Cold Email Deliverability Guide: Everything You Need to Land in the Inbox in 2026

You can write the perfect cold email. If it lands in spam, nobody reads it. Deliverability is the unsexy foundation that makes outbound sales work — or doesn't.

This guide covers every layer of cold email deliverability, from DNS authentication to daily sending habits. Whether you run outbound manually or use an AI SDR like GetSalesClaw, these principles apply.

Why Cold Emails Land in Spam

Email providers like Gmail and Outlook use hundreds of signals to decide whether your message reaches the primary inbox, the promotions tab, or the spam folder. The main categories are:

• Sender reputation — your domain and IP history
• Authentication — SPF, DKIM, DMARC
• Content quality — spam trigger words, formatting, links
• Engagement signals — open rates, reply rates, complaints

A new domain with no sending history starts at zero. Sending 500 cold emails on day one from a fresh domain is the fastest way to get blacklisted. This is why warming up matters — but we'll get to that.

Step 1: Domain Setup — Don't Send From Your Main Domain

The first rule of cold outbound: never send cold emails from your primary business domain. If your company domain is yourcompany.com, register a separate domain like yourcompany.io or try-yourcompany.com specifically for outbound.

Why? Cold emails always carry deliverability risk. If your outbound domain gets flagged, your main domain stays clean. This is non-negotiable.

When choosing a secondary domain, pick something clearly related to your brand. Avoid hyphens and numbers. Buy the domain from a reputable registrar and let it age for at least 2 weeks before sending anything.

Step 2: DNS Authentication — SPF, DKIM, and DMARC

Email authentication tells receiving servers that you are who you claim to be. Three protocols to configure.

SPF (Sender Policy Framework)

SPF is a DNS TXT record listing which servers can send email for your domain. Keep it tight. SPF has a 10-lookup limit.

Example: v=spf1 include:_spf.google.com include:amazonses.com -all

Use -all (hard fail), not ~all (soft fail).

DKIM (DomainKeys Identified Mail)

DKIM adds a cryptographic signature to every email. The receiving server checks this against a public key in your DNS. Your email provider (Google Workspace, Microsoft 365, or your SMTP service) will generate the DKIM key pair. You add the public key as a DNS TXT record, and the provider signs outgoing emails with the private key automatically.

DMARC

DMARC ties SPF and DKIM together. Start with: v=DMARC1; p=none; rua=mailto:dmarc@yourcompany.com

After 2-4 weeks of clean reports, move to p=quarantine then p=reject. This progressive approach lets you catch configuration issues before they cause bounces.

Step 3: Email Warm-up — The 60-Day Ramp

A new email account has no reputation. Warm-up means gradually increasing sending volume over weeks.

Typical schedule:

• Weeks 1-2: 5-10 emails/day (all warm-up)
• Weeks 3-4: 15-25/day, mixing in first 5 cold emails
• Weeks 5-8: 50-75/day
• Weeks 9-12: 100-150/day

GetSalesClaw handles this automatically — ramps from 5 to 150 over 60 days.

Key rules:

• Never skip warm-up
• No cold emails during the first 2 weeks
• Monitor bounce rates daily — above 3% means slow down
• Maintain warm-up alongside cold outbound

Step 4: List Quality — The Biggest Deliverability Lever

No amount of technical setup saves you from a bad list. Verify every email before sending. Remove catch-all domains, role-based addresses (info@, support@), and inactive addresses.

Keep hard bounce rate below 2%. If it spikes above 3%, stop immediately and clean your list.

GetSalesClaw integrates hard-bounce suppression directly — bounced addresses are permanently blocked.

Step 5: Content That Doesn't Trigger Spam Filters

Avoid spam triggers: "act now", "limited time", "guaranteed", excessive exclamation marks, ALL CAPS. Don't include more than one link. Don't attach files. Don't use image-heavy emails.

Write like a human: short sentences, plain text, 3-5 sentences, one clear ask.

Personalization is the strongest anti-spam signal. AI-generated emails like GetSalesClaw's have a structural advantage — every email is unique.

Step 6: Sending Patterns and Daily Limits

Distribute emails throughout the business day. Don't blast 100 at 9 AM.

Daily limits by provider:

• Gmail: 100-150
• Google Workspace: under 200
• Microsoft 365: 150-200

Rotate accounts evenly if using multiple.

Step 7: Monitoring and Maintaining Deliverability

Monitor weekly:

• Open rate — below 30% signals deliverability issues
• Bounce rate — keep below 2%
• Reply rate — the strongest positive signal

Check blacklists monthly using MXToolbox. Set up Google Postmaster Tools for domain-level reputation data.

Step 8: What to Do When Deliverability Drops

If your inbox placement drops, follow this recovery plan:

• Stop cold sending immediately
• Continue warm-up only
• Check DNS authentication via mail-tester.com
• Review recent sending patterns for spikes or anomalies
• Reduce volume by 50% when restarting
• If the domain has been burned for 2+ weeks, retire it and start fresh

Quick Reference Checklist

• Dedicated outbound domain
• SPF configured with -all
• DKIM keys added
• DMARC monitoring active
• 4+ week warm-up plan in place
• Verified email list (bounce rate under 2%)
• Plain-text content with personalization
• Daily sending limits configured
• Monitoring setup (Postmaster Tools, MXToolbox)

GetSalesClaw handles warm-up, bounce suppression, and domain monitoring automatically so you can focus on writing great messaging and closing deals. Start your free trial and let the infrastructure take care of itself.