Cold Email Deliverability: How to Stay Out of Spam

By the Yirlo team · Product details checked against the app

Cold email deliverability is the share of your outreach that reaches a real inbox instead of landing in spam or bouncing. Three things carry most of the weight: mailboxes with a sending history, addresses checked before each send, and a single contact per company. DNS records, copy, volume limits and monitoring all exist to protect those three. Below you will find the full setup, the tradeoffs at each step, the mistakes that burn domains, and the point where Yirlo can take the work off your plate.

I don't have a website

What cold email deliverability actually measures

Deliverability has two stages. Delivery means the receiving server accepts your message instead of bouncing it. Placement means the accepted message ends up in the inbox, a promotions tab or the spam folder. A tool can report 98% delivered while a big share of those messages sit in spam, so a delivered count alone tells you little.

Mailbox providers judge placement from several signals, and cold email starts behind because the recipient never asked to hear from you. These are the areas where a mistake costs the most:

  • Domain reputation: the history of the domain in your From address, including its age and how recipients treated its earlier mail.
  • Mailbox reputation: how the individual sending address has behaved, including its volume curve and bounce record.
  • Authentication: whether SPF, DKIM and DMARC prove the message came from you.
  • Content: the wording, links, images and formatting, and how closely the message resembles thousands of others.
  • Recipient behavior: replies, spam reports, deletions without reading, and messages rescued from spam.

Send from separate domains and keep each mailbox's volume low

Cold outreach should stay off your primary company domain. One bad week of bounces and complaints can damage the same domain that carries your invoices, support replies and customer mail. The usual answer is a set of lookalike domains. If your company is acme.com, you might send from tryacme.com or getacme.com, with a plain redirect to your real site so a curious recipient lands somewhere familiar.

Each domain gets a few mailboxes, commonly two or three, and each mailbox sends a modest number of messages per day. For example, if you want 150 cold emails a day and keep each mailbox near 25, you need about six mailboxes, which fits across three domains. Spreading volume keeps any one sender from looking like a blast machine and limits the damage if one gets flagged.

This setup has costs. Lookalike domains must be bought and renewed, every mailbox needs configuring and watching, and a bigger fleet gives a misconfiguration more places to hide. Rotating senders also does nothing for a poor list or a weak message, because providers judge content and recipient reactions no matter which mailbox carried the email.

Get the DNS records right before the first send

Authentication is the cheapest deliverability work you will do, and an error here weakens everything else. Configure it on every sending domain, then send a test to an external address and read the message headers for passing results instead of assuming it worked.

Open tracking deserves a second look. It depends on a hidden image and rewritten links, both of which filters notice, and open counts are unreliable anyway because some mail apps preload images. Many cold senders switch tracking off and judge campaigns by replies. The table lists each layer and how it usually breaks.

LayerWhat to set upCommon failure
SPFA TXT record listing the servers allowed to send for the domainTwo SPF records on one domain, or too many includes, so the check fails
DKIMA signing key published in DNS and enabled in the mailbox providerKey published but signing never switched on
DMARCA policy record, starting at monitoring only and tightening laterNo record at all, or a strict policy set before SPF and DKIM pass
MX recordsRecords so the domain can receive repliesMissing MX, so replies bounce and the domain looks abandoned
Tracking domainA custom subdomain for open and click tracking, or tracking turned offShared tracking domains that carry other senders' reputation
Website redirectThe outreach domain forwards to your main siteA blank or parked page that makes the domain look throwaway
See the campaigns Yirlo would run for your company.Start now

What mailbox warm-up does, and where it stops helping

A fresh mailbox that suddenly sends dozens of messages looks like abuse. Warm-up builds a sending history gradually: a few messages at first, rising over several weeks, with replies and activity from other mailboxes. For example, a plan might start at 5 messages a day in week one, double in week two and reach target volume in week three or four. Take that as an illustration only, because the right pace depends on the provider and the age of the domain.

The limits are firm. Warm-up cannot repair broken DNS, erase a high bounce rate or rescue a poor message. If real recipients mark your mail as spam, the simulated history will not cancel those reports. It lays a foundation, and actual sending behavior decides whether the foundation holds.

Senders disagree on whether to keep warm-up running once campaigns begin. A light background level can steady a mailbox's profile, but the main protection remains a clean list and sensible volume. Either way, raise real campaign volume in steps and watch the first week closely.

Check every address before it enters a sequence

Bounces damage a young domain faster than almost anything. For example, 500 emails with a 5% bounce rate produce 25 hard bounces, enough to put a new mailbox in trouble. A commonly used working target is around 2% hard bounces or less, and lower is better.

Good verification goes past checking that an address looks valid. It confirms the domain accepts mail, tests whether the specific mailbox exists, and flags risky categories:

  • Catch-all domains, which accept everything and hide whether the person exists. Exclude them or send only small batches.
  • Role addresses such as info@ or sales@, which reach several people and attract complaints.
  • Known spam traps and disposable domains.
  • Old records. People change jobs constantly, so a list that was clean six months ago needs another check before use.

Email one person per company

Writing to three or four people at the same company feels like extra coverage. It tends to backfire. Colleagues compare notes, forward the message to IT, and one spam report can teach that company's filter to treat your whole domain as hostile. Companies on Microsoft 365 or Google Workspace share filtering settings across staff, so a single complaint can affect everyone else you were about to email there.

A single, well-chosen contact also reads as more human. For example, at a 40-person software company, the right target for a sales tool is probably the head of sales or the founder, not every account executive. Choose the person whose job matches the problem you solve, write about their company, and leave the others alone.

The tradeoff is slower coverage per account. If your first contact ignores you, try a different role later, after several weeks and with a new angle, rather than repeating the same pitch to a neighbor.

Write copy that survives content filters

Filters read a message the way a skeptical person would, and they also compare it against everything else arriving from similar senders. Short, plain and specific emails tend to do best. These habits matter most:

  • Use plain text or very light formatting, with no attachments, images or heavy HTML.
  • Include zero or one link. A bare domain mention is often enough.
  • Aim for roughly 50 to 120 words, ending in one clear question.
  • Avoid pressure language, all caps, repeated exclamation marks and promises like guaranteed results.
  • Put a real name in the From field and sign with it.
  • Add a simple opt-out, such as a line inviting the reader to say so if they would rather not hear from you.
  • Say something true only for this recipient. Inserting a first name does not count.

Ramp volume, follow up carefully and honor opt-outs

Begin each campaign with a small batch and raise it only while bounces and complaints stay low. A reasonable pattern is a few dozen messages in the first days, a review, then a step up. Going to full volume on day one wastes the benefit of warm-up.

Follow-ups lift replies but multiply risk. For example, two follow-ups spaced three to five days apart, each adding something new, is plenty for most B2B outreach. Stop the sequence when someone replies or unsubscribes, and pause on an out-of-office notice until the person is back.

Opt-outs should take effect immediately and permanently. A person who asked to be removed and then receives another email is far more likely to hit the spam button, the signal that costs the most. Google's guidance for bulk senders asks that reported spam rates stay below 0.3% and recommends staying well under 0.1%, a useful ceiling for cold senders too, even though small volumes are not formally covered.

Test placement, watch Outlook separately and know how to recover

Open rates cannot show where mail lands, but seed tests can. Send a message from each mailbox to test accounts at Gmail, Outlook and a couple of other providers, then check the folder. Run this before a campaign and whenever something changes. It is a sanity check, not proof of future results, because real recipients behave differently from test accounts.

Many B2B buyers sit on Microsoft 365, so Outlook placement needs its own check. Outlook filtering tends to be harsh on new domains, links and repeated near-identical text. If replies from Outlook-hosted companies run far below Gmail-hosted ones, suspect placement before blaming the offer.

When results drop suddenly, work through this order:

  • Pause the affected mailboxes instead of pushing through.
  • Re-test DNS and run a fresh seed test.
  • Review the last few days of sending. A new list source or template is the usual cause.
  • Check blacklist databases for the domain and sending IP.
  • Cut volume by roughly half, send only to freshly verified addresses, and ramp back up slowly.
  • If a domain stays in spam after a few weeks of clean sending, retire it and move that volume to a fresh one.

Mistakes that quietly sink deliverability

Forum threads, including many on Reddit, repeat the same advice because the same errors keep appearing. These do the most damage:

  • Sending cold email from the main company domain.
  • Buying a large scraped list and sending without checking addresses.
  • Sending the identical pitch to several contacts at a single company.
  • Scaling volume faster than the mailboxes' history supports.
  • Counting on warm-up to make up for a bad list or weak copy.
  • Loading emails with links, images and tracking pixels.
  • Ignoring unsubscribe requests or sending further sequence steps to people who asked out.
  • Treating open rate as the main measure of success.
  • Changing several things at once, then not knowing which change helped or hurt.

Where Yirlo fits

The list above is a lot of chores: purchasing domains, DNS setup, mailbox warmup, list cleaning and inbox placement checks. Yirlo takes these on. Messages go out from domains and mailboxes Yirlo has warmed and maintains, every address is verified beforehand, and each company gets mail at just one contact. Those three core safeguards come included.

Getting into the inbox is only the first hurdle, and the work continues after a message lands. Point Yirlo at your homepage and it studies your product and your rivals, then proposes the types of companies most likely to buy. Inside each chosen company, a single decision maker gets a custom opener that mentions their business. A warm response reaches you right away by email. Daily spend then flows to the campaigns drawing replies, while underperformers are stopped and replaced with fresh ones.

Each email sent costs about five cents, paid out of a prepaid balance, with no subscription. A budget of 20 emails daily for a month of 30 days comes to 600 sends and roughly $30. Finding leads and writing the emails add no cost.

Mailboxes on your own domains are coming soon, which will suit teams that want outreach to come from the company's own address. For now, Yirlo runs the whole sending setup on its side, so there is nothing for you to configure. Reply and hot-lead events can be pushed to the CRM your team already works in, whether that is HubSpot, Salesforce or Pipedrive. Each event is signed, and a webhook trigger in Zapier, n8n or Make picks it up. Developers can also call the API. Landing in the inbox is only half the job: a reply depends on who receives the message and what it says. So every campaign, audience and email stays open for editing before it sends.

Questions

What does the 30/30/50 rule mean for cold email?

It began as a rule of thumb in outbound communities, and sources define it in different ways. Gmail, Outlook and other mailbox providers judge senders by their own signals. Treat any such ratio as a loose planning aid. The numbers that matter are measured ones: your bounce rate, spam complaints and reply rate.

Is cold email still effective in 2026?

Yes, when it is targeted and sent carefully. Inbox providers have grown stricter, so blasting a purchased list no longer works, but a short, relevant message to the right person at the right company still earns replies. Results now depend on list quality, sender reputation and how specific the message is.

How do I improve cold email deliverability?

Send from separate outreach domains with SPF, DKIM and DMARC passing, warm new mailboxes gradually, and verify every address right before sending. Keep emails short and plain, limit volume per mailbox, email one person per company and honor opt-outs immediately. Then watch bounces, complaints and replies, and pause quickly when they move the wrong way.

Is cold emailing illegal in the USA?

Under the US CAN-SPAM Act, unsolicited commercial email to businesses is allowed when the sender information is accurate, the subject line is honest, a valid postal address is included and opt-out requests are honored quickly. The EU, UK and Canada are stricter, so look up the rules in each country you target. This is general information, so check with a lawyer about your own situation.

How many cold emails can one mailbox send per day?

Limits vary by sender, but many keep each mailbox at a few dozen cold emails per day or less. For example, 20 to 30 a day per mailbox is a common conservative range. Spread larger volumes across more mailboxes and domains instead of pushing one harder.

How long should I warm up a new mailbox?

Plan on a few weeks of gradual ramping before full volume, and longer for brand-new domains. Let the first sends set the pace: volume should rise only while bounces stay low and nobody is reporting spam.

Is warm-up enough to stay out of spam?

Warm-up builds sending history, and it works best on top of a clean list, correct authentication and a message recipients welcome. Over time, real recipient reactions outweigh simulated activity, so the list and the copy still have to be right.

Why does my cold email land in Outlook spam but not Gmail?

Microsoft filters weigh domain age, links and similarity to other mail differently from Google. Test placement at Outlook addresses separately, remove links, shorten the message and confirm authentication passes. Lower volume on new domains also helps while the reputation forms.

What bounce rate is safe for cold email?

A common working target is about 2% or lower for hard bounces, and many senders aim well below that. Verify addresses right before sending and remove any address that bounces. If bounces climb above that range, pause and check the list source before sending more.

Does Yirlo handle deliverability for me?

Yes. Addresses are checked before delivery, and a single decision maker per company gets contacted. The goal is yours to choose, and any campaign, audience or email can be changed. Coming soon: bring your own mailboxes and domains.

Related

Your first campaigns, written for your company.Start now