Cold Email Deliverability Checklist 2026: The Complete Technical Setup Guide

Email deliverability is the foundation of every cold email campaign. You can write the most compelling, perfectly personalized email in the world, but if it lands in spam, it's invisible. In 2026, with Google and Microsoft tightening their spam filters and enforcing stricter sender requirements, getting the technical setup right is more critical than ever.

This checklist covers every technical step from purchasing domains to monitoring deliverability in production. Follow it exactly, and you'll have a sending infrastructure that consistently reaches the primary inbox. For the full infrastructure setup including cost breakdowns at every scale, see our cold email infrastructure setup guide.

Phase 1: Domain Selection and Purchase

Never send cold emails from your primary business domain. A deliverability issue on your cold outreach domain should never affect your main business communications. Here's how to set up your sending domains correctly.

• Buy secondary domains that look related to your main brand. If your company is acme.com, purchase variations like acmeoutreach.com, getacme.com, tryacme.com, or acmehq.com. Avoid domains that look spammy or unrelated.
• Use .com TLDs whenever possible. While .io, .co, and other TLDs work, .com domains have the highest inherent trust with email providers.
• Purchase from reputable registrars. Namecheap, Cloudflare, and Google Domains are reliable options. Avoid bulk domain sellers that may have reputation issues.
• Buy 3-5 domains to start. This gives you enough mailboxes for meaningful volume while keeping costs manageable. Plan $10-$15 per domain per year.
• Set up a basic website on each domain. A simple landing page with your company information improves domain credibility. Email providers check if sending domains have a legitimate web presence.

Phase 2: DNS Record Configuration

DNS records tell email providers that your domain is authorized to send email and that messages haven't been tampered with. Getting these wrong is the number one cause of deliverability issues.

SPF (Sender Policy Framework):

• SPF tells receiving servers which IP addresses and services are authorized to send email on behalf of your domain.
• Add a TXT record to your domain's DNS with the SPF value provided by your email provider. For Google Workspace: v=spf1 include:_spf.google.com ~all
• If using multiple sending services, include all of them in one SPF record. You can only have one SPF record per domain.
• Use ~all (soft fail) rather than -all (hard fail) to avoid blocking legitimate emails during setup.

DKIM (DomainKeys Identified Mail):

• DKIM adds a digital signature to every email you send, proving it came from your domain and wasn't modified in transit.
• Your email provider generates a DKIM key pair. Add the public key as a TXT or CNAME record in your DNS.
• Each sending service (Google Workspace, Instantly, Smartlead) will have its own DKIM record to add.
• Verify DKIM is working using a tool like MXToolbox or mail-tester.com before sending any cold emails.

DMARC (Domain-based Message Authentication, Reporting, and Conformance):

• DMARC ties SPF and DKIM together and tells receiving servers what to do when authentication fails.
• Start with a monitoring-only policy: v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com
• After monitoring for 2-4 weeks and confirming no legitimate emails are failing, move to p=quarantine, then eventually p=reject.
• The rua email address receives aggregate reports about your email authentication. Review these weekly to catch issues.

Phase 3: Mailbox Setup

Your mailboxes are where emails are sent from. The setup directly impacts deliverability and the volume you can safely send.

• Use Google Workspace or Microsoft 365. These providers have the highest reputation with receiving servers. Google Workspace costs $7.20/user/month. Microsoft 365 Business Basic costs $6/user/month.
• Create 3-5 mailboxes per domain. For example: john@acmeoutreach.com, sarah@acmeoutreach.com, mike@acmeoutreach.com. Use real-sounding names, not generic addresses like sales@ or info@.
• Set up display names and signatures. Each mailbox should have a professional display name and a simple email signature with your name, title, company, and website. This adds legitimacy.
• Enable 2FA on all accounts. This prevents unauthorized access and adds a trust signal to email providers.
• Configure forwarding for replies. Set up forwarding or a unified inbox so you don't miss replies across multiple mailboxes. Many sending tools handle this automatically.

Phase 4: Email Warm-Up

New mailboxes have zero sending reputation. Warm-up builds reputation gradually by simulating natural email activity before you start cold outreach. Skipping warm-up is the fastest way to land in spam.

• Start warm-up immediately after setup. Use a warm-up tool like Instantly's built-in warmer, Warmup Inbox, or Mailreach. These tools send and receive emails between real accounts, building your sender reputation.
• Warm-up timeline: Minimum 14 days before sending any cold emails. 21 days is safer. 30 days is ideal for the best initial reputation.
• Warm-up volume: Start with 5-10 warm-up emails per day and gradually increase to 30-50 per day. The warm-up tool handles this automatically.
• Continue warm-up alongside cold sending. Don't stop warm-up when you start sending cold emails. Running warm-up continuously helps maintain your sender reputation. For a detailed warm-up strategy, see our email domain warm-up guide.
• Monitor warm-up health. Most warm-up tools show an inbox placement score. You should see 90%+ inbox placement before starting cold outreach. If you're below 80%, investigate DNS records, mailbox setup, or warming tool configuration.

Phase 5: Sending Configuration

How you configure your sending directly impacts whether emails reach the inbox. These settings are non-negotiable for good deliverability.

• Daily sending limits per mailbox: Maximum 30-50 cold emails per mailbox per day. This is not a suggestion; exceeding this consistently triggers spam filters. With 15 mailboxes across 5 domains, that's 450-750 cold emails per day.
• Sending schedule: Send during business hours in the recipient's timezone. Spread sends throughout the day rather than blasting all at once. Most sending tools offer scheduling with random delays between emails.
• Delay between emails: Set a minimum 60-120 second delay between individual email sends from the same mailbox. This mimics natural human sending patterns.
• Inbox rotation: Use your sending tool's inbox rotation feature to distribute sends evenly across all your mailboxes. This prevents any single mailbox from being overworked. For a complete inbox rotation strategy, read our cold email inbox rotation guide.
• Custom tracking domain: Set up a custom tracking domain for open and click tracking instead of using the sending tool's default tracking domain. This prevents association with other senders using the same tool.

Phase 6: Content Best Practices for Deliverability

Your email content directly affects deliverability. Spam filters analyze text patterns, links, formatting, and more.

• Keep emails short. 50-120 words is the sweet spot. Long emails trigger spam filters and get lower engagement, which further hurts deliverability.
• Minimize links. One link maximum in the email body. Every additional link increases spam risk. Never include links in the first email of a sequence if possible.
• Avoid spam trigger words. "Free," "guarantee," "act now," "limited time," "click here," and similar phrases flag spam filters. Write naturally and avoid marketing language.
• No images in cold emails. Images dramatically increase spam likelihood and add tracking pixels that raise red flags. Stick to plain text.
• No HTML formatting. Bold text, colored fonts, and HTML tables scream marketing email. Use plain text with natural formatting. For tips on making your email copy compelling while staying deliverable, see our guide on AI cold email personalization at scale.
• Include an unsubscribe option. A simple line like "PS - Let me know if you'd prefer I don't follow up" satisfies legal requirements and improves deliverability by reducing spam complaints.

Phase 7: Bounce and Complaint Management

Bounces and spam complaints are the fastest way to destroy sender reputation. Proactive management is essential.

• Verify all email addresses before sending. Use an email verification service (ZeroBounce, NeverBounce, or Millionverifier) to remove invalid addresses. Target less than 2% bounce rate; above 3% is dangerous.
• Remove hard bounces immediately. When an email bounces, remove that address from all future sends. Your sending tool should handle this automatically, but verify it's working.
• Monitor spam complaints. If your spam complaint rate exceeds 0.1% (1 in 1,000 emails), pause sending and investigate. Google Postmaster Tools shows your complaint rate for Gmail recipients.
• Honor unsubscribe requests instantly. When someone asks to be removed, do it within 24 hours. Continuing to email people who've opted out generates complaints and legal liability.
• Maintain a suppression list. Keep a master list of all bounced addresses, unsubscribes, and spam complaints. Check every new prospect list against this suppression list before sending.

Phase 8: Ongoing Monitoring and Maintenance

Deliverability is not a one-time setup. It requires ongoing monitoring and adjustments. Here are the tools and metrics to track.

• Google Postmaster Tools: Free tool that shows your domain's reputation with Gmail, spam complaint rates, authentication success rates, and delivery errors. Check weekly at minimum.
• MXToolbox: Monitor your domain's blacklist status, DNS records, and email authentication. Set up automated monitoring alerts.
• Mail-tester.com: Send a test email before each new campaign to check your spam score. Aim for 9/10 or higher.
• Inbox placement testing: Use tools like GlockApps or Mailreach to test whether your emails land in inbox, spam, or promotions tab across major providers.
• Key metrics to track weekly: Open rate (healthy: 40-70%), bounce rate (target: under 2%), reply rate (benchmark varies by industry), spam complaint rate (target: under 0.1%), and warm-up inbox placement score (target: 90%+).

Emergency Procedures: What to Do When Deliverability Drops

Even with perfect setup, deliverability issues can occur. Here's your emergency response plan.

• If open rates drop below 20%: Pause all cold sending immediately. Check warm-up scores, DNS records, and blacklist status. Resume sending only after identifying and fixing the root cause.
• If you hit a blacklist: Stop sending from the affected domain. Request delisting from the blacklist provider (most have automated forms). Investigate what triggered the listing and fix it before resuming.
• If bounce rates spike: Stop the current campaign. Re-verify your prospect list. Check if your email verification provider missed a batch of invalid addresses.
• If a mailbox gets suspended: Contact the email provider to understand the violation. Reduce sending volume across remaining mailboxes. Set up a replacement mailbox on a different domain and warm it up.
• Rotate to backup domains. This is why you buy multiple domains. If one domain's reputation is damaged, shift volume to healthy domains while the affected one recovers. Recovery typically takes 2-4 weeks of warm-up-only activity.

Want to learn how to build and sell AI automations? Join our free Skool community where AI agency owners share strategies, templates, and wins. Join the free AI Agency Sprint community.