cyber Security Services, Delhi<\/a><\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"Frequently_Asked_Questions\"><\/span>Frequently Asked Questions<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<h3><span class=\"ez-toc-section\" id=\"Why_are_my_business_emails_going_to_spam_even_though_I_havent_changed_anything\"><\/span>Why are my business emails going to spam even though I haven&#8217;t changed anything?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Email spam filters are updated continuously by providers like Google, Microsoft, and third-party gateway vendors. A configuration that passed two years ago may now fail because the spam-filter thresholds have tightened, a shared IP on your mail server was blacklisted by another user, or a newer DMARC standard has been adopted. The configuration needs to be checked, not assumed to still be correct.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Does_my_Microsoft_365_or_Google_Workspace_plan_include_SPF_DKIM_and_DMARC_setup\"><\/span>Does my Microsoft 365 or Google Workspace plan include SPF, DKIM and DMARC setup?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Microsoft 365 and Google Workspace provide the tools and the documentation, but neither configures DNS records on your behalf \u2014 that requires access to your domain&#8217;s DNS registrar, which is outside their service scope. Setup is your IT team&#8217;s or IT partner&#8217;s responsibility. CNC handles this for Delhi offices as a standalone service or as part of an IT AMC.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"How_long_does_it_take_for_the_email_fix_to_work\"><\/span>How long does it take for the email fix to work?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>DNS records propagate globally within 24\u201348 hours, though most records are active within 4\u20138 hours. DKIM verification is usually instant once the record is published. Blacklist delisting typically completes within 48\u201372 hours of a successful submission. DMARC report data starts arriving within 24 hours of the record going live.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Will_fixing_SPF_DKIM_and_DMARC_guarantee_my_emails_reach_the_inbox\"><\/span>Will fixing SPF, DKIM and DMARC guarantee my emails reach the inbox?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Correct authentication is necessary but not sufficient. Emails can still be filtered for content reasons (spam trigger words, excessive images, no unsubscribe link on bulk sends), sender reputation (new domain, low volume history), or recipient-specific filters. Authentication fixes the technical trust layer \u2014 content and reputation are separate factors. Most spam issues in Delhi offices are caused by authentication failures, so fixing these solves the problem in the majority of cases.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Can_my_emails_be_spoofed_%E2%80%94_someone_sending_fake_emails_pretending_to_be_from_my_company\"><\/span>Can my emails be spoofed \u2014 someone sending fake emails pretending to be from my company?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Yes, if your domain has no DMARC record or has DMARC set to <code>p=none<\/code>. Anyone can send an email that appears to come from anyone@yourcompany.com and there is no technical mechanism to stop it. Setting DMARC to <code>p=reject<\/code> after verifying your legitimate mail flows makes spoofing your domain effectively impossible for external senders.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"My_email_provider_says_they_handle_this_%E2%80%94_do_I_still_need_to_do_anything\"><\/span>My email provider says they handle this \u2014 do I still need to do anything?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Email providers handle the sending infrastructure. SPF, DKIM and DMARC records live in your domain&#8217;s DNS \u2014 which is managed by your domain registrar or hosting company, not your email provider. Unless someone explicitly accessed your DNS panel and added these records, they almost certainly do not exist or are incomplete. Checking takes five minutes using MXToolbox.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"What_is_the_difference_between_SPF_DKIM_and_DMARC_in_plain_language\"><\/span>What is the difference between SPF, DKIM and DMARC in plain language?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>SPF is a guest list \u2014 it tells receiving servers which mail servers are allowed to send on your behalf. DKIM is a wax seal \u2014 it proves the email was not tampered with in transit. DMARC is the policy \u2014 it tells receiving servers what to do if the guest list check or the seal verification fails. All three are needed for full email trust.<\/p>\n<p><!-- CLOSING CTA --><\/p>\n<div style=\"background: #fff7ed; border-left: 4px solid #ea580c; padding: 18px 22px; margin: 36px 0; border-radius: 4px;\"><strong>Get your email deliverability fixed \u2014 CNC, West Patel Nagar, Delhi<\/strong><\/p>\n<p>Emails landing in spam cost you clients. CNC diagnoses and corrects SPF, DKIM and DMARC for Delhi offices, usually in a single remote session.<\/p>\n<p>\ud83d\udcde <a href=\"tel:+919810130131\">+91-9810130131<\/a> \u00a0\u00b7<br \/>\n\ud83d\udcac <a href=\"https:\/\/wa.me\/918130992267?text=Hi+CNC,+I+need+help+fixing+my+business+email+spam+issue.\" rel=\"noopener\" target=\"_blank\">WhatsApp us<\/a> \u00a0\u00b7<br \/>\n<a href=\"https:\/\/cnc-system.com\/network-solution\">Full network &amp; email service details \u2192<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"<p>You sent an important proposal to a client. They never replied. Three days later they call to say they found your email in their spam folder. Or worse \u2014 they never found it at all. This is not a one-off problem. For most Delhi SMEs and offices running their own domain email \u2014 whether on&#8230;<\/p>\n","protected":false},"author":100,"featured_media":1450,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[70],"tags":[548,527,549,546,551,552,72,339,550,547],"class_list":["post-1449","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-networking-cyber-security","tag-business-email","tag-delhi-it-support","tag-email-authentication","tag-email-deliverability","tag-email-reputation","tag-microsoft-365","tag-network-security","tag-office-it","tag-spam-fix","tag-spf-dkim-dmarc"],"_links":{"self":[{"href":"https:\/\/www.cnc-system.com\/blog\/wp-json\/wp\/v2\/posts\/1449","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cnc-system.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cnc-system.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cnc-system.com\/blog\/wp-json\/wp\/v2\/users\/100"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cnc-system.com\/blog\/wp-json\/wp\/v2\/comments?post=1449"}],"version-history":[{"count":1,"href":"https:\/\/www.cnc-system.com\/blog\/wp-json\/wp\/v2\/posts\/1449\/revisions"}],"predecessor-version":[{"id":1451,"href":"https:\/\/www.cnc-system.com\/blog\/wp-json\/wp\/v2\/posts\/1449\/revisions\/1451"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cnc-system.com\/blog\/wp-json\/wp\/v2\/media\/1450"}],"wp:attachment":[{"href":"https:\/\/www.cnc-system.com\/blog\/wp-json\/wp\/v2\/media?parent=1449"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cnc-system.com\/blog\/wp-json\/wp\/v2\/categories?post=1449"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cnc-system.com\/blog\/wp-json\/wp\/v2\/tags?post=1449"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}