Cold Email
Cold Email Deliverability Best Practices That Keep You Out of Spam
Aug 28, 2026
The short answer
Keep cold email out of spam by authenticating your sending domain with SPF, DKIM, and DMARC; warming the inbox before scaling volume; verifying every address before import; keeping bounce rate below 3%; and writing plain-text-style messages without heavy HTML, tracked images, or spam-trigger phrases. Each of these controls a different layer of how mail servers and spam filters evaluate your messages.
Key takeaways
- Authenticate every sending domain with SPF, DKIM, and DMARC before sending a single cold email.
- Warm a new inbox for at least four weeks before sending more than 30–50 cold emails per day.
- A bounce rate above 3% signals a dirty list and will damage your domain reputation with receiving mail servers.
- Use a dedicated subdomain or separate sending domain to protect your primary brand domain.
- Plain-text-style emails with one link or fewer consistently outperform HTML-heavy templates on deliverability.
- List hygiene is not a one-time task — re-verify contacts older than six months before reusing them.
How Do You Keep Cold Email Out of the Spam Folder?
Cold email deliverability best practices come down to three layers: your sending infrastructure, your list quality, and your sending behavior. Fix all three and inbox placement improves dramatically. Ignore one and the other two don't matter.
Google's Email Sender Guidelines, updated in 2024, now require SPF, DKIM, and DMARC for anyone sending bulk email to Gmail addresses — and set a spam-rate threshold of 0.10% before deliverability consequences kick in, with a hard limit at 0.30%. Yahoo's Sender Requirements enforce the same authentication stack. These aren't suggestions; they're enforced at the infrastructure level.
This guide covers each layer in order — authentication, warmup, list hygiene, and copy and behavior — because that's the order in which problems compound.
Do You Need SPF, DKIM, and DMARC for Cold Email?
Yes. Without them, receiving mail servers have no way to verify that your message actually came from you, and many will route it to spam or reject it outright.
SPF (Sender Policy Framework)
SPF is a DNS TXT record that lists the IP addresses and services authorized to send email on behalf of your domain. When a receiving server gets your message, it checks whether the sending IP matches your SPF record. If it doesn't, the message fails SPF.
Add your email sending service (your sequencing tool, your ESP) to your SPF record. If you use multiple sending services, all of them need to be included. Keep the record under the DNS lookup limit — SPF allows a maximum of ten DNS lookups per check, and exceeding that causes failures.
DKIM (DomainKeys Identified Mail)
DKIM adds a cryptographic signature to outgoing messages. The receiving server uses a public key published in your DNS to verify that the message body and headers weren't altered in transit. Most modern sending tools generate a DKIM key for you — you publish it in DNS and enable signing in the tool.
Use a 2048-bit key length if your DNS provider supports it. It's more secure than 1024-bit and widely supported now.
DMARC (Domain-based Message Authentication, Reporting & Conformance)
DMARC ties SPF and DKIM together. It tells receiving servers what to do when a message fails authentication: nothing (p=none), send it to spam (p=quarantine), or reject it entirely (p=reject). It also sends you reports so you can see who is sending on behalf of your domain.
Start with p=none to monitor without affecting delivery. Once you've confirmed your legitimate sending sources are all passing, move to p=quarantine or p=reject to actively protect your domain from spoofing.
Minimum viable authentication setup:
| Record | What it does | Where to add it |
|---|---|---|
| SPF | Authorizes sending IPs | DNS TXT record on your sending domain |
| DKIM | Signs each message cryptographically | DNS TXT record (key generated by your tool) |
| DMARC | Defines policy for auth failures | DNS TXT record (_dmarc.yourdomain.com) |
All three records go on your sending domain, not your primary brand domain — which brings us to the next point.
Should You Use a Dedicated Sending Domain?
Never send cold email from the same domain you use for your website, marketing emails, and transactional messages. If your outbound campaign generates complaints or bounces — and at scale, it will — you want that reputation damage isolated.
Register a close variant of your main domain (for example, tryyourcompany.com or yourcompany-hq.com), redirect it to your main site, and set up SPF, DKIM, and DMARC on that variant. Use it exclusively for cold outbound.
How Long Does Inbox Warmup Take?
A new inbox with no sending history looks suspicious to mail servers. Sending 200 cold emails on day one from a brand-new domain is a fast path to the spam folder or a blacklist.
What Warmup Actually Does
Warmup tools send emails between a network of real inboxes and automatically reply to them, move them out of spam, and mark them as important. This builds a positive engagement history on your domain and IP. Mail servers interpret engagement signals — opens, replies, not-spam markings — as evidence that real humans want your messages.
How Long Warmup Takes
Plan for a minimum of four weeks. Most warmup tools recommend six to eight weeks before you run high-volume cold sequences. During warmup, your actual cold sending volume should be low — no more than 20 to 30 per day in the first two weeks, ramping slowly.
What to Do During Warmup
- Keep cold sends to a trickle while warmup runs in the background.
- Don't send to purchased lists during this period — those tend to have high bounce rates that will undercut the warmup progress.
- Monitor your spam placement rate in the warmup tool's dashboard. If it's rising, slow down.
How Do You Clean a Cold Email List?
A dirty list is the most common reason deliverability collapses mid-campaign. Invalid addresses generate hard bounces, which tell receiving mail servers your list wasn't verified — a signal associated with spam. Google's sender guidelines flag accounts that exceed a 0.30% spam rate, and a high bounce rate accelerates you toward that threshold.
Verify Emails Before Import
Every address should be verified before it enters a sequence. Verification tools check whether an address exists, whether the mailbox is active, and whether the domain has valid MX records. They flag catch-all addresses (where the server accepts any email regardless of whether the mailbox exists) and role-based addresses like info@ or support@, which should be excluded from cold outbound.
If you're building prospecting lists with a tool like Orange Slice, prioritize contacts where the email is verified at the point of enrichment rather than guessed from a name pattern. Guessed patterns inflate your bounce rate. Orange Slice surfaces verified emails sourced from LinkedIn intelligence and enrichment signals — it doesn't do email validation as a standalone service, so run your final list through a dedicated verifier before importing to your sequencer.
Re-Verify Old Lists
B2B email addresses go stale fast. People change jobs, companies get acquired, and domains expire. Any list older than six months should be re-verified before you use it again. This is especially true for lists built from static exports — the data was accurate when pulled, but it degrades quickly.
How Should You Segment by Data Quality?
Not all contacts in a list carry the same risk. Separate verified addresses from catch-alls and send them through different sequences with different sending limits. Treat catch-alls as higher-risk and keep their volume lower.
For more on building clean, high-quality prospect lists from the start, see the lead generation agent and data enrichment agent pages — clean data upstream means less remediation before you send.
Does Sending Behavior Affect Spam Placement?
Yes. Even with perfect authentication and a clean list, sending behavior can trigger spam filters. Filters look at volume spikes, sending patterns, and engagement rates.
Spread Sends With Randomized Intervals
Don't send all your emails at 9:00 AM on the dot. Sequencing tools let you set randomized intervals between sends — use them. Sending 80 identical-looking messages in a 10-minute window is a pattern associated with spam blasts, not human-initiated outreach.
Respect Daily Volume Limits
Even a fully warmed inbox has a ceiling. Most practitioners keep cold sends to 50–100 per day per inbox. If you need more volume, add more sending inboxes on separate sending domains — don't push a single inbox past its limit.
Monitor Replies and Engagement
Low reply rates and high delete-without-open rates are negative engagement signals. They tell mail servers your messages aren't wanted. This is where copy quality and targeting intersect with deliverability: a poorly targeted message that gets deleted immediately is a deliverability problem, not just a conversion problem.
Does Cold Email Copy Affect Deliverability?
Yes. Spam filters read your messages. Copy that triggers filter rules hurts placement regardless of how clean your infrastructure is.
Keep It Plain
Plain-text-style emails — minimal or no HTML, no embedded images, no heavy formatting — perform better on deliverability than designed templates. This isn't just a filter issue; plain emails also look more like something a human wrote, which improves reply rates.
Limit Tracked Links
Every tracked link is a redirect through a third-party domain. If that domain has a poor reputation, it drags yours down. Use one tracked link at most — ideally your calendar link or a single CTA — and skip the tracking pixel if inbox placement is more important to you than open rate data.
What Subject Line Phrases Trigger Spam Filters?
Subject lines that read like marketing copy — "Don't miss this," "Limited time," "Free," "You've been selected" — are patterns spam filters have seen millions of times. Write subject lines that look like what they are: the first line of a business email from one person to another.
Tie It All Together in Your Outbound Workflow
Deliverability isn't a one-time setup task. It's an ongoing system: authenticated domains, warmed inboxes, verified lists, controlled sending behavior, and copy that earns replies.
The most effective outbound teams build this as a repeatable workflow — not something they debug after a campaign goes sideways. If you're thinking about how to systematize this across your prospecting, enrichment, and sequencing steps, the use cases hub has concrete plays that show how the pieces connect. For teams that want to automate the multi-step process end to end, workflows covers how to chain these steps without manual handoffs.
Get the infrastructure right first. Then focus on the list. The copy comes last — and it's only worth optimizing once the first two layers are solid.
Frequently asked questions
What is email warmup and how long does it take?
Email warmup is the process of gradually increasing sending volume on a new inbox so receiving mail servers build a positive reputation for it. You start with a small number of emails per day — often 5 to 10 — and ramp up over four to eight weeks. Warmup tools automate this by sending and replying to messages between a network of real inboxes, which signals engagement to spam filters.
What DNS records do I need for cold email — SPF, DKIM, or DMARC?
You need all three. SPF tells receiving servers which IPs are allowed to send on behalf of your domain. DKIM adds a cryptographic signature to each message so servers can verify it wasn't tampered with. DMARC tells servers what to do when SPF or DKIM fail — reject, quarantine, or do nothing. Missing any one of them raises your spam score with most modern filters.
Should I send cold email from my main domain or a separate one?
Send from a separate sending domain or subdomain. If your outbound volume or bounce rate damages sender reputation, you want that damage contained to the sending domain, not your primary brand domain, which handles marketing, transactional email, and inbound. A common pattern is to register a close variant of your main domain and redirect it to your website.
How do I lower my bounce rate for cold email?
Verify every email address before it enters your sequence. Use an email verification service to remove invalid, catch-all, and role-based addresses. If you're using a prospecting tool, prioritize verified emails over guessed patterns. Re-verify any list that's older than six months — people change jobs and addresses go stale quickly in B2B.
Does email copy affect deliverability?
Yes. Spam filters analyze content, not just sender reputation. Avoid all-caps subject lines, excessive exclamation marks, phrases like 'free trial' or 'limited time offer' in the subject, heavy HTML with multiple images, and more than one or two tracked links. Plain-text-style emails with a single clear call to action consistently perform better in inbox placement tests.
How many cold emails can I send per day without hurting deliverability?
It depends on how well-warmed your inbox is and your domain's age and reputation. A fully warmed inbox on a sending domain with a clean history can typically handle 50–100 cold emails per day. Spread sends throughout the day using randomized intervals rather than blasting everything at once. If you're running multiple sequences, distribute them across multiple sending inboxes.