Published May 14, 2026 — 11 min read
Bottom line: Most cold email deliverability problems are self-inflicted. They come from rushed warm-up, poor sending infrastructure, or lists that were never verified. This is not theoretical - it is based on data from running cold email campaigns for 4 years across multiple niches. The fixes are straightforward. Here is what to do.
Early in my cold email career, I had a sending domain that went from 22% open rates to 0% open rate in three days. I did not understand what happened at the time. I sent a campaign to a list of 1,200 contacts on a Friday afternoon. By Monday morning, Gmail had flagged the domain. Every single email from that domain - including warm, permission-based campaigns - was landing in spam.
What went wrong? I sent to a stale list that had been sitting for two months. The bounce rate hit 18%. Gmail's spam classifier picked up the sudden spike in bounced emails from that sending domain and marked it as suspicious. One bad campaign killed the domain permanently.
That was my introduction to deliverability. Since then, I have managed cold email campaigns for four different products across e-commerce tools, SaaS, and agency services. I have seen what works and what destroys a sender's reputation. The 2026 email landscape is stricter than ever. Here is the complete picture.
Before fixing deliverability, you need to understand what spam filters are actually checking. Modern filters use a layered model that evaluates the sender, the content, and the recipient's behavior:
Most people obsess about content. But if your sender reputation is bad, no amount of subject line tweaking will save you. Reputation is the foundation. Get that right first.
Domain warm-up is the process of gradually building sender reputation for a new domain. If you buy a new domain and start sending 500 emails on day one, you are asking for trouble. Here is the protocol I use:
Start with 5-10 emails per day. These should be to real personal contacts who will open, read, and reply to your emails. Not automated opens - actual engagement. Ask 5-10 friends or colleagues to whitelist your domain and reply to your first few test emails.
This seed engagement tells Gmail: "This domain sends email that people actually want." The algorithm notices when emails are opened and replied to, not just delivered.
Increase volume by 20-30% per day. By the end of week 3, you should be at 50-80 emails per day. The key is consistency - send at roughly the same time each day, to similar types of recipients. Spiky, inconsistent sending patterns are a red flag.
From week 4, you can work up to 100-200 emails per day per domain. Do not exceed what you can sustain. If you send 300 emails on Monday and zero on Tuesday, that inconsistency hurts your reputation. Pick a volume you can maintain.
Warning: If you are using the same domain for both cold outreach and customer communication, you are taking an unnecessary risk. Separate domains for cold email - one that can get flagged and one that cannot.
These three DNS records are not optional in 2026. If you are missing any of them, your cold emails are fighting an uphill battle from the start.
SPF tells receiving mail servers which mail servers are allowed to send email on behalf of your domain. Without it, anyone can forge your domain as the sender - which is exactly what spammers do. Legitimate mail servers notice when a domain does not have SPF configured.
Basic SPF record for cold email using a dedicated sending service:
v=spf1 include:sendingplatform.com ~all
Replace "sendingplatform.com" with your actual email platform's SPF include. Most cold email tools provide this in their setup documentation. If you use multiple platforms, include all of them in one record.
DKIM adds a cryptographic signature to your emails that receiving servers can verify. It proves the email was not modified in transit and was actually sent by your domain. Most cold email platforms generate DKIM keys for you automatically once you add the required DNS record.
Setting up DKIM is a one-time task that takes about 15 minutes. Most providers have step-by-step guides for this. If your email tool does not support DKIM signing, that is a red flag about the tool's quality.
DMARC tells receiving servers what to do when SPF or DKIM fails. It also generates reports so you can see who is sending email from your domain. The basic DMARC record:
v=DMARC1; p=quarantine; rua=mailto:your@email.com; pct=100
This tells receiving servers to quarantine (send to spam) emails that fail authentication. The "rua" parameter sends you daily reports about authentication results. These reports are gold for debugging deliverability issues. Set this up and actually check the reports.
I have tested cold email campaigns against lists of varying quality. The pattern is consistent:
The difference between a good list and a bad list is not just reply rates - it is the difference between a campaign that builds your reputation and one that destroys it.
What makes a list deliverable-ready:
Once your infrastructure is solid, content is the next battleground. Here is what I have seen trigger spam filters in B2B cold email:
Words and phrases that hurt:
"Free" (in subject), "Act now", "Limited time", "Congratulations", "Click here", "Guarantee", "No obligation", "Buy direct", "As seen in", ALL CAPS, excessive exclamation points, dollar signs in subject lines
Better alternatives that perform:
Reference their specific product or industry. Ask a question. Make a specific observation about their site. Keep subjects under 50 characters. Personalization token in the first part of the subject (not appended).
Rule 1: Keep it under 50 characters. Gmail cuts off subjects at 70 characters on mobile, and the cutoff for display in the inbox is tighter than most people think. Shorter subjects also look more personal - like a quick note, not a broadcast.
Rule 2: One subject line, one idea. Do not try to communicate everything in the subject. "Quick question about [Company Name]'s Shopify store" works. "Help us 2x your revenue with our Shopify app that saves 10 hours per week" does not.
Rule 3: Test against your own spam filter. Before sending a campaign, send a test to yourself at a Gmail address and an Outlook address. If it lands in your spam folder, something in your content or sending infrastructure is wrong.
Deliverability is not a set-it-and-forget-it thing. Here are the metrics I check after every campaign, and the thresholds that tell me if something is wrong:
| Metric | Healthy Range | Red Flag |
|---|---|---|
| Hard bounce rate | Under 2% | Above 3% |
| Soft bounce rate | Under 1% | Above 2% |
| Spam complaint rate | Under 0.1% | Above 0.3% |
| Open rate (Gmail) | 15-25% | Below 10% |
| Open rate (Outlook) | 12-20% | Below 8% |
| Reply rate | 3-8% | Below 2% |
If your open rate drops suddenly (say from 20% to 8%), that is a sign your domain is being deprioritized in Gmail's sorting algorithm. The fix is to pause that domain, investigate (check your DMARC reports, look at bounce rates), and warm up again before resuming.
Over four years, I have tried most of the major cold email platforms. Here is my honest assessment of what actually delivers in 2026:
Instantly.ai
Best for teams that need warm-up built into the platform. Their warm-up feature actually works - it shows a steady increase in open rates over the warm-up period. Deliverability has been solid in my experience. Pricing is mid-range. Best for: agencies and growing teams.
Lemwarm (by Lemlist)
Lemlist's warm-up tool (Lemwarm) is the best I have used. It creates natural back-and-forth email exchanges that build genuine engagement signals. If you are doing high-volume cold email, combine Lemwarm with your outreach tool. Best for: power users who want the best warm-up.
Smartlead
Good value for the price. Unlimited mailboxes on most plans. Warm-up is included. Deliverability is decent but I have seen more inconsistency than with the two above. Best for: bootstrapped teams and solopreneurs on a budget.
If your domain has already been flagged, here is the recovery protocol:
If you are choosing a new platform or wondering whether your current one is the problem, evaluate it on these criteria:
Deliverability is not a one-time project. It is an ongoing practice. The campaigns that succeed in the long run are the ones where you treat your sending domain like a business asset - protecting it, warming it carefully, and respecting the data quality that feeds into it.
The good news: if you follow the steps in this guide, your deliverability will be better than 90% of the cold email senders out there. Most people skip the warm-up phase, ignore DMARC reports, and send to unverified lists. You will not be most people.
Need a Verified Cold Email List to Get Started?
We provide SMTP-verified Shopify store owner email lists with under 3% bounce rate. All contacts are individual owners, not role-based addresses. Free 50-email sample available.
View Available Lists →