1. Authenticate your domain properly
Mailbox providers want proof that the message really belongs to the domain in the From line.
- Publish a valid SPF record for the return-path domain.
- Sign mail with DKIM so each message carries a verifiable signature.
- Publish a DMARC record on the visible From domain.
- Keep the From domain and return-path domain aligned where possible.