Complete guide contents
- Why deliverability is the #1 cold email problem in 2026
- Section 1 — DNS setup: SPF, DKIM, and DMARC
- Section 2 — Domain strategy — never use your main domain
- Section 3 — IP and domain warming done correctly
- Section 4 — Inbox rotation for high-volume sending
- Section 5 — Email content and spam trigger words
- Section 6 — List hygiene and bounce management
- Section 7 — Deliverability metrics to monitor weekly
- Your deliverability setup checklist
In 2026, cold email deliverability is harder than it has ever been. Gmail, Outlook, and Yahoo have all tightened their filtering algorithms significantly over the past two years. The old approach — buy a list, blast emails from your main domain, hope for the best — will destroy your sender reputation in days.
But here is the thing: for specialists who understand deliverability deeply, this is an enormous competitive advantage. While everyone else is landing in spam, your emails land in Primary. That gap in results is what justifies premium pricing and attracts long-term clients.
This is the complete deliverability guide I use when setting up new cold email infrastructure for clients. Every step is based on real campaigns at real scale — currently managing over 80,000 prospect contacts per month.
Hetoli sets up and manages your complete cold email infrastructure
DNS configuration, domain warming, inbox rotation, and ongoing deliverability monitoring — all handled by specialists who do this at scale every day.
View Our Cold Email ServicesWhy deliverability is the #1 cold email problem in 2026
Most cold emailers focus on copy, subject lines, and targeting — and all of those matter. But none of them matter if your email never reaches the inbox. Deliverability is the foundation that everything else is built on. A mediocre email that lands in Primary will always outperform a brilliant email that lands in Spam.
Google's February 2024 sender requirements update changed the game permanently. Bulk senders must now authenticate emails with SPF, DKIM, and DMARC, maintain spam complaint rates below 0.1%, and provide one-click unsubscribe. Failure to comply results in emails being rejected or filtered to spam automatically — no warnings, no gradual penalties.
Google and Yahoo now require all bulk senders to have SPF, DKIM, and DMARC properly configured. Without all three, your emails will be rejected or filtered to spam automatically — regardless of your content or sending history. This is non-negotiable.
Section 1 — DNS setup: SPF, DKIM, and DMARC
Your DNS records are the foundation of email deliverability. They tell receiving mail servers that your emails are legitimate and authorized. Without them, your emails fail authentication checks and go straight to spam. Here is exactly what each one does and how to set it up.
Sender Policy Framework
Tells receiving servers which IP addresses are authorized to send email from your domain. Prevents spammers from spoofing your domain.
DomainKeys Identified Mail
Adds a cryptographic signature to every email. Proves the email hasn't been tampered with in transit and authenticates the sending domain.
Domain-based Message Authentication
Tells receiving servers what to do when SPF or DKIM checks fail — none, quarantine, or reject. Also sends you reports on authentication failures.
Start your DMARC policy at p=none first to monitor reports without blocking any mail. After 2–4 weeks of clean reports, move to p=quarantine and eventually p=reject for maximum protection.
Here is a complete DNS setup example for a cold email sending domain using Google Workspace as the provider:
Section 2 — Domain strategy — never use your main domain
This is the single most important rule in cold email: never send cold outreach from your main business domain. If your company website is at hetoli.com, you should never use @hetoli.com for cold email campaigns.
Here is why. Cold email at volume will inevitably generate some spam complaints — even with great targeting and copy. Even a 0.1% complaint rate means 1 in every 1,000 recipients marks your email as spam. Over time, those complaints damage your domain's sender reputation. If that happens to your main domain, your entire business email — replies to clients, invoices, proposals — starts landing in spam too. That is catastrophic and very hard to reverse.
Instead, buy separate sending domains specifically for cold outreach. These are called "alternate domains" or "sending domains." They look similar to your main domain but are separate. For example: hetoli-mail.com, tryhetoli.com, or hetolioutreach.com. Register these on Namecheap, set up DNS properly, and use them exclusively for cold campaigns.
Your sending domains should look professional and related to your brand — not spammy. Avoid hyphens where possible, keep them short, and make sure they could plausibly be a real business email. Prospects who receive your cold email will see the domain — it affects trust and reply rates.
Section 3 — IP and domain warming done correctly
When you register a new domain, it has zero sending history. Email providers are suspicious of new domains sending large volumes of mail because that pattern matches spam behaviour. Warming is the process of gradually increasing your sending volume over several weeks to build a legitimate sending history before launching full campaigns.
Skipping or rushing warmup is the most common deliverability mistake in cold email. A domain that has not been properly warmed will hit spam filters immediately when you try to scale — sometimes permanently damaging the domain's reputation before a single real campaign runs.
| Week | Emails per day per inbox | Status |
|---|---|---|
| Week 1 | 5–10 warmup emails only | Warmup only — no campaigns |
| Week 2 | 10–20 warmup emails | Warmup only — no campaigns |
| Week 3 | 20–30 warmup + 10 real sends | Begin carefully — 10 real/day max |
| Week 4 | 30 warmup + 20–30 real sends | Ramping up safely |
| Week 5–6 | Ongoing warmup + 40–50 real/day | Full campaign ready |
| Ongoing | Keep warmup running permanently | Never stop warming |
The key insight most people miss: warmup should never stop. Even after your domain is fully established, keeping a warmup tool running in the background continuously maintains your sender reputation and signals to email providers that your inbox is active and legitimate.
Section 4 — Inbox rotation for high-volume sending
Inbox rotation is the practice of distributing your campaign sends across multiple email accounts and domains simultaneously. Instead of sending 500 emails per day from one inbox — which will trigger spam filters — you send 50 emails each from 10 different inboxes across 5 different domains. The total volume is the same, but no single inbox ever sends enough to raise flags.
This is how professional cold email campaigns at 10,000+ emails per day maintain strong deliverability. Tools like Smartlead and Instantly handle this automatically — you connect all your inboxes and they intelligently rotate sends across them based on your daily limits per inbox.
As a rule of thumb: keep each inbox to a maximum of 50 emails per day. For 1,000 emails per day, you need at least 20 inboxes. For 5,000 per day, you need 100 inboxes. This sounds like a lot — but with tools that support unlimited inboxes, scaling this infrastructure is straightforward once the process is built.
Section 5 — Email content and spam trigger words
Your email content affects deliverability more than most people realize. Spam filters analyze not just your technical authentication but the actual words, links, and formatting in your emails. Certain patterns — excessive links, spammy phrases, all-caps text, heavy HTML — are strong signals of spam and will push your emails toward the spam folder even if your DNS is perfect.
For cold email specifically, the best performing and best deliverability emails look like real human emails — plain text or minimal HTML, one or zero links, conversational language, and short paragraphs. The more your email looks like something a real person wrote to a specific colleague, the better it will perform both in deliverability and in reply rates.
Words and phrases that consistently trigger spam filters: "Free", "Guaranteed", "Limited time offer", "Act now", "Click here", "No obligation", "Risk free", "Make money", "Earn extra income". Also avoid: more than 2 links per email, large images, heavy HTML templates, all-caps words, and excessive exclamation marks.
Use a spam checker tool like Mail-Tester.com or GlockApps before launching any new campaign. Send a test email and get a spam score with specific feedback on what to fix. Always aim for a score of 9/10 or higher before sending to real prospects.
Section 6 — List hygiene and bounce management
A dirty email list — full of invalid addresses, role-based emails, and spam traps — will destroy your deliverability faster than almost anything else. Every hard bounce tells email providers that you are not maintaining your list properly, which is a signal associated with spammers. Keep your bounce rate below 2% at all times — above that, you are in danger of having sending privileges suspended.
Before sending any cold campaign to a new list, verify every email address through a validation service. Tools like ZeroBounce, NeverBounce, or Millionverifier will remove invalid, disposable, and high-risk addresses before they ever hit your sending server. This single step can reduce bounce rates by 80% or more on an unverified list.
Also clean your list regularly — not just before the first send. Remove hard bounces immediately. Suppress anyone who has not engaged in 6 months. Remove unsubscribers within 24 hours. The smaller and cleaner your list, the better your deliverability metrics across the board.
Section 7 — Deliverability metrics to monitor weekly
Good deliverability requires active monitoring — not just setup and forget. These are the exact metrics I check weekly for every client account, with the thresholds that trigger action:
Your complete deliverability setup checklist
Before sending a single email
- Register separate sending domains — never use your main domain
- Configure SPF record correctly on each sending domain
- Set up DKIM — generate key in your email provider and add to DNS
- Add DMARC record — start with p=none, move to p=quarantine after 2 weeks
- Verify all DNS records are propagated using MXToolbox
- Start warmup tool on every new inbox — minimum 3 weeks before campaigns
- Verify your prospect list through ZeroBounce or NeverBounce
- Run test email through Mail-Tester.com — score must be 9/10 or higher
Weekly monitoring routine
- Check bounce rate for all active campaigns — pause if above 2%
- Monitor spam complaint rate — must stay below 0.1%
- Review open rates — significant drop suggests inbox placement issues
- Check warmup tool dashboard for any alerts or issues
- Verify DMARC reports for any authentication failures
- Test inbox placement using GlockApps at least once per month
Hetoli sets up and manages your complete cold email infrastructure
DNS setup, domain warming, inbox rotation, list verification, and ongoing monitoring — all done by specialists who do this every day at scale.
View Our Cold Email Services