H
Muhammad Hamza — Senior Email Marketing Specialist
5+ years in cold email deliverability · Managing 80,000+ prospects/month · DKIM, SPF, DMARC, IP warming specialist · Smartlead, Woodpecker, Warmy.io
Deliverability Expert

In 2026, cold email deliverability is harder than it has ever been. Gmail, Outlook, and Yahoo have all tightened their filtering algorithms significantly over the past two years. The old approach — buy a list, blast emails from your main domain, hope for the best — will destroy your sender reputation in days.

But here is the thing: for specialists who understand deliverability deeply, this is an enormous competitive advantage. While everyone else is landing in spam, your emails land in Primary. That gap in results is what justifies premium pricing and attracts long-term clients.

This is the complete deliverability guide I use when setting up new cold email infrastructure for clients. Every step is based on real campaigns at real scale — currently managing over 80,000 prospect contacts per month.

Need deliverability handled for you?

Hetoli sets up and manages your complete cold email infrastructure

DNS configuration, domain warming, inbox rotation, and ongoing deliverability monitoring — all handled by specialists who do this at scale every day.

View Our Cold Email Services
Cold Emailing · Warm Emailing · Full Technical Setup · Ongoing Management

Why deliverability is the #1 cold email problem in 2026

Most cold emailers focus on copy, subject lines, and targeting — and all of those matter. But none of them matter if your email never reaches the inbox. Deliverability is the foundation that everything else is built on. A mediocre email that lands in Primary will always outperform a brilliant email that lands in Spam.

Google's February 2024 sender requirements update changed the game permanently. Bulk senders must now authenticate emails with SPF, DKIM, and DMARC, maintain spam complaint rates below 0.1%, and provide one-click unsubscribe. Failure to comply results in emails being rejected or filtered to spam automatically — no warnings, no gradual penalties.

Critical — 2026 Requirements

Google and Yahoo now require all bulk senders to have SPF, DKIM, and DMARC properly configured. Without all three, your emails will be rejected or filtered to spam automatically — regardless of your content or sending history. This is non-negotiable.

Section 1 — DNS setup: SPF, DKIM, and DMARC

Your DNS records are the foundation of email deliverability. They tell receiving mail servers that your emails are legitimate and authorized. Without them, your emails fail authentication checks and go straight to spam. Here is exactly what each one does and how to set it up.

SPF
Required

Sender Policy Framework

Tells receiving servers which IP addresses are authorized to send email from your domain. Prevents spammers from spoofing your domain.

v=spf1 include:_spf.google.com include:sendgrid.net ~all
DKIM
Required

DomainKeys Identified Mail

Adds a cryptographic signature to every email. Proves the email hasn't been tampered with in transit and authenticates the sending domain.

v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBA...
DMARC
Essential

Domain-based Message Authentication

Tells receiving servers what to do when SPF or DKIM checks fail — none, quarantine, or reject. Also sends you reports on authentication failures.

v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com
Pro Tip

Start your DMARC policy at p=none first to monitor reports without blocking any mail. After 2–4 weeks of clean reports, move to p=quarantine and eventually p=reject for maximum protection.

Here is a complete DNS setup example for a cold email sending domain using Google Workspace as the provider:

# SPF Record (TXT record on root domain)
Name: @
Value: v=spf1 include:_spf.google.com ~all

# DKIM Record (generated in Google Workspace)
Name: google._domainkey
Value: v=DKIM1; k=rsa; p=[your-public-key]

# DMARC Record
Name: _dmarc
Value: v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com
🛡️
Warmy.io checks your SPF, DKIM, and DMARC automatically Built-in DNS health checker alerts you to configuration issues before they hurt your campaigns.
Try Warmy Free

Section 2 — Domain strategy — never use your main domain

🌐
Sending Domain Strategy
Protect your primary domain at all costs

This is the single most important rule in cold email: never send cold outreach from your main business domain. If your company website is at hetoli.com, you should never use @hetoli.com for cold email campaigns.

Here is why. Cold email at volume will inevitably generate some spam complaints — even with great targeting and copy. Even a 0.1% complaint rate means 1 in every 1,000 recipients marks your email as spam. Over time, those complaints damage your domain's sender reputation. If that happens to your main domain, your entire business email — replies to clients, invoices, proposals — starts landing in spam too. That is catastrophic and very hard to reverse.

Instead, buy separate sending domains specifically for cold outreach. These are called "alternate domains" or "sending domains." They look similar to your main domain but are separate. For example: hetoli-mail.com, tryhetoli.com, or hetolioutreach.com. Register these on Namecheap, set up DNS properly, and use them exclusively for cold campaigns.

Domain Naming Rules

Your sending domains should look professional and related to your brand — not spammy. Avoid hyphens where possible, keep them short, and make sure they could plausibly be a real business email. Prospects who receive your cold email will see the domain — it affects trust and reply rates.

For every 1,000 cold emails per day, use at least 3–5 separate sending domains. Never send more than 30–50 emails per day per domain when starting out.

Section 3 — IP and domain warming done correctly

🔥
Domain and IP Warming
The step most people skip — and regret

When you register a new domain, it has zero sending history. Email providers are suspicious of new domains sending large volumes of mail because that pattern matches spam behaviour. Warming is the process of gradually increasing your sending volume over several weeks to build a legitimate sending history before launching full campaigns.

Skipping or rushing warmup is the most common deliverability mistake in cold email. A domain that has not been properly warmed will hit spam filters immediately when you try to scale — sometimes permanently damaging the domain's reputation before a single real campaign runs.

Week Emails per day per inbox Status
Week 1 5–10 warmup emails only Warmup only — no campaigns
Week 2 10–20 warmup emails Warmup only — no campaigns
Week 3 20–30 warmup + 10 real sends Begin carefully — 10 real/day max
Week 4 30 warmup + 20–30 real sends Ramping up safely
Week 5–6 Ongoing warmup + 40–50 real/day Full campaign ready
Ongoing Keep warmup running permanently Never stop warming

The key insight most people miss: warmup should never stop. Even after your domain is fully established, keeping a warmup tool running in the background continuously maintains your sender reputation and signals to email providers that your inbox is active and legitimate.

Never stop your warmup tool even after full ramp-up. Keep it running at a low level permanently to maintain sender reputation over time.
Smartlead — built-in warmup + inbox rotation Unlimited inboxes with automatic warmup and smart rotation built in. The complete deliverability stack in one tool.
Try Smartlead Free

Section 4 — Inbox rotation for high-volume sending

🔄
Inbox Rotation
Scale volume without hurting any single inbox

Inbox rotation is the practice of distributing your campaign sends across multiple email accounts and domains simultaneously. Instead of sending 500 emails per day from one inbox — which will trigger spam filters — you send 50 emails each from 10 different inboxes across 5 different domains. The total volume is the same, but no single inbox ever sends enough to raise flags.

This is how professional cold email campaigns at 10,000+ emails per day maintain strong deliverability. Tools like Smartlead and Instantly handle this automatically — you connect all your inboxes and they intelligently rotate sends across them based on your daily limits per inbox.

As a rule of thumb: keep each inbox to a maximum of 50 emails per day. For 1,000 emails per day, you need at least 20 inboxes. For 5,000 per day, you need 100 inboxes. This sounds like a lot — but with tools that support unlimited inboxes, scaling this infrastructure is straightforward once the process is built.

Calculate your required inbox count before scaling. Target volume ÷ 40 emails/day = minimum number of inboxes needed. Always round up.

Section 5 — Email content and spam trigger words

✍️
Content Deliverability
What you write affects where you land

Your email content affects deliverability more than most people realize. Spam filters analyze not just your technical authentication but the actual words, links, and formatting in your emails. Certain patterns — excessive links, spammy phrases, all-caps text, heavy HTML — are strong signals of spam and will push your emails toward the spam folder even if your DNS is perfect.

For cold email specifically, the best performing and best deliverability emails look like real human emails — plain text or minimal HTML, one or zero links, conversational language, and short paragraphs. The more your email looks like something a real person wrote to a specific colleague, the better it will perform both in deliverability and in reply rates.

Avoid These

Words and phrases that consistently trigger spam filters: "Free", "Guaranteed", "Limited time offer", "Act now", "Click here", "No obligation", "Risk free", "Make money", "Earn extra income". Also avoid: more than 2 links per email, large images, heavy HTML templates, all-caps words, and excessive exclamation marks.

Pro Tip

Use a spam checker tool like Mail-Tester.com or GlockApps before launching any new campaign. Send a test email and get a spam score with specific feedback on what to fix. Always aim for a score of 9/10 or higher before sending to real prospects.

Before every campaign launch, run your email through a spam checker. Fix any issues flagged before sending to a single real prospect.

Section 6 — List hygiene and bounce management

🧹
List Hygiene
Your list quality determines your deliverability

A dirty email list — full of invalid addresses, role-based emails, and spam traps — will destroy your deliverability faster than almost anything else. Every hard bounce tells email providers that you are not maintaining your list properly, which is a signal associated with spammers. Keep your bounce rate below 2% at all times — above that, you are in danger of having sending privileges suspended.

Before sending any cold campaign to a new list, verify every email address through a validation service. Tools like ZeroBounce, NeverBounce, or Millionverifier will remove invalid, disposable, and high-risk addresses before they ever hit your sending server. This single step can reduce bounce rates by 80% or more on an unverified list.

Also clean your list regularly — not just before the first send. Remove hard bounces immediately. Suppress anyone who has not engaged in 6 months. Remove unsubscribers within 24 hours. The smaller and cleaner your list, the better your deliverability metrics across the board.

Never send to an unverified list. Verify every new prospect list before the first send, and re-verify lists older than 90 days before reactivating them.

Section 7 — Deliverability metrics to monitor weekly

Good deliverability requires active monitoring — not just setup and forget. These are the exact metrics I check weekly for every client account, with the thresholds that trigger action:

35%+
Open rate
Target for cold email. Below 20% suggests deliverability issues.
<2%
Bounce rate
Hard limit. Above 2% = immediate list cleaning required.
<0.1%
Spam complaint
Google's 2024 requirement. Above this = filtering risk.
<0.5%
Unsubscribe rate
Healthy level. Above 1% signals poor targeting or copy.
90%+
Inbox placement
Percentage landing in Primary. Use GlockApps to measure.
3%+
Reply rate
Good cold email benchmark. Below 1% = copy or targeting issue.

Your complete deliverability setup checklist

Before sending a single email

  • Register separate sending domains — never use your main domain
  • Configure SPF record correctly on each sending domain
  • Set up DKIM — generate key in your email provider and add to DNS
  • Add DMARC record — start with p=none, move to p=quarantine after 2 weeks
  • Verify all DNS records are propagated using MXToolbox
  • Start warmup tool on every new inbox — minimum 3 weeks before campaigns
  • Verify your prospect list through ZeroBounce or NeverBounce
  • Run test email through Mail-Tester.com — score must be 9/10 or higher

Weekly monitoring routine

  • Check bounce rate for all active campaigns — pause if above 2%
  • Monitor spam complaint rate — must stay below 0.1%
  • Review open rates — significant drop suggests inbox placement issues
  • Check warmup tool dashboard for any alerts or issues
  • Verify DMARC reports for any authentication failures
  • Test inbox placement using GlockApps at least once per month
📧
Woodpecker — built-in deliverability protection Bounce detection, spam trap alerts, and sending limits that protect your domain reputation automatically.
Try Woodpecker Free
Too technical? Let us handle it

Hetoli sets up and manages your complete cold email infrastructure

DNS setup, domain warming, inbox rotation, list verification, and ongoing monitoring — all done by specialists who do this every day at scale.

View Our Cold Email Services
Cold Emailing · Full Technical Setup · Deliverability Management · Ongoing Campaigns