Cold Email Deliverability: The Complete Guide

Cold email deliverability is whether your message reaches the inbox rather than spam. It depends on four things: authentication with SPF, DKIM and DMARC, sending from secondary domains rather than your primary, a three to four week warm up period, and list quality that keeps bounce rate below three percent.

Cold email deliverability is the difference between a campaign that books meetings and one that quietly disappears into spam folders while your dashboard reports a healthy send rate. Most failed outbound campaigns are not failures of copy or targeting. They are failures of deliverability, and the sender usually never finds out.

This guide covers everything required to reach the inbox consistently: authentication, infrastructure, warm up, sending behaviour and the specific mistakes that destroy sender reputation.

Why cold email deliverability is harder than it was

In 2024 Google and Yahoo introduced enforced requirements for bulk senders. SPF, DKIM and DMARC became mandatory rather than advisory. Spam complaint rates above 0.3 percent now trigger throttling or outright blocking. One click unsubscribe became a requirement.

The practical effect is that the old approach, buy a list and send five thousand emails from your main domain, now fails within days and can damage your primary domain permanently. Deliverability is no longer a technical footnote. It is the foundation the entire channel sits on.

Step one: never send cold email from your primary domain

This is the rule that prevents the worst outcome. If you send outbound from yourcompany.com and reputation degrades, your invoices, your contracts and your internal email start landing in spam. That damage is slow to reverse.

Instead, register secondary domains that resemble your primary. If your company is at yourcompany.com, register variants such as yourcompany.co, getyourcompany.com or try-yourcompany.com. Point them at your main site, set them up fully, and send outbound only from those.

Typical structure for a serious outbound programme: three to five secondary domains, three mailboxes on each, giving nine to fifteen sending inboxes. At a conservative 30 to 40 emails per inbox per day, that supports roughly 300 to 600 sends daily without pushing any single mailbox into risk.

Step two: authentication, in plain terms

SPF, Sender Policy Framework

A DNS record listing which servers are permitted to send email for your domain. Without it, receiving servers cannot verify the sender is authorised, and treat the message with suspicion.

One critical detail: SPF permits a maximum of ten DNS lookups. Exceeding it causes a permanent error and silently breaks authentication. If you use several sending services, flatten the record or consolidate.

DKIM, DomainKeys Identified Mail

A cryptographic signature proving the message was genuinely sent by your domain and was not altered in transit. Use a 2048 bit key. Most providers generate this automatically, but many users never publish the resulting DNS record, which means DKIM silently fails.

DMARC, Domain based Message Authentication, Reporting and Conformance

Ties SPF and DKIM together and tells receiving servers what to do when a message fails both. Start at p=none while monitoring reports, then move to p=quarantine once you have confirmed legitimate mail passes.

DMARC also produces aggregate reports showing exactly who is sending mail claiming to be you. That is worth having regardless of outbound.

Step three: warm up properly, and do not rush it

A brand new domain sending fifty cold emails on day one is the clearest possible spam signal. Warm up establishes a sending history that looks like a real person using a real mailbox.

• Week 1: 5 to 10 — Warm up network only, high reply rate, no cold sends

• Week 2: 10 to 20 — Warm up continues, replies and folder moves accumulating

• Week 3: 20 to 30 — First small cold batch, monitored closely

• Week 4: 30 to 40 — Cold volume ramps, warm up continues in background

• Ongoing: 40 max — Warm up never fully stops

Three to four weeks of patience protects an asset you will use for years. Skipping it is the most common and most expensive mistake in cold email.

We do this setup work every week — see the results clients report from campaigns we built, or have your setup reviewed.

Step four: list quality is a deliverability decision

Bounce rate is the fastest way to destroy sender reputation. Above three percent, providers begin throttling. Above five percent, expect blocking.

• Verify every address before sending. Non negotiable at any volume.

• Remove catch all domains or segment them separately, since they accept everything and tell you nothing.

• Strip role based addresses such as info@, sales@, support@ and admin@. They convert poorly and complain frequently.

• Re verify lists older than 90 days. B2B data decays at roughly two percent per month as people change jobs.

There is a strategic point buried here. Better targeting improves deliverability, because relevant email gets opened and replied to, and engagement is the strongest positive signal a mailbox provider has. Precision is not just a conversion tactic, it is a technical one.

Step five: what the content itself does to deliverability

• Plain text beats HTML. Real people do not send templated HTML to individuals. Avoid images and heavy formatting entirely in the first message.

• Remove tracking pixels from the first email. Open tracking inserts an invisible image that many filters treat as a spam marker. Track replies instead, which is the only metric that matters anyway.

• Avoid links in email one where possible. If a link is needed, use a plain domain rather than a shortener, since shorteners are heavily associated with spam.

• Keep it short. Under 80 words. Long cold emails perform worse and read as templated.

• Vary the copy. Identical text sent thousands of times is a pattern filters detect. Use spintax or genuine per segment variants.

• Always include a one click unsubscribe. Now a formal requirement for bulk senders, and it prevents the spam complaints that do far more damage.

Step six: monitor the right signals

Deliverability degrades quietly. By the time reply rates drop, the problem is weeks old.

• Reply rate is the health metric. A sudden fall usually means placement, not copy.

• Bounce rate per campaign, checked before scaling any list.

• Spam complaint rate, which must stay below 0.3 percent.

• Inbox placement tests run weekly to actual seed accounts across Gmail, Outlook and common European providers.

• Blacklist monitoring on every sending domain and IP.

• Google Postmaster Tools, which is free and shows your spam rate and compliance status directly from the source.

The mistakes that ruin cold email deliverability

• Sending from the primary domain. The single most damaging error.

• Skipping warm up because the campaign is urgent.

• Buying a bulk list and sending without verification.

• Publishing DKIM but never checking it validates.

• Sending 200 emails a day from one mailbox.

• Leaving open tracking on in the first touch.

• Sending on a fixed schedule at exactly the same minute daily.

• Ignoring replies. Unanswered conversations reduce engagement signals.

• Continuing to send to a segment showing a five percent bounce rate.

The summary. Cold email deliverability is not a setting you switch on. It is infrastructure, patience and list discipline. Get the foundation right and average copy will book meetings. Get it wrong and the best copy in your industry will never be seen. If you are starting from zero, budget three to four weeks before the first campaign sends, and treat that time as part of the work rather than a delay.

Frequently asked questions

Why do my cold emails go to spam?

The most common causes are sending from an unwarmed domain, missing or misconfigured DKIM, a bounce rate above three percent from unverified lists, open tracking pixels in the first email, and sending too many messages per mailbox per day. Fix authentication first, then warm up.

How long should email warm up take?

Three to four weeks minimum. Week one sends five to ten emails per inbox to a warm up network only. Volume increases weekly until you reach 30 to 40 per inbox per day by week four. Warm up should continue in the background permanently, never fully stop.

How many cold emails can I send per day?

Around 30 to 40 per mailbox per day once fully warmed. Scale by adding inboxes, not by increasing per inbox volume. Three to five secondary domains with three mailboxes each gives nine to fifteen inboxes, supporting 300 to 600 daily sends safely.

Do I need SPF, DKIM and DMARC for cold email?

Yes. All three are now mandatory for bulk senders under Google and Yahoo requirements introduced in 2024. SPF authorises your sending servers, DKIM cryptographically signs the message, and DMARC tells receiving servers what to do when the first two fail.

Should I use my main domain for cold email?

No. If reputation degrades, your invoices, contracts and internal email start landing in spam, and that damage is slow to reverse. Register secondary domains that resemble your primary, point them at your main site, and send outbound only from those.

Does open tracking hurt deliverability?

Yes, in the first email. Open tracking inserts an invisible image, which many filters treat as a spam signal. Track replies instead, which is the only metric that reliably predicts meetings anyway and is not distorted by privacy protections that pre load images.