Technical setup
Start with the sender domain. If authentication is broken, content tweaks will only get you so far.
- SPF includes every legitimate sender.
- DKIM is enabled and passing.
- DMARC exists for the visible From domain.
- MX and DNS records are consistent and current.