Guide · Cold email infrastructure
Cold Email Deliverability: How to Land in the Inbox in 2026
Most cold email doesn't fail because of the message. It fails because nobody sees it. This guide covers the setup that decides whether your emails reach the inbox or the spam folder: separate sending domains, SPF, DKIM and DMARC, warm-up and safe sending limits.
By Jordan Chrisostomou, Founder of Autonomous Stack, a certified Instantly Solutions Partner. Updated October 2026.
What is cold email deliverability?
Deliverability is whether your email lands in the inbox, the spam folder or nowhere at all. It's different from delivery: an email can be "delivered" to the server and still go straight to spam.
For cold email, deliverability comes down to three things:
- Your setup. Domains, inboxes and authentication records.
- Your sending behaviour. How many emails you send, how fast you ramp up and how many bounce.
- How people respond. Replies help. Spam complaints and deletions without opening hurt.
Get the setup wrong and even the best message won't be seen.
What changed: the Gmail, Yahoo and Microsoft rules
Since 2024, Google and Yahoo have required bulk senders to authenticate their email and keep spam complaints low. Microsoft followed for Outlook.com in May 2025, and since November 2025 Gmail has been rejecting non-compliant mail outright rather than just delaying it.
The rules formally apply to senders of around 5,000 emails a day to these providers, but inbox providers judge everyone by the same signals. For cold email, treat them as the minimum:
- SPF and DKIM set up on every sending domain
- A DMARC record on every sending domain
- Spam complaint rate kept below 0.1%, and never near 0.3%
- An easy way to opt out of further emails, honoured quickly
Why you should never send cold email from your main domain
Your main domain carries every email your business sends: client emails, invoices, proposals, password resets. If cold outreach damages its reputation, all of that starts landing in spam too.
That's why cold email should always go out from separate sending domains. If one of them runs into trouble, you rest or replace it. Your main domain is never touched.
How to set up sending domains and inboxes
- Buy domains close to your brand. For example, if your business is yourcompany.com, use variations like getyourcompany.com or tryyourcompany.com. They should be clearly yours, so prospects recognise you.
- Redirect each domain to your main website, so anyone who checks the domain lands somewhere real.
- Create 2 to 3 inboxes per domain, using real names from your team.
- Use a mix of Google and Microsoft inboxes, so you're not relying on one provider.
- Add a profile picture and signature to every inbox, so it looks like the real person it is.
To send more, add more domains and inboxes rather than pushing more volume through each one.
SPF, DKIM and DMARC in plain English
These are three DNS records that prove your emails are really from you. Without them, inbox providers have no reason to trust you.
| Record | What it does | In plain English |
|---|---|---|
| SPF | Lists the servers allowed to send email for your domain | "These are the only places my emails come from" |
| DKIM | Adds a digital signature to every email | "This email hasn't been tampered with" |
| DMARC | Tells inbox providers what to do if SPF or DKIM fails, and sends you reports | "If something claims to be me and fails the checks, here's how to treat it" |
Set all three up on every sending domain before a single email goes out. Start DMARC at a monitoring policy (p=none) and tighten it once you're confident everything passes.
How long should you warm up a new inbox?
New inboxes have no reputation, so sending cold email from them straight away looks like spam. Warm-up builds that reputation gradually by sending and receiving a small number of emails that get opened and replied to.
- Warm up for at least 14 days before live sending.
- Keep warm-up running in the background for as long as the inbox is sending outbound.
- Ramp up gradually. Start low and increase daily volume over the first few weeks.
How many cold emails can you send per day?
Keep each inbox to around 30 cold emails a day. It's far safer to send 30 a day from ten inboxes than 300 from one.
Spread sends through the working day rather than in bursts, and leave gaps between emails so the pattern looks like a real person.
What else affects whether you land in the inbox?
Setup gets you in the door. What you send decides whether you stay there.
- Verify every email address. Bounces are one of the fastest ways to damage a domain. Every contact should be verified before it's added to a campaign, and your bounce rate should stay under 2%.
- Keep the first email simple. Plain text, no images, no attachments and no links.
- Turn off open tracking. Tracking pixels can count against you, and open rates are unreliable anyway. Judge campaigns on replies.
- Write to one person, not a list. Messages written from real information about the prospect get more replies and fewer complaints, which inbox providers notice.
- Make it easy to opt out, and remove anyone who asks immediately.
How to monitor deliverability
Deliverability isn't set-and-forget. Check it every week:
- Bounce rate. Keep it under 2%. If it climbs, check your data source.
- Reply rate. A sudden drop across a domain is often the first sign of a problem.
- Inbox placement tests to see where emails are landing with Google and Microsoft.
- Google Postmaster Tools for domain reputation and spam rate.
If a domain's numbers slip, pause it, let it recover on warm-up and shift volume to healthy domains.
Cold email deliverability checklist
What tools do you need for cold email?
You don't need a big stack. These are the tools we use for every outbound system we build:
- Instantly for sending, warm-up and campaign management. It handles warm-up, inbox rotation, sending limits and deliverability monitoring in one place.
- Premium Inboxes for Google and Microsoft inboxes set up for cold email, with SPF, DKIM and DMARC configured for you.
Some links on this page are referral links. If you sign up through them, we may earn a commission at no extra cost to you.
Want it set up for you?
We're a certified Instantly Solutions Partner. Every outbound system we build runs on separate, warmed-up domains with SPF, DKIM and DMARC in place, safe daily limits and weekly deliverability checks, so your main domain is never at risk.
Certified Instantly Solutions Partner