Cold email deliverability: the checklist that keeps you out of spam
A well-written cold email that never reaches the inbox earns nothing. Most deliverability problems trace back to a handful of fixable causes: a domain that skipped warm-up, authentication records that were never set up, or a list with a bounce rate that should have stopped sending days earlier.
What actually breaks cold email deliverability?
Deliverability breaks for three reasons: a domain that skipped warm-up and sent full volume on day one, SPF, DKIM and DMARC records that are missing or misconfigured, and a list with a bounce rate above 2% or a spam complaint rate above 0.1%. Fix the infrastructure before writing a better subject line.
The thresholds that matter
Mailbox providers do not grade cold email on how good it reads. They watch a small set of numbers, and crossing any one of them moves mail from the inbox to spam, or gets it rejected outright.
| Signal | Safe range | Stop and fix |
|---|---|---|
| Bounce rate | Under 2%, ideally under 1% | Above 3% |
| Spam complaint rate | Under 0.10% | Reaches 0.30% |
| DMARC policy | p=none minimum, with a rua reporting tag | No DMARC record at all |
| SPF and DKIM | Both configured on the sending domain | Either one missing |
The spam complaint threshold is the one founders underestimate most. A rate under 0.10% is the target every major mailbox provider sets, and 0.30% is the point mail stops being filtered to spam and starts being rejected before it arrives at all. Enforcement on this tightened at the end of 2025, and a domain that could once recover from a rough week now has a much smaller margin.
The warm-up schedule for a new sending domain
A brand-new domain has no sending history, which is exactly what makes mailbox providers suspicious of a sudden burst of outbound mail. Warm-up exists to build that history gradually, so the domain earns full volume instead of starting there.
| Week | Daily volume | What to watch |
|---|---|---|
| Week 1 | 5 to 10 emails | Open and reply rates on a small, engaged list |
| Week 2 | 15 to 25 emails | Bounce rate holding under 2% |
| Week 3 | 25 to 40 emails | Spam complaints staying near zero |
| Week 4 | 40 to 50 emails | Inbox placement, not promotions or spam, across major providers |
| Week 5 onward | Full production volume | Ongoing bounce and complaint monitoring, not a one-time check |
Two to four weeks is the realistic range to reach full volume. A domain pushed to full sending on day one is the single most common reason a new domain lands in spam before a single reply comes back.
Why a separate sending domain matters
Cold outbound carries more bounce and complaint risk than regular business email, simply because it reaches people who did not ask to hear from the sender yet. Running it from the same domain as the company website or founder's everyday inbox puts that domain's reputation at risk over a channel it was never built for.
A separate sending domain or subdomain isolates that risk. If a list turns out to be worse than expected, the damage stays contained to the sending domain, not the one a founder needs for every other piece of business communication.
Key takeaways
- Keep bounce rate under 2% and spam complaints under 0.10%, never near 0.30%
- SPF, DKIM and at least a p=none DMARC policy are required, not optional, in 2026
- Warm up a new domain over two to four weeks before full volume
- Send cold outbound from a separate domain, never the company's primary one
- Monitor these numbers continuously, not just during warm-up
These thresholds set the floor. What they produce once a programme is running cleanly is covered in our cold email reply rate study, built from 13 B2B outbound programmes and 757 booked meetings.
Frequently asked questions
What bounce rate is safe for cold email?
A bounce rate under 2% is the safe range, and under 1% is ideal once a domain is fully warmed up. A bounce rate above 3% on a sending domain is a stop signal, not a tuning problem, and the right response is to pause sending and fix the list, not to keep sending through it.
What spam complaint rate will get a domain blocked?
Mailbox providers want a reported spam rate under 0.10% and treat 0.30% as the line that triggers blocking, not just filtering to spam. Since enforcement tightened at the end of 2025, mail from a non-compliant sending domain gets rejected outright rather than quietly routed to the spam folder.
Do I need SPF, DKIM and DMARC for cold email?
Yes. Bulk sender rules from the major mailbox providers require SPF, DKIM and at minimum a DMARC policy of p=none with a rua reporting tag on every sending domain. A domain without all three is treated as unauthenticated and loses inbox placement regardless of how good the email copy is.
How long should I warm up a new domain before cold outreach?
Plan for two to four weeks of warm-up before a new domain reaches full cold sending volume, starting at five to ten emails a day and increasing gradually. A domain that sends full volume on day one, with no sending history behind it, is the single most common cause of a new domain landing in spam.
Should cold email go from the company's main domain or a separate one?
A separate sending domain or subdomain is standard practice, kept apart from the domain the company uses for its website and regular business email. It isolates cold outbound's higher bounce and complaint risk from the primary domain's reputation, so a sending mistake never threatens the inbox a founder actually needs.
Can an Indian company selling to US buyers use the same deliverability setup?
Yes. SPF, DKIM, DMARC and warm-up rules are enforced by the receiving mailbox provider based on the sending domain and its behavior, not on where the sender is physically located, so an Indian SaaS or services company sending to US buyers follows the identical setup and thresholds.
Where this fits in a full-stack pipeline
Deliverability is cold outbound's foundation, the infrastructure that decides whether an email is read at all. It is not the whole system. A prospect whose inbox does accept the email will often still search the company's name before replying, and what shows up there, on Google or inside an AI answer, shapes the reply as much as the email itself did. Montazzo runs both with one team, so the sending infrastructure and the pages a prospect checks in between are built together. See AEO vs SEO: what to keep, add, and stop doing for the hot inbound half of the same system.
Want deliverability set up and monitored for you?
Montazzo runs hot inbound and cold outbound together for early-stage B2B companies, one team, one report. No SDR team required and live in three weeks.
Let's chat