Cold email deliverability is more fragile than marketing email deliverability. You have no prior relationship with recipients, no engagement history to signal quality to spam filters, and you're competing with the defenses that providers have specifically tuned to catch unsolicited bulk email. Getting consistently into the inbox requires layering multiple things correctly — any single gap can push you to spam.
Why Cold Email Deliverability Is Different
Marketing email sent to opted-in subscribers benefits from prior engagement signals — recipients who have previously opened, clicked, or replied. Spam filters use these signals as evidence that the sender is trusted and the content is wanted. Cold email has none of this history. Every campaign starts from zero reputation evidence, which means the baseline infrastructure and list quality must be near-perfect to compensate.
Additionally, cold email recipients who do engage negatively (spam complaints, unsubscribes) carry disproportionate weight because your engagement baseline is so thin. A 0.5% complaint rate on a 10,000-recipient warm list is different from a 0.5% rate on a 200-recipient cold sequence — the latter can be enough to trigger filtering at Gmail.
Step 1: Start With a Verified, Clean List
Cold lists are the highest-risk source of hard bounces in email marketing. Addresses sourced from LinkedIn scrapes, purchased data vendors, event badge scans, and web directories decay quickly and often contain spam traps seeded by anti-spam organizations specifically to catch bulk cold senders.
Never Send Cold Email Without Verifying First
Even a single campaign with 3–4% hard bounces from an unverified cold list can damage a new sending domain beyond recovery. Verify every cold list immediately before use with Zilch Bounce — not at acquisition, but right before you send.
Run your list through Zilch Bounce before every cold campaign. Remove all Invalid, Disposable, and Spam Trap flagged addresses. Treat Catch-All addresses as Risky — send to them only if you have a specific reason to believe the address is real, and monitor bounce rates from that segment closely.
Step 2: Use a Dedicated Sending Domain
Never cold email from your primary business domain. A cold campaign that generates spam complaints or high bounce rates will damage the sending reputation of that domain — affecting all email from it, including customer transactional email, support tickets, and internal communication.
Set up a dedicated domain or subdomain for cold outreach. Common patterns: your-brand.io, your-brand.co, outreach.your-brand.com. Make it look professional and consistent with your brand — recipients do check the sender domain before responding.
Buy Multiple Sending Domains
Experienced cold emailers often rotate across 2–3 sending domains, keeping daily volume per domain low. If one domain gets damaged, the others continue running while you rebuild the affected one.
Step 3: Set Up Email Authentication
Missing or misconfigured email authentication is the fastest route to the spam folder. Set up all three records for every sending domain before you send a single email:
SPF (Sender Policy Framework)
SPF is a DNS record that lists which mail servers are authorized to send email from your domain. Without SPF, receiving servers treat your email as potentially spoofed — a strong spam signal. Your email service provider will give you the exact SPF record to add.
DKIM (DomainKeys Identified Mail)
DKIM adds a cryptographic signature to outgoing email that receiving servers can verify. It proves the email was sent by an authorized sender and has not been tampered with in transit. Your ESP will generate the DKIM keys and tell you which DNS records to add.
DMARC (Domain-based Message Authentication)
DMARC tells receiving servers what to do when SPF and DKIM checks fail — reject the message, quarantine it, or just report the failure to you. Start with a monitoring policy (p=none) to see how your email is being processed before moving to enforcement (p=quarantine or p=reject).
Google Now Requires DMARC for Bulk Senders
Since early 2024, Google requires bulk senders (5,000+ emails/day to Gmail) to have a valid DMARC policy. Sending without DMARC at this volume results in automatic deferral or rejection.
Step 4: Warm Up Your Sending Domain
A brand-new sending domain has zero sending reputation. Jumping straight to sending 500 cold emails per day will trigger aggressive filtering. ISPs need to observe consistent, low-volume sending with good engagement signals before they route your email to the inbox reliably.
Start with 10–20 emails per day in week one and increase by 20–30% each week over 6–8 weeks. Send to your most reliable contacts first — people who will open and reply, building positive engagement history. Do not start cold outreach sequences until week 3 or 4 at the earliest.
Step 5: Write Content That Passes Spam Filters
Spam filters analyze email content alongside sender reputation. Even a reputable sender can get filtered if the content looks spammy. Key content rules for cold email:
- Avoid spam trigger words — "FREE," "Act Now," "Guaranteed," "No risk," "Limited offer," "Click here" in subject lines
- Keep the text-to-image ratio high — image-heavy emails look like mass marketing, not personal outreach
- Include a clear, easy unsubscribe mechanism — legally required in most jurisdictions and reduces complaint rates
- Avoid excessive link counts — one or two links maximum for cold email; more links = more spam signals
- Personalize beyond first name — reference their company, role, or something specific to them
- Keep subject lines under 60 characters and free of all-caps or excessive punctuation
- Send plain-text or minimal-HTML — heavily formatted emails with tracking pixels and logos look like mass marketing
Step 6: Keep Volume Per Domain Low
Even after warm-up, respect daily volume limits per domain. Providers like Google and Microsoft rate-limit senders and apply more scrutiny to high-volume sends. Practical limits for cold email domains after full warm-up:
| Provider | Recommended Daily Limit Per Inbox | Notes |
|---|---|---|
| Google Workspace | 100–150 cold emails/day | Google enforces sender limits and monitors complaint rate closely |
| Microsoft 365 | 150–200 cold emails/day | SmartScreen reputation system weighs sending patterns heavily |
| Dedicated SMTP (SendGrid etc.) | 300–500/day (warmed up) | Can sustain higher volume but still monitor complaint rates |
Step 7: Monitor and React to Bounce Data
Check bounce and complaint rates after every campaign. Hard bounces above 1% signal a list quality problem — pause the sequence, re-verify the list segment that generated them, and remove all Invalid results before continuing. Spam complaint rates above 0.08% are a red flag — review your targeting, content, and unsubscribe process immediately.
Common Cold Email Deliverability Mistakes
- Sending from your primary business domain instead of a dedicated cold outreach domain
- Skipping list verification and sending to unverified purchased or scraped lists
- Missing DKIM or DMARC authentication records
- Jumping to high send volume on a new domain without warming up
- Using heavily templated, image-rich HTML emails for cold outreach (looks like mass marketing)
- Not removing hard bounces immediately between campaigns on the same list
- Ignoring spam complaint data until the domain is already blacklisted