Cold email deliverability: SPF, DKIM, DMARC and warmup in plain words.

Updated Oct 16, 2026
The short answer

Deliverability is whether your email lands in the inbox or in spam. Delivered only means the receiving server accepted it. Where it ended up is a different question, and it is where most cold email quietly fails, before a human reads a single word. Fix the setup first: authenticate your domains, keep cold email off your main domain, warm up new mailboxes slowly, and send plain, relevant mail to clean lists.

Three records, one bouncer

Three small settings on your domain tell inbox providers that your mail is really yours.

Google requires the full set from bulk senders to Gmail, meaning about 5,000 or more messages a day. SPF and DKIM must pass, and a DMARC record must exist with at least the lightest policy, which is p=none. The domain in your From address must also line up with the SPF or DKIM domain. Marketing mail needs a one click unsubscribe too. Even if you send far less, set up all three. They are the first thing a filter looks at.

Keep cold email off your main domain

Your main domain carries your customer emails, your invoices and your team's inbox. A reputation problem there is expensive. Cold email should go out from separate sending domains, so that if one gets a bad name, your real business email never feels it.

Two cautions. The sending domains must honestly be yours, and point back to your real website, because the law requires accurate sender details. And you should own them, so they are yours if you change providers.

Warm up before you send

A brand new mailbox has no history, and inbox providers don't trust strangers. Warmup means sending a small amount of normal looking mail first and increasing slowly, so a track record exists before real campaigns begin. We warm domains for about 14 days before a campaign touches them. Rushing this is the most common way people burn a new domain in its first week.

Send like a person, not a broadcast

Watch it every week

Deliverability breaks quietly. Nothing errors out, replies just dry up. Check inbox placement with tests, watch bounces and spam complaints, and use Google Postmaster Tools to see your domain's spam rate in Gmail. Google's line is below 0.1%, and never 0.3%. We check placement weekly, and the placement on our clients' campaigns sits around 98%.

Setup checklist

Questions people ask

Why are my cold emails going to spam?

Usually one of four things: missing or broken authentication, a new mailbox that wasn't warmed up, a list with too many bad addresses, or content that looks like marketing. Fix them in that order.

How long should I warm up a new domain?

It varies. We warm for about 14 days before real campaigns and then increase volume gradually.

Do I need a separate domain for cold email?

We strongly recommend it. It keeps any reputation damage away from the domain your customers and team email from.

Is DMARC required?

For bulk senders to Gmail, yes. A DMARC record is required, at minimum with a p=none policy. It is a good idea for everyone.

Keep reading

Not sure where your mail lands? Book a tear-down and we'll check.