Spam Score Checker: How to Test Before You Hit Send
Learn how a spam score checker works, which tools to use (mail-tester and more), and how to read the results before every send. A practical, no-fluff guide.
Junaid KhalidAugust 13, 202611 min read
A spam score checker sends your actual email through a diagnostic inbox, then reports back on authentication, content, and server configuration issues that could route it to spam, usually on a 0 to 10 scale. Run one before every meaningful send: it takes under two minutes and catches problems you cannot see by eyeballing your own email.
Key takeaways
- A spam score checker (mail-tester.com is the most common free one) tests your email's SPF, DKIM, and DMARC authentication, plus content and server signals, and returns a numeric score.
- The underlying scoring engine for most free checkers is SpamAssassin. A score under 2 to 3 (on its 0-to-10-good scale, or under 2 to 3 raw SpamAssassin points) is a safe target; the widely cited default block threshold is 5.0.
- A perfect spam score checker result does not guarantee inbox placement. It confirms your email is technically clean; it says nothing about your sender reputation or engagement history, which matter just as much.
- Test from your real sending infrastructure (the same domain, ESP, and IP you use for actual campaigns), not a personal Gmail account, or the authentication results are meaningless.
- Free tools like mail-tester give you a handful of tests per day; for ongoing monitoring across a real campaign cadence, budget for a paid plan or a seed-inbox tool.
- Fixing what the checker flags (missing DMARC, broken plain-text part, spam-trigger words) is usually a 15-minute job, and it is one of the most valuable 15 minutes you can spend in email marketing.
How a spam score checker actually works
The mechanics are the same across nearly every free tool in this category (mail-tester, Mailmeteor, Truelist):
- The tool generates a unique, disposable test email address.
- You send your actual campaign or template to that address, from your real sending setup.
- The tool receives the message, scores it, and returns a report, usually within seconds.
That report covers three categories:
- Authentication: whether SPF, DKIM, and DMARC pass for your sending domain.
- Content: spam-trigger words, HTML-to-text ratio, broken links, missing plain-text alternative, image-heavy layouts.
- Server and domain signals: reverse DNS, domain age, and whether your sending IP or domain shows up on any real-time blacklists.
Mail-tester.com, the tool most people mean when they say "spam score checker," runs a vanilla install of SpamAssassin and inverts the scale so a positive number is good: you get a score out of 10, where 10 is clean. Under the hood it is still SpamAssassin's rule engine, just presented in a friendlier direction.
Why testing before you send actually matters
Inbox providers do not evaluate your email once. Gmail, Outlook, and Yahoo all run proprietary filtering on top of whatever your own mail server or ESP already checks, and blacklist status is queried in real time at the moment of delivery, not when you hit send. If your sending IP got listed ten minutes ago, a campaign that looked fine yesterday can still land in spam today.
A spam score checker will not predict that in real time, but it catches problems entirely within your control that quietly tank deliverability for every future send: a missing DKIM record, a From address that does not match your Reply-To domain, an image-only email with no text, or spam-trigger phrasing in the subject line. Those are fixable in minutes, and they are the same issues that show up over and over in why emails go to spam audits.
Step-by-step: how to test your spam score
- Open a spam score checker and get a test address. Mail-tester.com is the standard starting point; no signup needed for the free tier.
- Send your real email to that address, from the actual domain, sending platform, and IP you use for live campaigns. Do not send a stripped-down test version; keep tracking pixels, personalization tags, and the unsubscribe footer in place.
- Wait for the message to arrive, then click the tool's "check your score" button.
- Read the full report, not just the headline number. A 7/10 with a missing DMARC record is a different fix than a 7/10 with spam-trigger words in the subject line.
- Fix the flagged issues in priority order: authentication first (SPF, DKIM, DMARC), then blacklist status, then content.
- Re-test after every fix. Each free test on mail-tester overwrites the previous result at that same address, so you always see your current state.
- Repeat before major sends, not just once. A domain that passed last month can fail today if a DNS record broke or an IP got blacklisted.
Reading the score: what's actually good
The default SpamAssassin threshold that many mail servers use to auto-flag a message as spam is 5.0 (on SpamAssassin's raw, uninverted scale, where higher is worse). Apache's own documentation describes that default as "quite aggressive," meaning some legitimate mail still gets flagged well below it. The practical target most deliverability guides converge on is a raw SpamAssassin score under 2 to 3, which is what a mail-tester result of roughly 8 to 10 out of 10 corresponds to.
| Signal | Safe zone | Investigate | Fix immediately |
|---|---|---|---|
| Raw SpamAssassin score | 0 to 2 | 2 to 5 | 5.0 and above |
| Mail-tester score (inverted, out of 10) | 8 to 10 | 5 to 7 | Below 5 |
| SPF / DKIM / DMARC | All pass | One warning | Any hard fail |
| Blacklist hits | Zero | N/A | One or more |
Two caveats worth internalizing. First, some corporate mail servers set a stricter threshold, as low as 3.0, and you cannot see which threshold a given recipient's server uses, so aim for the safe zone, not the bare minimum. Second, SpamAssassin is not what Gmail, Outlook, or Yahoo actually run: those providers use their own proprietary machine-learning filters. SpamAssassin-based checkers remain a strong proxy for content and authentication hygiene, and they still power spam filtering on many smaller mail servers and hosting environments, but a clean score there is not a guarantee against every major provider's filter.
What a spam score checker cannot tell you
This is the part most guides skip. A perfect content score confirms your email is well-formed: authentication passes, no blacklist hits, no obvious triggers. It does not confirm inbox placement, which also depends on:
- Sender reputation: your domain and IP's send history, complaint rate, and bounce rate over time.
- Engagement history: whether recipients actually open, click, or reply, which providers weight heavily and a one-off test cannot simulate.
- List quality: an authenticated, well-written email sent to a stale or purchased list will still generate complaints and land in spam, regardless of what a spam checker says.
A well-known illustration: reviewers have reported the identical email scoring differently across repeated tests on the same tool, a reminder that a single score is a snapshot, not a guarantee. Treat a good result as a necessary baseline, not a finish line. For the reputation side, sender reputation is the piece that compounds over months, not minutes.
SPF, DKIM, and DMARC: the record types spam checkers actually verify
Every spam score checker's authentication section checks three DNS records. Fix these before anything else if missing, since a failed authentication check drags down every other signal.
A minimal SPF record for a domain sending through Amazon SES looks like this:
v=spf1 include:amazonses.com ~all
A DKIM record is generated per sending domain and provider (you cannot hand-write one); it gets published as a TXT record at a selector-specific hostname, something like:
selector._domainkey.yourdomain.com TXT "v=DKIM1; k=rsa; p=MIGfMA0GCSq..."
A starter DMARC record, set to monitor-only before you enforce anything:
_dmarc.yourdomain.com TXT "v=DMARC1; p=none; rua=mailto:[email protected]"
Once you have confirmed SPF and DKIM both pass consistently, you can move DMARC from p=none to p=quarantine or p=reject. For the full walkthrough on each record and common misconfigurations, see SPF, DKIM, and DMARC explained.
Comparing the best email testing tools
| Tool | Best for | Scoring model | Free tier |
|---|---|---|---|
| Mail-tester.com | Quick pre-send sanity check | SpamAssassin (inverted, /10) | 3 tests per day (basic) |
| GlockApps | Real inbox-placement across providers | Seed-address delivery + content analysis | Limited trial |
| Litmus | Rendering across 90+ clients, plus basic spam checks | Rendering-first, spam testing secondary | Trial only |
| Email on Acid | Rendering plus spam-filter analysis (23+ filters) | Rendering-first, spam testing secondary | Trial only |
| Truelist | Fast content-only check, runs client-side | Rule-based grading (A+ to F) | Free |
The honest way to read this table: content checkers like mail-tester and Truelist tell you whether your email is technically clean. Seed-based tools like GlockApps tell you where a test message actually landed across real Gmail, Outlook, and Yahoo accounts, a different and more expensive question. Rendering tools like Litmus and Email on Acid solve a third problem entirely (how your email looks, not where it lands) and include spam checks as a bonus, not their core job. Most teams end up using a content checker before every send plus something closer to ongoing reputation monitoring in the background, since no single tool covers all three jobs.
Content signals worth fixing before you test
A few patterns show up in nearly every flagged report, worth checking even before you run a tool:
- Spam-trigger phrasing in the subject line. Swap "Free" for "No cost," "Act now" for a specific deadline, "Exclusive deal" for the actual offer.
- Mismatched From and Reply-To domains. Sending from
[email protected]with a reply-to on a different domain is itself a signal filters check for. - No plain-text alternative. An HTML-only email with no text/plain part is a real flag, not a stylistic nitpick.
- Heavy image-to-text ratio. An email that is mostly one large image with little real text reads as evasive, since spammers have historically used images to dodge keyword scanning.
- Broken or shortened links. Link shorteners and dead links both raise the content risk score; use full, resolvable URLs.
How this fits into a regular sending workflow
A spam score checker earns its keep as a habit, not a one-time audit. Run one:
- Before any new domain or subdomain sends its first real campaign.
- After any change to your SPF, DKIM, or DMARC records.
- Before a high-stakes send where deliverability failure is expensive.
- Periodically on standing templates (onboarding, password resets), since authentication can silently break if DNS gets edited for an unrelated reason.
None of this replaces watching your actual send-level metrics after the fact. A clean spam score checker result is a pre-flight check; your real delivered, bounce, and complaint rates are the ground truth, and open-rate data that separates human opens from scanner opens matters too, since inflated numbers from scanners can mask a deliverability problem a spam checker would have caught earlier. For the fuller picture, the email deliverability test guide walks through a complete pre-send checklist, and the email deliverability guide covers authentication through warm-up. For a broader toolkit, see email deliverability tools.
Testing before you send is a five-minute habit that catches problems your subscribers would otherwise never tell you about, since a message that lands in spam generates no complaint and no signal beyond a quietly worse open rate. Run the check, fix what it flags, and treat the result as one input among several, not a verdict.
If you want send-level proof of what actually happened after the send, Meisa tracks delivered, bounce, and true open-rate data behind every campaign, since a clean spam score checker result is the start of the story, not the whole thing.
FAQ
What is a good spam score?
On a SpamAssassin-based checker like mail-tester, aim for 8 to 10 out of 10 (inverted scale), which corresponds to a raw SpamAssassin score under 2 to 3. The commonly cited default block threshold is 5.0 raw points, but some mail servers set a stricter limit, so treat 5.0 as the ceiling to stay well clear of, not the target.
Is mail-tester.com actually free?
Yes, the core web tool is free, typically limited to a few tests per day on the basic tier. Paid plans add more daily tests, longer result retention, and API or iframe access for integrating checks into your own workflow.
Does a perfect spam score guarantee inbox placement?
No. A perfect score confirms your authentication and content are clean, which is necessary but not sufficient. Inbox placement also depends on your sender reputation, recipient engagement history, and list quality, none of which a one-off content check can measure.
How often should I run a spam score check?
Before any new sending domain's first campaign, after any DNS or authentication change, before high-stakes sends, and periodically on long-running automated templates like onboarding or transactional email, since a passing result today does not guarantee a passing result next month.
What is the difference between a spam score checker and inbox placement testing?
A spam score checker (like mail-tester) analyzes one message's content and authentication and returns a score. Inbox placement testing (like GlockApps) sends test messages to real seed inboxes across multiple providers and reports where each one actually landed, inbox, spam, or blocked, which is a more expensive but more direct measurement.
Why did my spam score checker result differ between tests?
Blacklist status and some authentication checks are evaluated in real time, so a domain or IP's standing can change between two tests run minutes apart. Treat any single result as a snapshot of that moment, not a permanent grade.


