--- To fix cold email deliverability, you need to address three layers: domain authentication, sending infrastructure, and list hygiene. Most deliverability problems trace back to missing DNS records, sending too fast on unwarmed domains, or emailing invalid addresses. Fix those three things and you'll stop landing in spam. Ignore them and no amount of subject line testing will save you. This guide covers exactly what to do, in order, with the specific thresholds that matter.

What's Actually Causing Your Emails to Land in Spam?

Before you fix anything, you need to know what's broken. Cold email deliverability fails for a predictable set of reasons:

Authentication gaps — SPF, DKIM, and DMARC records are missing, misconfigured, or misaligned. Gmail and Outlook use these to verify you are who you say you are. Without them, your emails are unsigned packages — treated with suspicion by default. For a complete walkthrough, see our SPF, DKIM & DMARC setup guide for 2026.

Domain reputation damage — High bounce rates, spam complaints, or sudden volume spikes have flagged your sending domain. Once flagged, recovery takes weeks.

Poor list quality — You're emailing addresses that don't exist, haven't been validated, or belong to spam traps. A bounce rate above 2% signals to mailbox providers that your list hygiene is bad. If your bounce rate is already too high, check out our guide on how to fix a cold email bounce rate that's out of control.

Sending infrastructure problems — You're using a shared IP pool (common with tools like Mailchimp or HubSpot on lower tiers), or you're sending 500 emails/day from a domain registered last Tuesday.

Content triggers — Spam filter keywords, too many links, missing plain-text versions, or broken HTML. Understanding why your cold emails land in spam is critical to avoiding these pitfalls.

Diagnosing which layer is broken first saves you from fixing the wrong thing.

How Do You Set Up Domain Authentication Correctly?

Authentication is the foundation. Without it, nothing else you do matters. Here's what needs to be in place:

SPF (Sender Policy Framework) — A DNS TXT record that lists which mail servers are authorized to send on behalf of your domain. A basic SPF record looks like:

`` v=spf1 include:_spf.google.com ~all ``

If you're sending through multiple tools (e.g., Google Workspace + Instantly + a CRM), every sending source needs to be included. Exceeding 10 DNS lookups in your SPF record breaks it — use a flattening tool like dmarcian or AutoSPF if needed.

DKIM (DomainKeys Identified Mail) — A cryptographic signature attached to every outbound email. Your ESP (Google Workspace, Microsoft 365, etc.) generates this. You publish the public key as a DNS TXT record. Enable it in your email provider's admin console and verify with a tool like MXToolbox.

DMARC (Domain-based Message Authentication, Reporting & Conformance) — Tells receiving servers what to do when SPF or DKIM fails. Start with a monitoring-only policy:

`` v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com ``

Once you've reviewed reports for 2-4 weeks and confirmed legitimate mail is passing, move to p=quarantine, then p=reject.

Custom tracking domain — If you're using click tracking, set up a custom subdomain (e.g., track.yourdomain.com) instead of using your ESP's shared tracking domain. Shared tracking domains are frequently blacklisted.

MX records on sending subdomains — If you're sending from a subdomain like mail.yourdomain.com, make sure it has MX records pointing back to your main domain. This prevents hard bounces from replies and signals legitimacy.

Use Google's Postmaster Tools and Microsoft SNDS to monitor your domain reputation on an ongoing basis.

How Do You Warm Up a New Sending Domain Properly?

Sending cold email from a brand-new domain without warming it up is one of the fastest ways to get blacklisted. Mailbox providers expect organic sending patterns — gradual volume increases, real replies, low complaint rates.

The warm-up timeline:

Tools that automate warm-up: Instantly, Lemwarm (by Lemlist), Mailreach, and Warmbox all run peer-to-peer warm-up networks where your emails get sent, opened, and marked "not spam" automatically. Use one of these for the first 3–4 weeks on any new domain.

Key thresholds to watch during warm-up: - Bounce rate: keep under 2% - Spam complaint rate: keep under 0.1% (Google's threshold for bulk senders) - Open rate on warm-up emails: should stay above 30%

Never send a cold email campaign from a domain less than 14 days old, even with warm-up running in parallel.

How Do You Clean Your Email List Before Sending?

List hygiene is the fastest way to fix cold email deliverability problems that are already in progress. Sending to bad addresses tanks your sender reputation with every bounce.

Step 1: Verify every address before it enters your sequence. Use a real-time verification tool — ZeroBounce, NeverBounce, or Millionverifier are the three most-used options. These check whether an address exists at the mailbox level without sending an actual email.

Step 2: Remove role-based addresses. Addresses like info@, admin@, support@, and hello@ are often shared inboxes or distribution lists. They generate complaints, not replies.

Step 3: Suppress previous hard bounces and unsubscribes. Maintain a suppression list and sync it across every tool in your stack. If you're using Apollo to source leads and Instantly to send, make sure your bounce data flows back upstream.

Step 4: Re-verify lists older than 90 days. B2B email lists decay at roughly 2–3% per month. A list you pulled six months ago has 12–18% invalid addresses in it.

Step 5: Check for spam traps. Tools like Kickbox and BriteVerify flag known spam trap addresses. These are addresses maintained by blacklist operators specifically to catch senders with bad hygiene.

📥 Best Email Warmup Tools

The 6 warmup tools that work — ranked by an agency managing 20,000+ inboxes.

Get it here →

What Should Your Cold Email Infrastructure Look Like?

If you're sending more than 200 emails/day, your infrastructure setup matters as much as your copy. Here's what a clean setup looks like:

Separate domains for cold outreach — Never send cold email from your primary business domain. Register 2–3 variations (e.g., trybuzzlead.io, getbuzzlead.io, buzzleadmail.com) and rotate sending across them. If one domain gets flagged, your main domain is protected. For more on domain strategy, read how many domains you actually need for cold email.

One mailbox per 30–50 daily emails — Sending 300 emails/day from a single mailbox is a red flag. Spread volume across multiple mailboxes on multiple domains.

Dedicated sending tools — Use tools built for cold outreach: Instantly, Smartlead, or Lemlist. These handle rotation, throttling, and warm-up natively. Don't run cold outreach through your CRM's marketing email module.

Monitor blacklists actively — Check MXToolbox Blacklist Check weekly. If you're on a blacklist, submit a removal request immediately and investigate the root cause before sending again.

How Do You Measure Whether Your Deliverability Is Actually Fixed?

Fixing cold email deliverability isn't a one-time task — it's a metric you track continuously. Here's what good looks like:

Tools to measure inbox placement: GlockApps and Mailreach both run seed tests — they send your email to a panel of real mailboxes across Gmail, Outlook, Yahoo, and others, then report where it landed (inbox, spam, promotions).

Run a seed test before every new campaign sequence. If inbox placement drops below 80%, pause sending and audit your authentication, content, and list before continuing.

At BuzzLead, we run these diagnostics for every client before launching any outbound sequence — it's how we consistently hit 45%+ open rates and book 8–12 qualified meetings per month for B2B clients. For deeper insights on what actually works, check out our 2026 cold email deliverability benchmark report analyzing 32,916 accounts.

Frequently Asked Questions

How long does it take to fix cold email deliverability? If the issue is authentication (SPF, DKIM, DMARC), fixes take effect within 24–48 hours of updating DNS records. If your domain reputation is damaged, recovery takes 2–6 weeks of clean sending behavior. Blacklist removal can happen in 24–72 hours once you submit a request, but only if you've fixed the underlying cause first.

What's the minimum warm-up period for a new sending domain? At least 14 days before sending any cold outreach, and 30 days before ramping to full volume. Domains less than 30 days old with no sending history are treated with high suspicion by Gmail and Outlook's filtering algorithms.

Does using a free domain (like Gmail or Outlook personal) hurt deliverability? Yes. Sending cold email from a @gmail.com or @outlook.com address is a deliverability and credibility problem. You can't set up proper DMARC policies, you're sharing IP reputation with millions of other users, and recipients are less likely to trust a business email from a free provider.

What bounce rate will get my domain blacklisted? A sustained bounce rate above 5% will trigger automated filtering by most mailbox providers. Google explicitly states that bulk senders should keep bounce rates under 2%. A single campaign with a 10%+ bounce rate can damage a domain's reputation enough to require weeks of recovery.

Can you fix cold email deliverability without switching domains? Sometimes. If the issue is authentication or content, you can fix it without changing domains. If your domain has been flagged by Google Postmaster Tools (showing "Bad" reputation) or is listed on multiple blacklists, it's often faster to migrate to a new sending domain than to rehabilitate the existing one.

If you're still troubleshooting after working through this guide, the problem is usually in the infrastructure layer — and that's exactly what BuzzLead specializes in. We build and manage cold email infrastructure for B2B companies, from domain setup and warm-up to ongoing deliverability monitoring and outbound sequences. See how we work at buzzlead.io.