Cold email deliverability is the combination of technical setup, list quality, sending behavior, and domain reputation that determines whether your emails land in the inbox or the spam folder. In 2026, achieving 95%+ inbox placement requires four systems working together: proper SPF, DKIM, and DMARC authentication; a verified, low-bounce contact list; a warmed sending domain; and consistent, reputation-safe sending behavior. Missing any one of these sends deliverability into a spiral that is hard to reverse.
This guide covers every layer of cold email deliverability — from DNS setup to monitoring tools — and gives you a system for building and maintaining 95%+ inbox placement at any sending volume.
Why Deliverability Is Harder in 2026
In February 2024, Google introduced mandatory authentication requirements for all senders of 5,000+ emails per day: SPF, DKIM, and DMARC must all be configured. Microsoft followed with similar enforcement in 2025. Beyond authentication, both providers have upgraded their filtering to weigh engagement history more heavily — emails from senders with poor reply-to-send ratios are more likely to land in spam regardless of authentication status.
Related guide: best email outreach tools for link building saas
The result: the baseline requirements for inbox delivery have risen sharply. Teams that were getting by with basic setup in 2022–2023 now find their campaigns flagged or filtered if they haven't updated their infrastructure.
What's changed:
- Authentication (SPF/DKIM/DMARC) is now required, not optional, for bulk senders
- Gmail and Outlook engagement signals now weigh heavily in filtering decisions
- List quality matters more than ever: bounce rates above 2–3% trigger reputation damage faster than before
- AI-powered spam detection at major providers has become better at identifying content patterns, not just technical signals
The Four Pillars of Cold Email Deliverability
Pillar 1: Domain and Technical Setup
Technical setup is the foundation. Without proper authentication, every other deliverability effort is undermined.
Related guide: sales engagement platform
SPF (Sender Policy Framework)
SPF is a DNS record that tells receiving mail servers which IP addresses are authorized to send email from your domain. A basic SPF record looks like:
v=spf1 include:_spf.google.com include:yoursendingservice.com ~allThe ~all at the end means "soft fail" — emails from unauthorized IPs are allowed but flagged. Use -all (hard fail) for stricter enforcement once you've confirmed all legitimate sending sources are listed.
DKIM (DomainKeys Identified Mail)
DKIM adds a cryptographic signature to every outgoing email. The receiving server uses your public key (published in DNS) to verify the signature, confirming the email hasn't been tampered with in transit. Your email sending platform generates the DKIM key pair; you add the public key to DNS as a TXT record.
Related guide: how to improve best cold email service
DMARC (Domain-based Message Authentication, Reporting & Conformance)
DMARC tells receiving servers what to do when an email fails SPF or DKIM checks. Start with:
v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.comp=none is monitor mode — it generates reports without blocking any mail. After reviewing reports for 2–4 weeks, move to p=quarantine (spam folder for failures) and eventually p=reject (block failures outright).
Why a dedicated sending domain matters
Using your primary business domain (company.com) for cold email puts your entire brand email infrastructure at risk. If cold email campaigns damage your sender reputation, that damage affects transactional and relationship emails too. Best practice: set up a dedicated sending domain (outreach.company.com or getcompany.com) and configure all authentication for that domain separately.
Related guide: cold email campaign software guide by SalesOutreach
Pillar 2: Email List Quality
List quality is the highest-impact deliverability variable after technical setup. A bounce rate above 3% begins triggering spam filters. Above 5%, you risk blacklisting.
Real-time email verification
Every contact in your list should be verified before sending. Verification checks:
- Whether the email address exists and can receive mail (mailbox verification)
- Whether the domain is active and has valid MX records
- Whether the address is flagged as a role address (info@, support@), catch-all, or known spam trap
Sending to unverified lists is the single most common cause of deliverability problems. Lists degrade at 25–30% per year — contacts change jobs, companies shut down, domains expire. A list that was 95% accurate 12 months ago may be 70% accurate today.
What to remove from every list:
- Hard bounces (addresses that have previously bounced)
- Role-based addresses (info@, admin@, noreply@) — these are managed by multiple people and have high spam complaint rates
- Catch-all addresses if your bounce tolerance is low (catch-alls accept all email but may not deliver)
- Addresses on your suppression list (previous unsubscribes, complaints)
- Domains that appear on major spam blacklists
List freshness cadence
- Lists older than 6 months: re-verify before each campaign
- Lists older than 12 months: treat as a new cold list requiring full verification
- Purchased or scraped lists: verify 100% before any sends — these are notoriously low-quality
Pillar 3: Domain Warm-Up
A new or inactive sending domain has no reputation with inbox providers. Inbox providers treat unknown senders with suspicion. Sending high volumes immediately from an unwarmed domain almost always results in spam placement.
Warm-up schedule (week by week):
| Week | Daily Send Volume | Target Inbox % | What to Monitor |
|---|---|---|---|
| 1 | 10–20 emails/day | 80%+ | No bounces, check spam placement |
| 2 | 20–40 emails/day | 85%+ | Bounce rate, Postmaster reputation signal |
| 3 | 40–80 emails/day | 88%+ | Spam complaint rate |
| 4 | 80–150 emails/day | 90%+ | Domain reputation in Postmaster Tools |
| 5 | 150–300 emails/day | 92%+ | Reply rate as engagement signal |
| 6+ | 300–500 emails/day | 95%+ | All signals stable before scaling further |
During warm-up:
- Send to your most engaged, highest-quality contacts — replies during warm-up are powerful positive signals
- Use warm-up tools (Mailreach, Warmbox, Lemwarm) running in parallel to generate automated positive engagement signals
- Keep content professional and relevant — avoid spam trigger words during the warm-up period
- Do not take a long pause in sending (more than 3–5 days can reset reputation signals)
Using warm-up tools
Warm-up tools connect your mailbox to a network of other mailboxes. These networked inboxes automatically open your emails, reply, and move them from spam to inbox — simulating positive engagement. Run a warm-up tool continuously, not just during the initial period. Ongoing warm-up activity maintains your reputation signals while live campaigns run in parallel.
Pillar 4: Sending Behavior
How you send matters as much as what you send. Inbox providers evaluate sending patterns as a quality signal.
Volume consistency
Never double your sending volume week over week. Sudden spikes from a domain trigger filters. Increase volume gradually — 20–30% per week is a safe ramp rate after initial warm-up.
Timing
Sending during business hours for the recipient's timezone produces better engagement signals, which in turn improve deliverability. Avoid sending large batches in the early morning hours when most recipients aren't active.
Reply-to-send ratio
Inbox providers, especially Gmail, track the percentage of your emails that recipients reply to. A higher reply rate signals that recipients find your emails valuable. This is why targeting quality matters: a highly targeted 500-contact campaign with 15% replies will build better domain reputation than a 5,000-contact blast with 0.5% replies.
Unsubscribe compliance
Make it easy to unsubscribe. Include a clear unsubscribe option in every sequence. Gmail requires an unsubscribe link for bulk senders (5,000+/day). Making unsubscribing easy reduces spam complaints — which are 10x more damaging to reputation than unsubscribes.
Sending infrastructure
Use a reputable ESP (Email Service Provider). IP reputation matters. Shared IPs on low-quality ESPs carry the reputation of all other senders on the same IP. Dedicated IPs give you full control of your reputation but require you to build it from scratch.
Monitoring Your Deliverability
Deliverability monitoring should happen weekly, not just when something goes wrong.
Core monitoring stack:
Google Postmaster Tools (free)
Set up at postmaster.google.com. After domain verification, you get weekly data on:
- Domain reputation (High / Medium / Low / Bad)
- Spam rate (percentage of emails your recipients mark as spam)
- IP reputation
- Authentication compliance
Target: Domain reputation "High," spam rate below 0.10%.
Sender Score (senderscore.org)
A 0–100 score for your sending IP, updated daily. Scores above 80 indicate healthy reputation. Below 70 means deliverability is likely impacted. Check monthly as a baseline indicator.
MXToolbox (mxtoolbox.com)
Run blacklist checks to see if your sending domain or IP appears on major spam blacklists (Spamhaus, Barracuda, SpamCop). Run after any campaign that generates higher-than-normal bounces or spam complaints.
Mail-Tester (mail-tester.com)
Send a test email to a unique address provided by Mail-Tester; it returns a 1–10 score with itemized feedback on authentication, content, and spam likelihood. Run before every new campaign launch.
Inbox placement testing (GlockApps, Litmus)
These tools send test emails to seed accounts at major providers (Gmail, Outlook, Yahoo) and report the placement result (inbox / promotions / spam) per provider. Essential for identifying provider-specific issues.
Diagnosing and Recovering from Deliverability Problems
Signs of a deliverability problem:
- Open rates dropping 30%+ from your baseline
- Bounce rate climbing above 2%
- Spam complaint rate above 0.10% in Postmaster Tools
- Domain reputation dropping from "High" to "Medium" or below in Postmaster Tools
- MXToolbox blacklist check shows a listing
Recovery protocol:
- Pause high-volume sending immediately — continuing to send at volume while reputation is damaged makes recovery harder
- Verify and clean your list — remove all bounces, complaints, and unverified addresses
- Check authentication — use MXToolbox and Mail-Tester to confirm SPF, DKIM, DMARC are all passing
- Check for blacklisting — if listed on Spamhaus or another major blacklist, submit a removal request after resolving the root cause
- Resume at 20% of previous volume — rebuild reputation gradually, sending only to your most engaged, highest-quality contacts
- Monitor weekly — track Postmaster Tools domain reputation weekly; do not scale volume again until reputation stabilizes at "High"
Full recovery from a severely damaged reputation typically takes 4–12 weeks of disciplined low-volume sending.
The SalesOutreach Approach to Deliverability
SalesOutreach is built around the principle that deliverability is a system, not a feature. It implements all four pillars by default:
- Pillar 1 — Authentication setup guidance and dedicated domain recommendations during onboarding
- Pillar 2 — Real-time email verification built into the prospecting workflow, achieving 95%+ email accuracy
- Pillar 3 — Built-in warm-up tools that run continuously alongside live campaigns
- Pillar 4 — Sender health monitoring and sequence pacing controls that prevent volume from outrunning reputation
The result: 95%+ inbox delivery for campaigns run on properly configured SalesOutreach accounts, and 3x reply rate improvements compared to manual outreach on unverified lists.
Frequently Asked Questions
Q: What is a good cold email deliverability rate?
A strong cold email deliverability rate is 95% or higher inbox placement — meaning 95 out of 100 emails reach the recipient's inbox rather than spam or promotions. The industry average for properly configured cold email campaigns is around 85–90%. Rates below 80% indicate a technical or list quality problem that needs immediate attention.
Q: How long does it take to fix cold email deliverability?
Minor deliverability issues (spam trigger words, a few bad addresses) can be fixed in days. Domain warm-up for a new domain takes 4–6 weeks to reach full sending capacity. Recovering from blacklisting or a severely damaged sender reputation can take 4–12 weeks of disciplined low-volume sending and active monitoring.
Q: Does cold email deliverability affect all email providers equally?
No. Gmail and Outlook have the most sophisticated multi-layer filtering systems that evaluate authentication, sender reputation, engagement history, and content simultaneously. Yahoo and other providers use simpler heuristics. Because most B2B prospects use Google Workspace or Microsoft 365, Gmail and Outlook deliverability should be your primary benchmarks.
Q: What is the biggest cause of cold email landing in spam?
The single most common cause is sending to unverified or outdated email lists that generate high bounce rates. A bounce rate above 3–5% signals to inbox providers that your sending practices are low-quality, which damages your domain reputation and triggers spam filtering. Real-time email verification before every campaign is the highest-impact single fix.
Q: Do I need all three — SPF, DKIM, and DMARC?
Yes, in 2026. Google requires all three for bulk senders (5,000+ emails/day) as of February 2024. Inbox providers treat the absence of any one protocol as a deliverability risk signal even for lower-volume senders. SPF and DKIM can be set up in under an hour. DMARC should start in p=none (monitor mode) and be moved to p=quarantine and p=reject over several weeks.
Q: How often should I check my email deliverability?
Weekly during active campaigns. The minimum monitoring stack: Google Postmaster Tools (domain reputation and spam rate) weekly, MXToolbox blacklist check monthly or after any high-bounce campaign, and Mail-Tester before every new campaign launch.