Cold Email Deliverability: A Technical Guide to Reaching the Inbox
You can write the best cold email in the world and it won't matter if it lands in spam. Deliverability is the foundation of every outbound program, and most teams get it wrong because they treat it as a set-and-forget configuration instead of an ongoing discipline. The rules changed in 2024 when Google and Yahoo started enforcing strict sender requirements. Bulk senders without proper authentication now get throttled or blocked entirely. This guide covers the technical setup, sending practices, and monitoring systems that keep your emails in the primary inbox.
Technical guide to cold email deliverability. DNS setup, domain warming, sending limits, and inbox placement strategies for B2B outbound teams.
Set Up DNS Authentication Before You Send a Single Email
Three DNS records determine whether email providers trust your sending domain: SPF, DKIM, and DMARC. If any of these are missing or misconfigured, your emails are more likely to hit spam. After Google's February 2024 enforcement changes, they're effectively mandatory for any volume above 100 emails per day.
SPF (Sender Policy Framework) tells receiving servers which IP addresses are authorized to send email from your domain. Your SPF record needs to include every service that sends email on your behalf: your sales engagement platform, your marketing automation tool, your transactional email service, and any warm-up tools. A common mistake is hitting the 10-lookup limit. Each "include" statement counts as a lookup, and exceeding 10 causes the entire SPF record to fail silently.
DKIM (DomainKeys Identified Mail) adds a cryptographic signature to each email that proves it came from your domain. Most email platforms generate the DKIM key for you and ask you to add a CNAME record. Make sure you set up DKIM for every sending service, not just your primary one.
DMARC (Domain-based Message Authentication, Reporting and Conformance) tells receiving servers what to do with emails that fail SPF or DKIM checks. Start with a DMARC policy of "none" (monitoring mode) and gradually move to "quarantine" and then "reject" as you confirm your authentication is working. DMARC also sends you reports showing who is sending email from your domain, which helps detect spoofing.
Use Separate Domains for Cold Outbound (Not Your Primary Domain)
This is the single most important tactical decision for outbound deliverability. Never send cold email from your primary company domain. If your company is acme.com, buy acme-mail.com or tryacme.com and use that for outbound.
The reason is simple: cold email carries inherent reputation risk. Even with perfect sending practices, some recipients will mark your messages as spam. Spam complaints damage your domain reputation. If that domain is acme.com, your marketing emails, transactional emails, and internal communications all suffer. Separating outbound to a secondary domain creates a firewall around your primary domain's reputation.
Buy 2-3 secondary domains per outbound rep. Each domain should support 2-3 mailboxes. A single mailbox should send no more than 30-50 cold emails per day. So a rep sending 100 emails per day needs 3 mailboxes across 2 domains. This spreading reduces the concentration risk on any single domain.
Make the secondary domains look legitimate. Set up a simple landing page (even a redirect to your main site), configure all three DNS records (SPF, DKIM, DMARC), and use naming that's obviously connected to your brand. Receiving servers and spam filters check for these signals. A brand-new domain with no web presence, no DNS authentication, and a .io TLD sending 100 emails on day one will get flagged immediately.
Warm Up New Domains and Mailboxes for 2-3 Weeks
A new domain has no sending reputation. Email providers treat unknown senders with suspicion. Warming up builds that reputation gradually by sending small volumes of emails that get opened, replied to, and marked as "not spam."
Use a dedicated warm-up tool like Instantly's warm-up network, Lemlist's Lemwarm, or Smartlead's built-in warming. These tools send emails between a pool of mailboxes, automatically open them, reply to them, and move them out of spam if they land there. The simulated engagement signals to Google and Outlook that your domain sends mail people want to receive.
Start with 5-10 warm-up emails per day per mailbox during week one. Increase to 20-30 per day in week two. By week three, you should be at 40-50 total emails (warm-up plus real sends combined) per mailbox per day. Don't rush this. Jumping to high volume before the domain has established reputation is the fastest way to get blacklisted.
Keep warm-up running even after you start real sends. The ongoing engagement from warm-up emails maintains your sending reputation and counterbalances any spam complaints from your cold outreach. Most teams run warm-up at 20-30 emails per day indefinitely alongside their real sending volume.
Manage Sending Volume and Cadence Like a Portfolio
Volume spikes kill deliverability. If you sent 50 emails yesterday and 500 today, email providers interpret that as spammy behavior. Consistent daily volume is one of the strongest positive signals for inbox placement.
Per-mailbox limits are the foundation. For Google Workspace accounts, stay under 50 cold emails per day per mailbox. For Outlook/Microsoft 365, the limit is similar but enforcement varies by tenant. These aren't hard caps set by the providers (Google's technical limit is 2,000/day), but they're the practical limits where cold email maintains good deliverability.
Spread sends across the business day. Don't blast 50 emails at 8:00 AM. Use your sales engagement platform's sending window to distribute emails between 8 AM and 4 PM in the recipient's timezone, with randomized gaps of 3-8 minutes between sends. This mimics natural human sending patterns.
Monitor bounce rates obsessively. A bounce rate above 3% signals to email providers that you're sending to bad data. Hard bounces (invalid addresses) are worse than soft bounces (full inbox, out of office). If your bounce rate crosses 5%, stop sending and clean your list. Most sales engagement platforms track this, but also check your Google Postmaster Tools dashboard weekly for domain-level delivery metrics.
Write Emails That Pass Spam Filters and Get Replies
Spam filters have gotten sophisticated. They analyze content patterns, sender behavior, recipient engagement, and hundreds of other signals. But a few content-level best practices make a measurable difference.
Keep emails short. Under 150 words performs best for cold outreach. Long emails correlate with lower reply rates and higher spam filtering. Every sentence needs to earn its place.
Limit links to one or zero per email. Tracking links (the kind your engagement platform uses for open and click tracking) are a known spam trigger because every spam email uses them too. Some teams disable click tracking entirely on cold emails and only track opens. Test both approaches with your specific sending setup.
Avoid spam trigger words and formatting. All caps, excessive exclamation marks, "FREE", "limited time", and aggressive sales language all increase spam scoring. More subtly, identical emails sent to hundreds of people trigger duplicate content filters. Personalize at least the first line and one other element per email using merge fields or AI-generated custom lines.
Plain text outperforms HTML for cold email. HTML templates with images, buttons, and styled layouts look like marketing emails, and spam filters treat them accordingly. A short plain-text email that reads like a human wrote it to one person is the format that both reaches the inbox and gets replies.
Monitor Deliverability With the Right Tools
You can't improve what you don't measure. And most sales engagement platforms don't give you enough deliverability data to diagnose problems.
Google Postmaster Tools is free and essential for anyone sending to Gmail addresses (which is most B2B outbound). It shows your domain reputation, spam rate, authentication pass rates, and delivery errors. Check it weekly. If your domain reputation drops from "High" to "Medium" or "Low," reduce volume immediately and investigate.
Microsoft SNDS (Smart Network Data Services) provides similar insights for Outlook and Hotmail deliverability. It's less detailed than Google's tool but still worth monitoring if a significant portion of your prospects use Microsoft email.
Use an inbox placement testing tool like GlockApps, Mail-Tester, or Mailreach before launching new sequences. These tools send your email to a panel of test addresses across Gmail, Outlook, Yahoo, and other providers, then report where the email landed (inbox, promotions, spam, or blocked). Run these tests weekly and whenever you change your email templates or sending configuration.
Track your own metrics rigorously. Open rates below 30% on cold email suggest deliverability issues (assuming decent subject lines). Reply rates below 1% mean something is wrong with either deliverability or messaging. Bounce rates above 3% mean your data is bad. Set alerts on all three metrics so you catch degradation early instead of discovering it a month later.
Recovery Playbook: What to Do When You Hit Spam
If your domain reputation tanks or you land on a blacklist, don't panic. Recovery is possible but it takes time and discipline.
First, stop all cold sending from the affected domain immediately. Continuing to send from a blacklisted or low-reputation domain makes the problem worse. Pause your sequences and switch to a backup domain if you have one.
Second, diagnose the cause. Check MXToolbox for blacklist presence. Review Google Postmaster for the reputation drop timeline. Look at your recent sending for volume spikes, high bounce rates, or spam complaint spikes. The cause is almost always one of these: you sent too much too fast, your data quality was poor (high bounces), or recipients flagged your emails as spam.
Third, fix the root cause before you resume. If it was volume, reduce your per-mailbox limit by 50%. If it was data quality, reverify your entire list through a service like NeverBounce or ZeroBounce. If it was spam complaints, rewrite your emails and tighten your targeting.
Fourth, warm up again. Treat the domain like a new domain. Run warm-up only (no real sends) for 1-2 weeks. Gradually reintroduce real sends at 25% of your previous volume. Ramp back up over 3-4 weeks. Full recovery from a major deliverability hit typically takes 4-6 weeks.
Tools Mentioned in This Guide
Related Categories
Frequently Asked Questions
How many cold emails can I send per day per mailbox?
For Google Workspace, stay under 50 per mailbox per day. For Outlook/M365, similar limits apply. Spread sends across 2-3 mailboxes per domain, and use 2-3 secondary domains per rep. A rep sending 100 cold emails per day needs roughly 3 mailboxes across 2 domains.
How long does it take to warm up a new email domain?
Two to three weeks minimum. Start with 5-10 warm-up emails per day in week one, ramp to 20-30 in week two, and begin mixing in real sends in week three. Keep warm-up running at 20-30 per day indefinitely alongside your outbound to maintain reputation.
Should I use open tracking on cold emails?
Open tracking uses a tracking pixel, which is a known spam signal. Many teams disable open tracking on cold emails and rely on reply rates instead. Test both with your setup. If you see a meaningful deliverability improvement with tracking disabled, the reply rate data alone is usually sufficient.
What's a good bounce rate for cold email?
Under 3% is acceptable. Under 1% is excellent. Above 5% means your data is bad and you should pause sends and clean your list. Hard bounces (invalid addresses) are more damaging to reputation than soft bounces (temporary issues like full inboxes).