← All posts
OutboundUpdated 9 min read

Cold Email Deliverability: The Part of Outbound Nobody Talks About

Copy gets the credit, but inbox placement decides whether a word reaches a human. The SPF, DKIM, DMARC and domain warmup stack we run, to the 2024 rules.

SB
Shivam Bindal
Founder, Markingo
Message rows arriving into an inbox tray, several curving away before they land and one landing cleanly at the front.
Key takeaways
  • Copy gets the credit, but inbox placement decides whether the copy is read at all. A send that lands in spam has a reply rate of zero.
  • Send on separate domains, never your primary brand, and warm them for weeks before the first prospect touch.
  • Since February 2024, Gmail and Yahoo require bulk senders to authenticate and keep spam complaints below 0.3%. Outlook.com started rejecting non-compliant bulk mail in May 2025.
  • Spread volume across enough inboxes and domains that each one stays well under a conservative daily cap, and randomize send times.
  • A person reads and answers every positive reply, fast. The infrastructure protects the inbox, the human protects the brand.

Deliverability decides whether outbound works before anyone reads a word of the copy, and it is the part nobody wants to talk about, because it is boring infrastructure, not clever writing.

Every outbound post you have read is about subject lines, personalization, and the perfect 5 line sequence. That is the visible part. The part underneath decides whether any of those words land in a primary inbox or rot in spam, and it is governed by DNS records, sending reputation, and volume discipline. Our outbound work spends most of its engineering on that unglamorous layer, because the best email ever written has a zero percent reply rate from the spam folder.

Here is the full deliverability stack we run, in the order it matters: domains, authentication, inbox rotation, send-time behavior, and human reply handling. None of it is secret. Almost nobody does all 5 at once, which is exactly why it works.

The multiplication nobody prices in

Think of outbound as 2 multiplied numbers: the percentage of sends that reach a human, and the percentage of reached humans who reply. Teams pour effort into the second number and assume the first is 100 percent. It is not. A cold domain with no authentication and aggressive volume can lose a large share of its sends to spam, which quietly cuts every result before the copy gets a vote.

0.3%
spam rate Gmail and Yahoo tell bulk senders never to reach
Google and Yahoo, 2024
5,000
messages a day, the line for Gmail and Outlook bulk sender rules
May 2025
Outlook.com began rejecting unauthenticated bulk mail

The rules are public. Since February 2024, Google's sender guidelines require anyone sending more than 5,000 messages a day to Gmail to authenticate with SPF, DKIM and DMARC, support one-click unsubscribe, and keep the spam rate below 0.1 percent, never reaching 0.3 percent. Yahoo's rules set the same 0.3 percent ceiling. Microsoft followed for Outlook.com in May 2025, rejecting mail from domains sending more than 5,000 messages a day that fail SPF, DKIM or DMARC. Reputation is scored across the whole sending domain, not per campaign, which is why deliverability is a standing discipline, not a setup step you do once and forget.

Disposable by design

Domains: separate, and warmed first

Rule 1: never send cold volume from your primary brand domain. One bad week torches the reputation your quotes, invoices, and booking confirmations depend on. We use separate sending domains, usually close variants of the brand, and treat them as disposable infrastructure that absorbs the risk.

Rule 2: warm every new domain before a single prospect send. Warming means low, steadily increasing volume to real, engaged inboxes, so the domain builds a sending history that looks human. We aim to ramp over weeks, not days. Skipping this is one of the most common reasons a campaign dies on day one, and there is no shortcut, because reputation is a function of time plus consistent behavior.

Domains: separate, and warmed first

Authentication: SPF, DKIM, DMARC on reject

Authentication is how inbox providers verify the mail actually came from who it claims. 3 records do the work, and all 3 are non-negotiable.

  • SPF lists which servers are allowed to send for the domain, so a spoofed sender fails the check.
  • DKIM cryptographically signs each message, proving it was not altered in transit and genuinely came from the domain.
  • DMARC ties the two together and tells providers what to do on failure. The providers accept a policy of 'none'. We aim to move each domain to reject once it is stable, because that also stops anyone else sending mail in its name.

For bulk volume these records are no longer best practice, they are the entry ticket: Gmail, Yahoo and Outlook.com all require them from high-volume senders, and Outlook.com rejects the mail outright when they fail. The records take an afternoon to configure and pay rent every day after.

Inbox rotation: the volume arithmetic

No single inbox should carry meaningful cold volume, because per-inbox sending limits are what keep reputation healthy. We spread the load across many inboxes and let boring arithmetic keep every one of them under the line.

  1. 01
    Set a conservative inbox cap

    Hold each inbox to a modest number of cold sends per day. Past a point, engagement signals dip and providers start treating the inbox as a bulk sender. The right cap depends on the domain's age and how recipients engage, so set it low and raise it only on evidence.

  2. 02
    Do the math for your volume

    A 10,000-send month is roughly 500 sends per business day. Divide that by your cap to get the inboxes you need, then add headroom across more than one domain, so the program survives any one inbox getting flagged.

  3. 03
    Rotate and rest

    Sends rotate across the pool, and inboxes that show any reputation dip get pulled and rested while the rest carry the load. No single point of failure takes down the campaign.

Spreading volume this way is not over-engineering, it is the floor for predictable placement. The same scoring and segmentation behind our lead intelligence work also decides which inbox pool goes to which audience, so the accounts that hand out the biggest jobs never share a sending reputation with bulk volume. The lead intelligence playbook covers that scoring in full.

Look human, reply fast

Send-time behavior and the human layer

Real people do not fire 10 emails at exactly 9:00:00. Robotic, on-the-minute sending is a pattern filters learn fast, so our cadence tool randomizes send time per inbox per day, with natural gaps and business-hours weighting. The goal is to look like a busy human, not a cron job, because that is what the spam filters are actually scoring.

The last mile is human, and it is the part most automated stacks skip. A person reads every reply, and we aim to answer positive ones quickly during business hours. The infrastructure protects the inbox, the human protects the brand, because nothing kills a hard-won reply faster than a delayed, obviously templated answer. A real, fast, specific response is where deliverability work finally turns into a site visit on the calendar.

Send-time behavior and the human layer

The best email ever written replies at zero percent from the spam folder. Win deliverability first, then argue about subject lines.

Shivam Bindal
Want outbound that actually lands?

We run the domains, warming, authentication, rotation, and human reply desk so your copy reaches primary inboxes instead of spam.

See the outbound service

Monitoring a sending pool

Deliverability is not a state you reach, it is a number you watch drift. A pool that lands well one week can slide the next after a bad list, a spike in complaints, or one inbox provider changing its filters. We treat the sending pool like production infrastructure, with 3 metrics on a dashboard the team reads every day.

  • Inbox placement: the share of sends landing in primary, not spam or promotions. A sustained dip on a warmed pool is a fire, not a footnote.
  • Complaint rate: the percentage of recipients marking mail as spam. Google asks bulk senders to stay below 0.1 percent and never reach 0.3 percent, and Yahoo sets the same 0.3 percent ceiling.
  • Bounce rate: invalid or rejected addresses. The mailbox providers publish no bounce ceiling, but a spike tells them your list is stale, so keep it low through list verification before send. A spike here is usually a list problem, not a sending problem.

When a metric drifts, the fix is almost always to slow down, not to push harder. We pull the affected inboxes, drop volume, and let reputation recover before scaling back up. Outbound teams that treat a placement dip as a reason to send more are the ones who lose a whole domain in a week. The discipline is closer to running a database than writing copy, which is exactly why the copy-obsessed crowd keeps losing to it.

List quality feeds directly into all three numbers, which is why deliverability and targeting are the same problem wearing two hats. A clean, well-scored list bounces less, complains less, and engages more, all of which lift placement. Send to a stale scraped dump and no amount of warming saves you, because the recipients themselves are telling the provider your mail is unwanted.

The foundation layer

Where deliverability sits in the bigger picture

Outbound is one channel inside a portfolio, and its job is to start conversations cheaply with the property managers, builders, and facilities teams that direct mail and paid ads reinforce further down. The strongest pairing we run is a researched printed report followed by an email to the same person, covered in the direct mail post. None of that sequencing matters if the email never arrives, which is why deliverability is the first thing we fix and the last thing we stop watching.

If you take one thing from this: stop treating deliverability as setup and start treating it as a daily discipline with its own metrics. Watch placement, complaint rate, and bounce rate the way you watch reply rate. The teams that win outbound in 2026 are not the ones with the cleverest copy. They are the ones whose mail simply shows up.

Where deliverability sits in the bigger picture

Sources

  1. 01Google, 2024. Email sender guidelines
  2. 02Yahoo Sender Hub, 2024. Sender best practices
  3. 03Microsoft Tech Community, 2025. Strengthening email ecosystem: Outlook's new requirements for high-volume senders

Written by Shivam Bindal. Founder, Markingo.

FAQ

Questions we get asked.

How long should you warm a cold email domain before sending?
Weeks, not days. Start with low volume to real, engaged addresses and ramp steadily so the domain builds a human-looking sending history. The mailbox providers publish no official warmup period, because reputation is a function of time plus consistent behavior. Skipping warmup is one of the most common reasons a campaign lands in spam from day one.
Do I really need SPF, DKIM, and DMARC for cold outbound?
Yes, all three. Since February 2024, Google requires them from anyone sending more than 5,000 messages a day to Gmail, and Yahoo has matching rules. Since May 2025, Outlook.com rejects mail from high-volume senders that fail SPF, DKIM or DMARC. The providers accept a DMARC policy of none, but moving to reject once a domain is stable also stops others from spoofing it. The records take an afternoon to configure and protect every send after.
How many inboxes do I need for a 10,000-send month?
Work it out from your cap. A 10,000-send month is about 500 sends per business day. Divide that by a conservative per-inbox daily cap, then add headroom across more than one domain so no single flagged inbox can take down the campaign. The right cap depends on the age of the domains and how recipients engage, so start low and raise it on evidence.
Why does send time matter for deliverability?
Because spam filters score sending patterns, and real humans do not send 10 emails at exactly the same second. Randomizing send time per inbox per day, with natural gaps and business-hours weighting, makes the activity look like a busy person rather than a cron job. Robotic, on-the-minute sending is one of the easiest patterns for filters to learn and penalize.
Should positive replies be handled by automation or a human?
A human, fast. A person should read every reply and answer the positive ones quickly during business hours, because nothing wastes a hard-won reply like a delayed, obviously templated answer. The infrastructure exists to protect the inbox, but the human reply is what protects the brand and turns deliverability work into actual booked jobs.
SEO page libraries for service businesses

Want the phone to ring?

A 30-minute call. Tell us the work you want more of and the areas you serve. We’ll show you the searches happening there now, the pages it would take to cover them, and what that costs at $50 a page. You keep that whether or not you hire us.

Metro Vancouver · Greater Toronto · Indianapolis