Cold Email Deliverability in 2026: The Complete Checklist

The single most important number in cold email is one most senders never measure: the percentage of their emails that actually reach the primary inbox. Open rates lie. Reply rates lag. Spam placement is invisible until your campaign has already failed.

Across 150+ active campaigns at Growtoro, the gap between average and elite deliverability is the difference between a working channel and a dead one. The good news: deliverability is a checklist, not a dark art. Run the checklist, hit the inbox. Skip steps, hit the spam folder.

Here's the complete checklist we run for every campaign in 2026.

1. DNS Records: Non-Negotiable Foundation

Before sending a single email from a domain, three records must be in place and correctly configured:

SPF (Sender Policy Framework). Tells receiving servers which IPs are authorized to send on behalf of your domain. Misconfigured SPF causes Gmail and Outlook to reject or spam-filter your messages. Keep includes minimal — every "include:" lookup counts toward the 10-lookup limit.

DKIM (DomainKeys Identified Mail). A cryptographic signature that proves the email actually came from your domain. Without it, Gmail will mark your messages with the "via" tag at best and dump them to spam at worst.

DMARC (Domain-based Message Authentication, Reporting, and Conformance). Tells receiving servers what to do when SPF or DKIM fails. As of February 2024, Google and Yahoo require a published DMARC policy for any sender exceeding 5,000 messages per day. Start with p=none, monitor for two weeks, then move to p=quarantine.

BIMI (optional but increasingly important). A logo display standard. Not required for deliverability, but signals legitimacy.

If any of these are missing or wrong, no other deliverability tactic will save you.

2. Domain Strategy: Never Send From Your Primary

The first rule of cold email infrastructure: your primary brand domain never touches a cold sequence. If you burn its reputation, you can't recover. You'll lose normal business email deliverability across the entire company.

The right setup uses dedicated sending domains — typically variations of your brand. "trygrowtoro.com" instead of "growtoro.com." These domains route to the same brand, look legitimate, and protect the primary if anything goes wrong.

Each domain typically supports 2–3 mailboxes. Each mailbox safely sends 30–50 emails per day after warm-up. Scale = more domains and mailboxes, not more sends per mailbox.

3. Warm-Up: 2-4 Weeks, No Shortcuts

A new domain or mailbox sending cold volume immediately is the fastest way to land in spam permanently. Warm-up is the process of slowly building sender reputation by simulating natural email behavior — receiving emails, replying, getting moved out of spam, getting starred.

The right warm-up arc:

• Week 1: 5-15 emails per day, mostly to warm-up network
• Week 2: 15-30 emails per day, gradually increasing
• Week 3: 30-50 emails per day, beginning to mix in cold sends
• Week 4+: full volume, with warm-up running in the background

Warm-up should never stop completely. Keep 5-10 warm-up emails per day flowing through every mailbox indefinitely. It maintains reputation and absorbs minor deliverability shocks.

4. Sending Limits: 30-50 Per Mailbox Per Day

Every cold email tool will let you send 200 per mailbox per day. Don't. The provider doesn't care about your reputation; you do.

Real per-mailbox limits in 2026:

• Google Workspace: 30-50 cold sends per day, hard ceiling at 80
• Outlook 365: 30-50, hard ceiling at 100
• Private SMTP (SendGrid, Mailgun, etc.): higher in theory, but spam classification kicks in fast

Want to send 5,000 emails per day? You need 100-150 mailboxes spread across multiple domains.

5. Content Filters: What Triggers Spam in 2026

The content tells that get cold emails filtered have evolved. The current set of triggers:

• Tracked links in the first email. Tracking pixels and shortened URLs trigger spam classifiers. Strip them from the first send.
• Images in cold emails. They trigger filtering and add load time. Plain text only.
• HTML formatting. Most cold emails should be plain text. HTML signals "marketing."
• Unsubscribe links are now legally required (CAN-SPAM, GDPR), but the wording matters. "Unsubscribe" is fine; "click here to opt out" reads more spammy.
• Spam trigger words. "Free," "guarantee," "limited time," "act now" still trigger filters.
• Excessive personalization tokens. Five {{firstName}} references in one email reads like a bot.
• Reply-to mismatches. Reply-to should match the sending address.

6. List Hygiene: Bounce Rate Kills

Sending to invalid addresses is the fastest known way to destroy sender reputation. Every list — even one purchased from a premium provider — needs verification before sending. Tools like Million Verifier, Bouncer, or Neverbounce catch 5-15% additional invalid addresses on top of vendor verification.

Target metrics:

• Bounce rate: under 3%. Above 5% is a reputation emergency.
• Spam complaint rate: under 0.1%. Above 0.3% gets you blacklisted.
• Reply rate (positive + negative + bounce): tracked daily as the leading indicator

7. Blacklist Monitoring

Even with everything done right, domains can land on blacklists. Monitor weekly:

• Spamhaus (the most important)
• SURBL
• Barracuda
• SpamCop

Tools like MXToolbox blacklist checker and HetrixTools handle this automatically. Fix any listing within 48 hours; the longer you sit on a blacklist, the longer it takes to recover.

8. Inbox Placement Testing

Open rates and reply rates measure response. They do not measure delivery. To know whether your emails are landing in primary, promotions, or spam, run inbox placement tests with tools like GlockApps or Email on Acid.

The test sends a campaign to a panel of seed addresses across Gmail, Outlook, Yahoo, and others, then reports where each one landed. Run this weekly. If primary inbox placement drops below 80%, pause sends and diagnose before damage compounds.

9. Reply Handling and Reputation Loops

The single biggest deliverability lever most senders ignore: reply behavior. When recipients reply to your email, deliverability improves. When they mark you as spam, it tanks. So:

• Reply to every reply, even negatives. Engagement boosts reputation.
• Move misclassified emails out of spam if you find them in seed inboxes.
• Monitor for unsubscribe requests and honor them within 10 business days (CAN-SPAM requirement).

The Bottom Line

Deliverability is not optional. It's the foundation under every other cold email tactic. Companies that build the foundation right send 10,000 emails and reach 9,200 inboxes. Companies that skip it send 10,000 and reach 4,000. Same effort, half the result.

If running this checklist sounds like a full-time job, that's because it is. We run it as the standard infrastructure under every Growtoro campaign. Build your campaign in 90 seconds and we'll spin up the full deliverability stack — domains, warm-up, monitoring, the entire checklist — as part of the program.