Cold email deliverability in 2026: domains, authentication, warm-up and monitoring

What is cold email deliverability?

Cold email deliverability is the share of your cold emails that reach the recipient's inbox rather than the spam folder or a rejection. Delivery only means the receiving server accepted the message; deliverability is about where it ended up.

Mailbox providers such as Gmail, Yahoo and Outlook.com decide placement using authentication, sender reputation, recipient complaints, bounce patterns and content. Cold email is especially exposed because recipients did not ask for it, so a few complaints move your reputation quickly.

The fixes come in a fixed order: infrastructure first, then volume, then list quality, then copy, then monitoring. Good copy cannot rescue a domain that fails authentication or sends to a list full of invalid addresses.

What do the Gmail sender requirements, Yahoo and Microsoft rules say?

The Gmail sender requirements, Yahoo's sender best practices and Microsoft's Outlook.com rules all demand authentication and low complaint rates. Google and Yahoo began enforcing in February 2024, and Microsoft now rejects non-compliant mail from high-volume senders. The table compares each provider's own pages as checked on 17 October 2026.

Most cold email teams send well under 5,000 a day per domain, but the safest approach is to meet the bulk-sender rules anyway. They cost nothing to set up and remove an obvious reason for filtering.

How do SPF, DKIM and DMARC protect cold email?

SPF, DKIM and DMARC are DNS records that prove a message really came from your domain. SPF lists the servers allowed to send for the domain, DKIM adds a cryptographic signature that receivers check against a public key, and DMARC tells receivers what to do when those checks fail.

Alignment is the part people miss. Google's guidelines say that for bulk senders the domain in the visible From address must align with either the SPF domain or the DKIM domain, so a sequencer sending on your behalf must sign with your domain, not its own.

Start DMARC at p=none, which all three providers accept, and read the aggregate reports to confirm every legitimate sender passes. Google's page also asks for valid forward and reverse DNS (PTR) records and TLS, which mainstream inbox providers such as Google Workspace and Microsoft 365 handle for you.

How should you set up secondary domains for cold email?

Secondary domains for cold email protect your main domain's reputation. Instantly's cold email strategy guide says to buy secondary domains for cold emailing so you do not damage your primary domain, and to create a maximum of 3 to 5 email accounts per domain.

Volume per inbox sets how many domains you need. Instantly's help centre recommends 30 campaign emails per account per day for standard mailboxes, so sending 600 emails a day needs 600 / 30 = 20 inboxes, and at 3 inboxes per domain that is 20 / 3 = 7 domains, rounded up.

Do not confuse provider limits with safe volumes. Google Workspace allows 2,000 messages a day per user and 500 for trial accounts, according to Google's sending limits page, but those are hard caps for all mail, not targets for cold outreach.

How long should email warm-up take before you send?

Email warm-up should run for at least two weeks before campaigns start, according to Instantly's cold email strategy guide, which also says to keep warm-up switched on permanently. Warm-up tools exchange messages between inboxes to build a positive sending history.

Campaign volume should ramp too. Instantly's slow ramp setting starts a new account at 2 campaign emails on day 1 and adds 2 a day, reaching a 30-email limit on day 15.

Instantly's help centre says warm-up emails do not count toward campaign limits, and its strategy guide gives a wider range of 30 to 50 emails a day per inbox. If you send from Instantly's AirMail mailboxes, the cap is 20 campaign emails per account per day.

Warm-up does not repair a damaged domain. If a domain's spam rate has already crossed 0.3%, pause campaigns on it, keep warm-up running and move volume to healthy domains while you find the cause.

Why does list verification matter for deliverability?

List verification matters because bounces tell mailbox providers you are mailing addresses you never had a relationship with. Verify every address before it enters a sequence; Instantly offers verification on upload at 0.25 credits per lead.

Catch-all domains are the grey area. They accept mail for any address, so a verifier cannot confirm a mailbox exists, and those emails can still bounce later. Clay's email guide recommends safe-to-send-only validation for cold outbound on new domains, accepting that it cuts list size by 20 to 30%.

Keep a suppression list of bounced, unsubscribed and complaining contacts, and sync it across every tool that sends. Re-verify old lists before reuse, because people change jobs and mailboxes are closed.

Which copy choices affect cold email deliverability?

Copy affects cold email deliverability mainly through recipient behaviour: irrelevant emails get marked as spam, and complaints are what Gmail and Yahoo measure. The best deliverability tactic in copy is relevance to the person reading it.

A few habits reduce risk and are widely used by practitioners:

• Write short plain-text emails without images or attachments.
• Use at most one link, and avoid link shorteners.
• Keep sequences to 3 or 4 steps, as Instantly's strategy guide recommends.
• Give an easy way to opt out, so annoyed recipients reply instead of reporting spam.
• Vary wording with real personalisation rather than spintax tricks.

None of these overrides weak targeting. A tight list built from real signals produces fewer complaints than any wording change.

How do you monitor spam complaint rate and placement?

You monitor spam complaint rate at Gmail with Google Postmaster Tools, which lists dashboards for compliance status, spam rate, IP and domain reputation, feedback loop, authentication, encryption and delivery errors. Verify each sending domain in Postmaster Tools before the first campaign.

Read the spam rate carefully. Google defines it as the share of messages delivered to the inbox that recipients then mark as spam, so if Gmail is already filtering much of your mail to spam the dashboard can look healthy while placement is poor.

Yahoo calculates its 0.3% threshold the same way, on mail delivered to the inbox, so neither provider's numbers show how much is going to spam. A small seed list of test inboxes at each major provider helps fill that gap.

Watch the signals your sequencer gives you as well: bounce rate, reply rate and sudden drops in replies per inbox. Bounces with 550 5.7.515 from Outlook.com mean your authentication is failing Microsoft's high-volume rules.

Cold email deliverability: the order to fix things

Fix problems in sequence. First authenticate every sending domain with SPF, DKIM and an aligned DMARC record. Next set volume to about 30 emails per inbox per day on secondary domains, warmed for at least two weeks.

Then verify every list, suppress catch-alls on new domains, keep copy short and relevant, and check Postmaster Tools weekly. Cold email deliverability is mostly maintenance once the setup is right. Tentt sets up outbound infrastructure for B2B teams, and the free GTM stack resources in the Tentt newsletter include tools for checking domains and inboxes.