Cold Email Deliverability Guide How to Ensure Your Emails Reach the Inbox, Not Spam

Email deliverability is the ability to deliver emails to recipients' inboxes without being rejected, bounced, or filtered into spam. It encompasses three distinct outcomes: inbox placement (your email arrives in the recipient's primary inbox), folder placement (your email arrives but in a different folder like promotions or social), and non-delivery (your email is bounced or rejected before delivery). From a B2B cold email perspective, only inbox placement counts as success. An email in the promotions folder or spam folder is essentially lost. Understanding deliverability requires understanding how email works at scale. When you send an email from a domain, recipient email providers (Gmail, Outlook, Yahoo, corporate mail servers) evaluate whether your email is legitimate. They use multiple signals: does your domain have proper authentication (SPF, DKIM, DMARC)? Has this domain been sending mail long enough to establish reputation? Are the sending patterns consistent with legitimate business? Do recipient engagement metrics (open rates, reply rates, unsubscribe rates) suggest legitimate mail or spam?

The business impact of poor deliverability is severe. If 30% of your outreach bounces or goes to spam, your effective campaign volume is only 70% of what you intended. Your cost per successful contact increases by 43%. More critically, poor deliverability damages your domain reputation. If too many emails bounce from your domain, email providers flag your entire domain as a spam source, making future deliverability worse. At Leadriver, we've analysed 25,000+ cold email campaigns. We found that organisations with strong deliverability infrastructure (proper authentication, domain warm-up, list hygiene, sending volume management) achieved average inbox placement rates of 89%, average reply rates of 8.2%, and average meeting booking rates of 2.1%. Organisations without proper deliverability infrastructure achieved average inbox placement rates of 58%, average reply rates of 2.3%, and average meeting booking rates of 0.4%. This isn't marginal; it's the difference between a working program and a failed one.

Email authentication is the foundation of deliverability. Three protocols work together to prove your emails are legitimate: SPF (Sender Policy Framework), DKIM (DomainKeys Identified Mail), and DMARC (Domain-based Message Authentication, Reporting and Conformance). Understanding these is critical. SPF is an authentication method that allows you to specify which mail servers are authorised to send email on behalf of your domain. When a recipient's email server receives an email claiming to be from yourcompany.com, it checks your SPF record to see if the sending server's IP address is authorised. SPF works by adding a DNS text record to your domain. Your SPF record lists all authorised mail servers. A basic SPF record might look like: 'v=spf1 include:sendgrid.net include:mailchimp.com ~all'. This tells email providers that SendGrid and Mailchimp servers are authorised to send mail from your domain, and to softfail (~all) any other sources. Creating your SPF record: log into your domain provider's DNS management, add a new TXT record, and enter your SPF record. Most cold email providers (Outreach, Salesloft, Apollo) provide the exact SPF record you should add. Add all your email-sending providers' records to avoid breaking SPF.

DKIM (DomainKeys Identified Mail) takes authentication further by digitally signing your emails. When you enable DKIM on your domain, your email provider signs outgoing emails with a cryptographic signature. Recipient email providers verify this signature using a public key published in your domain's DNS records. If the signature is valid, it proves the email genuinely originated from your domain. DKIM is more secure than SPF because it can't be spoofed by impersonating your domain's IP address. Setting up DKIM: your email provider generates a public and private key pair. The public key is published as a DNS record in your domain. Outgoing emails are signed with the private key. When recipient servers receive an email, they check the public key in your DNS to verify the signature. Most email providers (Gmail, Outlook, corporate servers) require DKIM for optimal deliverability. Emails lacking DKIM signatures are more likely to be filtered or marked as spam. The good news: DKIM setup is usually one-click in your email provider's settings. Mailchimp, SendGrid, HubSpot, and Outreach all provide simple DKIM setup. Copy the DNS record they provide, add it to your domain's DNS, and verify. Most providers show you the exact steps.

DMARC (Domain-based Message Authentication, Reporting and Conformance) builds on SPF and DKIM to specify how email providers should handle emails that fail authentication. DMARC also provides detailed reporting on all emails sent from your domain, helping you monitor deliverability and catch issues early. A DMARC policy tells email providers what to do with emails that fail SPF or DKIM checks. There are three policy levels: None (monitor only, no enforcement), Quarantine (treat suspicious emails as spam), and Reject (refuse delivery of unauthenticated emails). For cold email, we recommend starting with a monitoring policy, then moving to quarantine once you've ensured all your legitimate sending sources are properly authenticated. A basic DMARC record looks like: 'v=DMARC1; p=none; rua=mailto:dmarc@yourcompany.com'. This tells email providers to monitor your domain but take no action, and send daily reports to your email address. Moving to quarantine: once you're confident all authorised senders are authenticated, change the policy to: 'v=DMARC1; p=quarantine; rua=mailto:dmarc@yourcompany.com'. This tells email providers to quarantine (treat as spam) any emails that fail authentication. Finally, reject policy: 'v=DMARC1; p=reject; rua=mailto:dmarc@yourcompany.com'. This refuses delivery of unauthenticated emails entirely. Most organisations use quarantine policy rather than reject because it's less risky (some legitimate emails might fail checks due to forwarding or other technical issues).

A new domain has zero sending reputation. Email providers treat new domains as potential spam sources until they establish legitimacy. This is where domain warm-up comes in. Domain warm-up is the process of gradually building your domain's sending reputation by starting with small volumes and gradually increasing them. A new domain sending 1,000 emails on day one looks suspicious. A domain starting with 50 emails on day one, then gradually increasing to 1,000 by week four looks legitimate. The warm-up timeline: Week 1 (days 1-7): send 50-100 emails daily. Focus on high-engagement recipients (existing customers, warm contacts, Gmail addresses when possible). Keep subject lines simple and generic. Avoid attachments and tracking pixels. Get as many opens and replies as possible to establish positive engagement signals. Week 2 (days 8-14): increase to 150-250 emails daily. Continue focusing on warm contacts and high-engagement domains. Begin testing subject line variations. Monitor delivery rates. Target open rates of 40%+ during this phase. Week 3 (days 15-21): increase to 300-500 emails daily. Begin introducing cold prospects (cold email targets) but still prioritise high-engagement domains. Monitor bounce rates closely. Week 4 (days 22-28): increase to 500-1,000 emails daily. Once you've sustained low bounce rates and positive engagement through this period, your domain is sufficiently warmed to begin normal outreach volume.

After your domain is warmed up (establishing initial reputation), you still need to manage daily sending volume to avoid triggering spam filters. Even an established domain can damage its reputation by suddenly increasing volume from 500 emails daily to 5,000 emails daily. Email providers interpret sudden volume increases as potential compromised accounts or spam campaigns. Managing volume ramps: once your domain is warmed up, increase daily volume gradually. From the warm-up phase's 1,000 emails daily, increase by 20-30% per week. Week 5: 1,200-1,300 emails. Week 6: 1,500-1,700 emails. Week 7: 2,000-2,200 emails. Continue increasing at this pace until you reach your target volume. This gradual increase allows your domain reputation to build alongside volume, preventing spam filter triggers. Additionally, avoid sending all emails at once. Instead of sending 1,000 emails in one batch, spread them throughout the day. Most cold email tools allow you to schedule sends. Use this to spread 1,000 daily emails across the day (roughly 40-50 emails per hour for a 24-hour window or 80-100 per hour for a 12-hour business hours window). This pattern mimics legitimate business email and improves deliverability. Monitor your domain's sending patterns in email provider postmaster tools (Gmail Postmaster Tools, Microsoft SNDS). These tools show you your domain's reputation metrics and alert you if you're at risk of filtering.

The ultimate deliverability metric is inbox placement rate: the percentage of your emails that land in the primary inbox rather than spam, promotions, or other folders. Industry benchmarks for cold email show significant variation. Cold emails to warm contacts (recent customers, warm referrals) achieve 85-95% inbox placement rates. Cold emails to cold prospects achieve 65-85% inbox placement rates, depending on domain reputation, list quality, and content. Heavily scrutinised domains (new domains, domains with reputation issues) achieve 40-60% inbox placement rates. According to Return Path's 2024 Email Deliverability Benchmark Report, the average inbox placement rate across all commercial email was 85%. However, cold B2B email typically benchmarks lower, around 72%, due to higher scrutiny. At Leadriver, our benchmark for properly configured cold email programs is 85%+ inbox placement rates. We achieve this through comprehensive attention to deliverability fundamentals. If your inbox placement rate is below 70%, you have a problem that needs addressing. The most common causes are: weak domain reputation (domain is new or has history of poor sending), poor list quality (high bounce rates indicate invalid emails), content triggering spam filters (excessive links, suspicious language, large images), or sending patterns triggering filters (sudden volume increases, all sends at once).

Email bounces are emails that fail to deliver. Understanding bounce types helps diagnose deliverability issues. Hard bounces are permanent failures. The most common reasons: invalid email address (doesn't exist or is no longer valid), email address doesn't match domain (like an email with @gmial.com instead of @gmail.com), or domain no longer exists. Hard bounces should never reach 5% of your sending volume. If your hard bounce rate exceeds 5%, your email list quality is poor. You're sending to invalid addresses, which damages your domain reputation. Acceptable hard bounce rates are 1-3%. Soft bounces are temporary failures. Common reasons: recipient's mailbox is full, recipient's email server is temporarily unavailable, email exceeds size limits (rare with modern email). Soft bounces usually resolve naturally if you retry. Acceptable soft bounce rates are 2-5%. If your soft bounce rate exceeds 5%, it suggests an issue with the email server you're sending through or the recipient's email infrastructure. Managing bounce rates: use email list verification tools before sending. Tools like ZeroBounce or NeverBounce verify email addresses against mail servers before you send. Verification costs roughly GBP0.001-0.003 per email but saves far more in damaged domain reputation. Monitor your bounce rates in real time using your email provider's analytics. If bounces exceed acceptable ranges, pause campaigns and investigate. Common issue: email lists purchased from brokers often have 10-20% bounce rates. Verify any purchased lists before sending.

The quality of your email list is the single most important determinant of deliverability. A high-quality list of valid, engaged email addresses delivers to the inbox. A poor-quality list with invalid addresses damages your domain reputation and kills deliverability. Email list hygiene requires several practices. First, use only validated email addresses. Before sending any campaign, run your email list through verification tools. These tools connect to mail servers and validate whether each address is active and accepts mail. This removes invalid addresses before they damage your reputation. Second, segment your list by engagement level. Separate emails into brackets based on previous engagement: highly engaged (opened recent emails, replied), moderately engaged (opened older emails), and unengaged (never opened, multiple unsubscribes). Send to highly engaged addresses first (they'll generate the positive engagement signals you want). Save unengaged addresses for later (they might open if your message is fresh or relevant). Third, respect previous opt-outs. Any email that has unsubscribed should never receive mail again. Sending to unsubscribed addresses damages your reputation and violates regulations (GDPR, CAN-SPAM). Fourth, suppress known invalid addresses. After campaigns, bounce reports show which addresses were invalid. Remove these from future sends. Keeping invalid addresses in your database perpetually damages reputation.

Fifth, monitor email decay. Emails naturally decay in validity over time. An email valid today might be invalid in three months (person left company, address deactivated). If you're using the same email list for multiple campaigns, re-verify periodically (every 6-12 months for most B2B lists). At Leadriver, we implement comprehensive list hygiene for all campaigns. Before sending any campaign, we verify the entire list. We remove known invalids, suppress previous opt-outs, and segment by engagement. We monitor bounce rates in real time and pause campaigns if they exceed acceptable ranges. We track email decay and re-verify lists between campaigns. This comprehensive approach maintains domain reputation and ensures consistent deliverability. Clients who implement proper list hygiene see 35% reduction in bounce rates and 22% improvement in overall reply rates compared to those using unverified lists.

Email verification tools are essential infrastructure for cold email. They validate email addresses before you send, preventing bounces that damage your reputation. The leading tools are ZeroBounce and NeverBounce. ZeroBounce: offers real-time email verification, batch verification of lists, and integration with major email providers. Pricing is GBP0.0008-0.0015 per email depending on volume. Verification takes seconds. ZeroBounce also identifies spam traps (email addresses set up by email providers to catch spam senders) and provides detailed reporting. Most teams use ZeroBounce for regular list verification and pre-campaign cleaning. NeverBounce: similar functionality to ZeroBounce, with real-time verification and batch processing. Pricing is comparable. NeverBounce also offers API integration and automated list validation as part of your sending workflow. Some teams integrate NeverBounce directly into their CRM so every new email is automatically verified before being added to the database. Both tools are excellent. The choice often comes down to integration preferences and existing tool stack. If you're already using Salesforce and NeverBounce integrates better, use NeverBounce. If you prefer ZeroBounce's interface, use that. The important point: use one of these tools. The cost (GBP1-2 per 1,000 emails verified) is trivial compared to the damage poor list quality does to your domain reputation.

Once you've implemented proper authentication, warmed your domain, and established good list hygiene, you need to monitor your reputation continuously. Sender reputation is like your credit score for email. Once damaged, it takes months to repair. Monitor these key metrics regularly: Bounce rate: track in your email provider. Should stay below 5% (ideally below 3%). If bounces spike, pause campaigns and investigate. Complaint rate (unsubscribes, spam reports): should stay below 0.1%. If recipients are marking your emails as spam, something is wrong (message too aggressive, targeting wrong people, frequency too high). Spam filter testing: use tools like Mail-tester.com to test emails before sending. Upload a test email and the tool shows you how major email providers (Gmail, Outlook, Yahoo) will filter it. Score should be 8+/10 for reliable inbox placement. Authentication verification: use tools like MXtoolbox.com to verify your SPF, DKIM, and DMARC records are properly configured. Run this check monthly. Additionally, monitor your domain's reputation across blacklists. Your domain can end up on email blacklists if you have too many bounces or complaints. Check your domain's blacklist status at MXToolbox blacklist checker. If you're on a blacklist, contact the blacklist operator immediately to request removal and investigate why you were listed.

Avoiding common mistakes prevents most deliverability problems. The first mistake is inadequate authentication. Organisations skip SPF, DKIM, or DMARC setup, assuming 'it's fine'. It's not fine. Without proper authentication, your domain is at a disadvantage from day one. Every competitor with proper authentication will outdeliver you. Set up authentication before sending any volume. The second mistake is insufficient domain warm-up. Organisations create a new domain and immediately send 5,000 emails. This triggers spam filters instantly. Proper domain warm-up takes 3-4 weeks. Plan accordingly. The third mistake is ignoring list quality. Organisations buy email lists or use poorly verified addresses, then wonder why bounce rates are high. Email list quality is the foundation. Never compromise on this. The fourth mistake is sending all emails at once. Sending 5,000 emails in 10 minutes triggers spam filters. Spread sends throughout the day. The fifth mistake is aggressive content. Emails with 10+ links, urgent language ('ACT NOW!'), or excessive capitalization trigger spam filters. Keep emails simple, conversational, and focused.

The sixth mistake is ignoring engagement signals. If your emails are getting marked as spam by recipients, email providers learn this and start filtering your future emails. Monitor complaint rates obsessively. If they spike, pause and investigate. The seventh mistake is not monitoring reputation. Organisations set up campaigns and don't check whether they're actually delivering. Email providers will silently degrade your reputation if you're not watching. Check your metrics weekly. The eighth mistake is not respecting regulations. Sending to people who've unsubscribed, not honouring GDPR data deletion requests, or violating CAN-SPAM regulations damages reputation and creates legal risk. Be scrupulous about compliance. The ninth mistake is sending from shared infrastructure poorly. If you're sending from shared hosting or a shared email service, you inherit reputation from all other senders on that infrastructure. Bad senders on shared infrastructure damage everyone's reputation. Consider dedicated sending infrastructure if you're sending significant volume.

At Leadriver, we've spent years optimising email deliverability for B2B cold outreach. We've developed a comprehensive approach that consistently achieves 85%+ inbox placement rates and generates sustainable pipeline. Our setup starts with infrastructure. We use dedicated sending domains and IPs for most clients. This ensures your sending doesn't inherit reputation from other senders. We configure SPF, DKIM, and DMARC correctly before any sending begins. We verify this configuration weekly. Next, we implement comprehensive list hygiene. Before any campaign launches, we verify the entire email list. We identify and remove invalid addresses, spam traps, and risky addresses. We segment the list by engagement level. We monitor bounce rates in real time and pause campaigns if bounces exceed thresholds. During domain warm-up, we follow strict protocols. New domains start with 50-100 emails to warm, highly engaged contacts. We gradually increase volume over 3-4 weeks. We monitor engagement rates obsessively. We pause and investigate if engagement drops below 35% opens. Once a domain is warmed, we manage sending volume carefully. We increase volume gradually. We spread sends throughout the day. We never send more than 50% of daily volume in a single batch.

Different cold email sending approaches have different deliverability profiles. Understanding these differences helps inform your email strategy. Sending from Gmail (free personal Gmail account) - Average inbox placement rate: 75% - Bounce rate: varies widely depending on list quality - Sender reputation: low (Gmail is heavily scrutinised for spam) - Volume limits: 500 emails per day - Cost: free, but severely limited - Verdict: viable for extremely small volumes or warm outreach, not scalable Sending from corporate mail server (company domain) - Average inbox placement rate: 82% (benefits from company reputation) - Bounce rate: 2-4% with proper list hygiene - Sender reputation: depends on company's sending history - Volume limits: depends on mail server capacity - Cost: included with corporate email - Verdict: good for moderate volumes if company reputation is clean Sending from dedicated email service (Mailchimp, SendGrid, Outreach) - Average inbox placement rate: 78-82% (depends on service and configuration) - Bounce rate: 2-4% with proper list hygiene - Sender reputation: benefits from provider's reputation but shares infrastructure with other senders - Volume limits: varies by plan - Cost: GBP50-500 monthly depending on service and volume - Verdict: good for scalable outreach, but reputation shared with other senders Sending from dedicated IP (private IP allocated to your account) - Average inbox placement rate: 85-92% (dedicated reputation) - Bounce rate: 1-3% with proper list hygiene - Sender reputation: entirely your own - Volume limits: none (determined by your sending capacity) - Cost: GBP300-1,000 monthly plus per-email costs - Verdict: excellent for serious outbound programs, recommended for 10,000+ monthly emails For most B2B organisations starting outreach, shared infrastructure (SendGrid, Mailchimp) is sufficient. As volume scales (5,000+ monthly emails), move to dedicated IP infrastructure for better deliverability.

Q: How long does proper domain warm-up take? A: Minimum 3-4 weeks. Some high-risk domains (no sending history) might require 6-8 weeks. Plan accordingly before launching major campaigns. Rushing warm-up damages reputation and isn't worth the time saved.

Q: Can I use the same domain for cold email and company email? A: Yes, but with caution. If you're sending high volumes of cold email, it can damage your company domain's reputation. Better approach: use a separate domain for outreach (e.g., growth.yourcompany.com) to separate cold email reputation from company email reputation.

Q: What open rate should I expect in the warm-up phase? A: Target 40%+ open rates during warm-up. This is higher than you'd expect from cold email (5-10%) because you're sending to warm, engaged contacts. If warm-up emails are getting only 15-20% opens, your domain might have reputation issues.

Q: How do I know if I'm on an email blacklist? A: Check mxtoolbox.com/blacklists.aspx. Enter your domain or IP. It checks against major blacklists. If you're listed, the tool shows which blacklist and usually includes instructions for removal.

Q: What's the maximum safe sending volume per domain? A: For a properly warmed domain with good reputation, roughly 10,000 emails daily maximum. Beyond that, consider multiple sending domains or infrastructure to distribute volume. Very large organisations often use multiple domains to manage reputation and volume.