How to avoid iCloud's spam folder
Apple does not offer allowlists or feedback loops for iCloud Mail. Your reputation as a sender is determined automatically based on how you send and how recipients engage with your email. The best way to land in the inbox is to follow the requirements below consistently.
Authenticate Your Email
Section titled “Authenticate Your Email”Like every major mailbox provider, iCloud uses email authentication to confirm that you are who you say you are. Apple requires that bulk senders authenticate with SPF, DKIM, and DMARC.
| Authentication | Requires Setup | Purpose |
|---|---|---|
| SPF | No | Proves you are allowed to send from this domain |
| DKIM | No | Proves your email originated from you |
| DMARC | Yes | Proves you own the domain and instructs how to handle spoofs |
When you verify your domain with Resend, SPF and DKIM are configured and validated for you automatically, so your email meets Apple's authentication requirements out of the box. Resend also signs every message with DKIM and handles SPF alignment on your behalf, so you don't have to manage these records yourself. Apple additionally requires that your sending domain publish a DMARC policy.
Action Items
- Verify your domain with Resend to set up SPF and DKIM automatically
- Setup DMARC for your domain
Use Consistent, Reputable Infrastructure
Section titled “Use Consistent, Reputable Infrastructure”iCloud builds trust over time based on the domains you send from. Keeping your sending consistent helps Apple recognize you as a legitimate sender.
- Separate your marketing and transactional streams so each can build its own reputation.
- Maintain a consistent
From:name and address so recipients (and Apple) recognize your brand. - Make sure your email is RFC 5321 and RFC 5322 compliant.
Action Items
- Use dedicated sending addresses for marketing vs. transactional email
Send Only to Recipients Who Opted In
Section titled “Send Only to Recipients Who Opted In”Apple requires that you send only to recipients who explicitly subscribed to your emails. Purchased lists, rented lists, and email appends are not permitted and will damage your reputation.
Prevent sending to recipients who:
- Didn't explicitly opt in to your emails
- Show no signs of engagement with your emails
- Requested to be unsubscribed
- Marked your emails as spam (complained)
- Never received your email (bounced)
Action Items
- Only send to recipients who explicitly subscribed
- Use Webhooks to remove bounced or complained recipients from your list
- Never resume sending to addresses on your suppression list
Simplify the Unsubscribe Process
Section titled “Simplify the Unsubscribe Process”Apple requires bulk senders to offer an unsubscribe link so recipients can opt out immediately. You can implement one-click unsubscribe for the best user experience.
Action Items
- Include a clearly visible unsubscribe link in bulk emails
- Add Unsubscribe Headers to enable one-click unsubscribe
Keep Your List Clean
Section titled “Keep Your List Clean”iCloud monitors recipient engagement closely. Continuing to send to inactive or invalid addresses lowers your reputation.
- Periodically remove inactive subscribers.
- Handle bounces with a standard suppression policy.
- Keep your spam complaint rate low.
Action Items
- Regularly prune inactive subscribers from your list
- Suppress bounced and complained addresses automatically
Monitor SMTP Errors
Section titled “Monitor SMTP Errors”When iCloud rejects or defers a message, it returns an SMTP error explaining why. Apple expects senders to track both temporary and permanent errors and respond appropriately, rather than retrying blindly.
Action Items
- Review your mail logs and Resend dashboard for SMTP errors
- Adjust your sending based on temporary (defer) vs. permanent (reject) errors
If You're Still Having Issues
Section titled “If You're Still Having Issues”Apple does not provide allowlists or feedback loops, but for unresolved delivery problems you can contact Apple at icloudadmin@apple.com. Include your company name, domain, the SMTP errors you're seeing, and a detailed description of the issue.
Summary
Section titled “Summary”Email deliverability is overwhelming. One way to simplify it is to think: what would a phisher do?
Then do the opposite!
iCloud's goal is to only show emails that their users want to see. Reverse engineer phishing sending habits and consider how you can prove to Apple at each step that you clearly have no malicious intent.