Skip to content

Outbound

Cold email deliverability: how to land in the inbox

If it hits spam, it didn't happen.

Cold email deliverability is whether your emails reach the inbox rather than spam, and it rests on three things: authentication (SPF, DKIM and DMARC), sender reputation, and how people react to what you send. Google, Yahoo and Microsoft all publish sender requirements, so set those up first, send from a separate domain, and keep lists small and relevant.

Josef Winstone, Founder & Managing Director, Foundry Agency

By Josef WinstoneFounder & Managing Director · 7 min readUpdated

What is cold email deliverability?

It's the share of your emails that land in the inbox, rather than spam, promotions or nowhere at all. Inbox providers decide that using who you are (authentication), what you've done before (reputation) and how people respond (opens, replies, complaints).

You can't see it directly in most sending tools. A high open rate from a list that never replies, or a sudden drop in replies, is often the first sign something's wrong.

What do SPF, DKIM and DMARC actually do?

They're DNS records that prove your email is really from you. Each one does a different job.

  • SPF lists the servers allowed to send email for your domain.
  • DKIM adds a signature to each email, so the receiver can check it wasn't changed and really came from your domain.
  • DMARC tells receivers what to do when SPF or DKIM fail, and sends you reports. It also checks the From address lines up with the domain that passed.

What do Google, Yahoo and Microsoft require?

Google's email sender guidelines ask every sender to set up SPF or DKIM, use valid DNS and secure connections, and keep spam complaint rates low, which you can watch in Google Postmaster Tools. Bulk senders, which Google defines as around 5,000 or more messages a day to personal Gmail accounts, must set up SPF, DKIM and DMARC, align the From domain, and offer one-click unsubscribe on marketing email.

Yahoo publishes similar requirements, and Microsoft now asks high-volume senders to Outlook.com addresses to pass SPF, DKIM and DMARC. Cold outreach rarely hits those volumes, but treat the bulk rules as the standard anyway. They're what a trustworthy sender looks like.

How do you set up cold email deliverability from scratch?

Follow these eight steps in order. Skipping the early ones is what lands campaigns in spam.

  1. Buy a separate sending domain that's clearly yours (a close variant of your main one), so a bad week never touches your main email.
  2. Set up SPF, DKIM and DMARC on it, starting DMARC at p=none so you can read the reports before tightening it.
  3. Point the sending domain's website at your real site, so anyone who checks finds a real business.
  4. Create a small number of real inboxes with real names, photos and signatures.
  5. Warm each inbox up gradually: low volumes at first, rising slowly, with real conversations.
  6. Verify every address before you send. Bounces damage reputation quickly.
  7. Keep daily sends per inbox modest, and spread them through the working day.
  8. Watch replies, bounces and complaints every day. If any move the wrong way, stop and fix it before sending more.

What in the email itself hurts deliverability?

Less than people think, but some things matter. Heavy images, lots of links, tracking pixels and link shorteners all look like marketing mail. Plain text with one link at most, or none in the first email, reads like a person writing to a person.

The biggest factor is relevance. If people mark you as spam, inbox providers learn fast. If they reply, that helps. The best deliverability work happens before you send: a tight list of people your offer actually helps.

How do you know if you're landing in spam?

Check Google Postmaster Tools for your sending domain's reputation and spam rate, read your DMARC reports, and send test emails to accounts you control on Gmail and Outlook. A sudden fall in replies with no change in the list is a warning sign. Pause, check, then restart slowly.

How does Foundry set up cold email?

We set up separate sending domains and warmed inboxes, with SPF, DKIM and DMARC in place before a single cold email goes out, so your main email stays protected.

Lists are researched, not scraped and blasted, and every message is written and checked by a person. We watch replies, bounces and complaints as the campaign runs, and warm replies go straight to you the same day.

Our averages. Not our best days.

Our averages

  • 5days

    Website, kick-off to live

  • 20mins

    Average reply timethis service

Cold email deliverability FAQs

  • No. Use a separate sending domain. If a campaign gets complaints, the damage stays there, and your everyday email to customers keeps working.

  • Until it has a steady history of normal sending and replies. Start low and rise slowly. Rushing it is the most common reason new domains end up in spam.

  • Yes. Google requires DMARC for bulk senders, and receivers trust authenticated mail more. Start at p=none, read the reports, then tighten it.

  • It can. Tracking pixels make an email look like marketing mail, and opens are less reliable as a measure anyway. Many senders measure replies instead.

  • As low as you can get it. Verify every address before sending and remove bounces at once. Repeated bounces tell inbox providers your list is poor.

  • Often, but slowly. Stop cold sending from it, fix authentication, send only to people who engage, and watch Postmaster Tools. Sometimes a new sending domain is quicker.

Want outbound that lands? Get moving.

Tell us what you need. We'll reply within the hour (working hours), and most websites go live about 5 days after kick-off.

We'll reply within the hour (working hours).

Or email hello@foundryagency.co.uk

Analytics cookies are off until you accept. We use them to see which pages help. Cookie notice