Cold Email Deliverability: How to Land in the Inbox, Not Spam

You can write the most personalized, compelling cold email ever crafted — and if it lands in spam, it might as well not exist. Deliverability is the unglamorous foundation that every other cold email skill is built on. Get it wrong and nothing else matters.

Why Cold Emails Land in Spam

Email providers (Gmail, Outlook, etc.) use hundreds of signals to decide whether your email is legitimate or spam. The main ones that affect cold emailers:

• Domain reputation: How long has your domain existed? Has it been flagged before? Does it have proper authentication records?
• Sending patterns: Are you suddenly sending 500 emails from a domain that sent 10 last week? That's a spam signal.
• Content signals: Spam trigger words, too many links, images without text, deceptive subject lines.
• Engagement signals: Are people opening your emails? Replying? Or marking them as spam?
• List quality: Are you sending to valid email addresses? Bounce rates above 5% destroy your sender reputation.

Step 1: Set Up Your Domain Correctly

Before you send a single cold email, these three DNS records must be configured. Missing even one will hurt deliverability significantly.

SPF (Sender Policy Framework)

SPF tells email servers which IP addresses are authorized to send email on behalf of your domain. Without it, your emails are far more likely to be marked as spam or rejected outright.

Example SPF record: v=spf1 include:_spf.google.com ~all

DKIM (DomainKeys Identified Mail)

DKIM adds a cryptographic signature to your emails that receiving servers can verify. It proves the email actually came from your domain and wasn't tampered with in transit.

DMARC (Domain-based Message Authentication)

DMARC tells receiving servers what to do if an email fails SPF or DKIM checks. It also gives you visibility into who's sending email on behalf of your domain.

Minimum DMARC record: v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com

Step 2: Use a Separate Sending Domain

This is non-negotiable for any serious cold email operation: never cold email from your primary business domain (e.g., yourcompany.com). Use a subdomain or a separate domain variant instead (e.g., mail.yourcompany.com or yourcompanymail.com).

Why: if your sending domain gets flagged or blacklisted, your primary domain's reputation stays intact. You can recover from a flagged sending domain. You can't easily recover from your primary domain being marked as spam.

Step 3: Warm Up Your Domain

A brand new domain that suddenly starts sending 200 emails per day looks exactly like a spammer to email providers. Warming up is the process of gradually increasing your sending volume over several weeks to build a legitimate sender reputation.

A Simple Warm-Up Schedule

• Week 1: 5–10 emails/day (send to real people who will engage)
• Week 2: 20–30 emails/day
• Week 3: 50–70 emails/day
• Week 4: 100–120 emails/day
• Week 5+: Scale gradually to your target volume

During warm-up, send to colleagues, friends, and warm contacts who will actually open and reply. Engagement signals during warm-up teach email providers that your domain sends legitimate mail.

Many cold email tools offer automated warm-up services that handle this by sending and auto-engaging emails within a network of real inboxes.

Step 4: Keep Your List Clean

Sending to invalid or non-existent email addresses generates hard bounces, which are one of the fastest ways to destroy your sender reputation. A bounce rate above 5% is a red flag; above 10% will get your domain flagged.

Before any cold email campaign:

1. Verify your list using a tool like NeverBounce, ZeroBounce, or Hunter.io's email verifier. Remove any emails that come back as invalid or risky.
2. Remove duplicates and role-based addresses (info@, support@, contact@). These are rarely read and often trigger spam filters.
3. Keep your unsubscribe process simple. If someone asks to be removed, remove them immediately. Ignoring unsubscribe requests leads to spam complaints.

Step 5: Write Emails That Don't Trigger Spam Filters

Content-based spam filters have gotten sophisticated, but certain patterns still reliably trigger them:

Words and Phrases to Avoid

• "Free" (especially in subject lines)
• "Guaranteed," "No risk," "100%"
• "Act now," "Limited time," "Don't miss out"
• "Click here," "Buy now," "Order now"
• Excessive punctuation: "!!!" or "???"
• ALL CAPS words or subject lines

Formatting to Avoid

• More than 2 links in one email
• Images without surrounding text (image-only emails are a spam signal)
• Overly formatted emails with lots of bold, colors, or HTML tables
• Attachments on cold outreach (almost always flagged)

The safest cold emails are plain text, or close to it. No banners. No logos. No colorful buttons. Just words. They look like a real person sent them — because ideally, they should.

Step 6: Monitor Your Deliverability

Deliverability isn't a one-time setup — it's an ongoing health metric. Check these regularly:

• Spam complaint rate: Google Postmaster Tools shows your domain's spam complaint rate. Keep it under 0.1%.
• Blacklist status: Check MXToolbox Blacklist Checker monthly. If your domain appears on a blacklist, you need to identify why and request removal.
• Open rates: A sudden drop in open rate often signals deliverability problems before any other metric.
• Bounce rates: Track per-campaign. If a campaign has >5% bounces, stop it and clean the list.

The 30-Second Deliverability Checklist

Before hitting send on any cold campaign, verify:

• ✓ SPF, DKIM, and DMARC are configured
• ✓ Sending from a domain variant, not your primary domain
• ✓ Domain is warmed up (or using an automated warm-up service)
• ✓ List has been verified and cleaned
• ✓ No spam trigger words in subject or body
• ✓ Plain text or minimal HTML formatting
• ✓ No attachments
• ✓ Unsubscribe mechanism in place

The Bottom Line

Deliverability is the unsexy part of cold email that determines whether all the glamorous parts — the perfect subject line, the personalized opener, the compelling offer — ever get seen. Spend an afternoon getting this right once, and it protects every campaign you run afterward.