Email Deliverability for Cold Outreach: SDR's Guide
TL;DR
Cold email deliverability starts with infrastructure: use dedicated sending domains separate from your primary domain, and configure SPF, DKIM, and DMARC before sending a single message. Industry benchmarks show well-managed programs hit 83-85% inbox placement while poor setups fall below 60%, directly killing reply rates. Treat domain setup, list hygiene, and sending limits as non-negotiable operational requirements, not optional optimizations.

You can write the best cold email sequence ever crafted. Tight subject lines, personalized openers, a clear value prop, a single CTA. None of it matters if the email lands in spam — or worse, never arrives at all.
Deliverability is the silent killer of cold outreach programs. Most SDRs don't realize they have a problem until reply rates crater or their sending domain gets blacklisted. By then, months of pipeline work is compromised.
This guide covers everything that actually affects inbox placement: domain infrastructure, sending behavior, list quality, and the maintenance cadence that keeps your numbers healthy. If you run outbound at any meaningful volume, this is the operating manual.
What is email deliverability and why does it matter for cold outreach?
Email deliverability is the percentage of sent emails that reach the recipient's inbox — not their spam folder, not a promotions tab, not a void. For cold outreach specifically, deliverability is harder than transactional or marketing email because you're sending to people who never opted in. Spam filters apply more scrutiny to every signal your infrastructure emits.
The numbers are sobering. Industry benchmarks put average cold email deliverability at 83-85% for well-managed programs. Poorly configured senders can fall below 60%. Given that most cold email sequences need a 2-3% reply rate to be worth running, losing 20-40% of sends to spam kills your program before a single prospect reads a word.
Why cold outreach faces higher scrutiny:
- No prior relationship with the recipient domain
- High-volume sending to domains you've never mailed before
- Spam complaint rates matter more at scale
- Recipient engagement signals — opens, clicks, replies — are low by nature
Domain infrastructure: the foundation everything else builds on
Your primary company domain — the one tied to your website — should never send cold outreach at volume. If it gets flagged or blacklisted, your entire organization loses email credibility. Sales, support, leadership — all of it.
Use dedicated sending domains
Buy separate domains specifically for cold outreach. Common pattern: if your company is acme.com, you'd register acmesales.com, tryacme.com, or getacme.com. Buy a few variants. Use different ones for different campaigns or segments so a problem with one doesn't take down all your outbound.
Cost is negligible — $10-15/year per domain. There's no legitimate reason to skip this.
DNS records: SPF, DKIM, and DMARC are non-negotiable
These three DNS records form the baseline authentication layer that tells receiving mail servers your email is legitimate. Without them, you're not doing cold outreach — you're doing spam.
SPF (Sender Policy Framework): Specifies which mail servers are authorized to send from your domain. Without it, any server can spoof you.
DKIM (DomainKeys Identified Mail): Adds a cryptographic signature to each email that receiving servers verify. It proves the message wasn't tampered with in transit.
DMARC (Domain-based Message Authentication, Reporting, and Conformance): Tells receiving servers what to do when SPF or DKIM fails. At minimum, set it to p=none to get reports. As your domain matures, move to p=quarantine or p=reject.
Verification is straightforward — tools like MXToolbox show you exactly what's published (or missing) in your DNS. Check all sending domains before a single email goes out.
Google vs. Microsoft for cold outreach
Most outbound teams default to Google Workspace. It's fine, but Microsoft 365 (Outlook/Exchange) can have better deliverability to corporate recipients who also run Microsoft infrastructure. If you're targeting enterprise accounts heavily on Microsoft, test both. Many high-volume teams run both in rotation.
Domain and inbox warm-up
A new domain has zero sending reputation. Send 500 cold emails on day one and every major spam filter will flag you. Warming up builds a sending history that signals to receiving servers this domain sends legitimate email people engage with.
The manual warm-up approach
For the first 4-6 weeks on a new domain and inbox:
- Week 1: Send 5-10 emails/day. Mix of personal contacts, colleagues, back-and-forth replies.
- Week 2: Increase to 20-30/day. Add a small number of warm prospects — people likely to open.
- Week 3-4: Scale to 50-75/day. Keep mixing warm contacts with cold.
- Week 5-6: Begin real volume, up to your target sending ceiling.
Replies matter enormously during warm-up. Engineer them if you have to — send emails to colleagues who write back. Engagement signals build trust with spam filters.
Automated warm-up tools
Services like Instantly, Lemlist's warm-up feature, and Mailwarm automate this by connecting your inbox to a network of other inboxes that send, receive, and engage with each other's emails. Worth the $20-30/month per inbox to get a domain ready faster and more safely.
One caveat: warm-up tools simulate engagement, not real engagement. They reduce risk during the startup phase — they don't substitute for sending to a clean list with genuine content.
Sending volume and behavioral limits
Once you're past warm-up, the question is how much you can send per day without triggering spam filters. There's no universal number, but here are the working limits most experienced SDRs operate within:
| Inbox Age | Safe Daily Volume | Notes |
|---|---|---|
| 0-30 days | 5-30 | Warm-up phase only |
| 30-60 days | 30-75 | Light prospecting |
| 60-90 days | 75-100 | Normal SDR volume |
| 90+ days | 100-150 | Established sender |
Never exceed 150 cold emails per inbox per day. Many experienced teams cap at 100. The risk of hitting complaint thresholds or triggering rate-limiting isn't worth the marginal volume increase.
If your sequencing tool lets you set randomized send windows — say, 2-7 minutes apart between 8am-5pm local time — use it. Batch sends (50 emails at exactly 9:00:00am) look like automation to spam filters because they are.
Distribute across multiple inboxes
If you need 500 sends per day, run 5-6 warmed inboxes in rotation. Each stays within safe limits. Your sequencing tool (Outreach, Apollo, Instantly, Smartlead) should handle the rotation automatically. Standard practice for any SDR doing real volume.
List quality: the variable most SDRs underestimate
Your sending infrastructure can be perfectly configured and still fail if your list is dirty. Bounce rate is the single most damaging deliverability metric. Anything above 3-5% hard bounce rate signals to spam filters that you're not managing your list, which tanks your sender reputation fast.
What causes high bounce rates
- Stale data: B2B contact data decays at roughly 22-25% per year. An email address valid 18 months ago may belong to someone who left the company, changed roles, or whose company folded.
- Poor source quality: scraped lists, purchased bulk databases with no verification, data enriched by low-quality providers.
- No verification step: sending directly from a raw list without checking email validity first.
Point-of-use verification vs. list upload verification
Two approaches keep bounce rates low. List upload verification runs your full list through a verification tool before a campaign — services like NeverBounce or ZeroBounce score each address and let you remove risky ones. Better than nothing.
Point-of-use verification is more reliable: the email address is verified at the moment you pull it, not weeks before your campaign runs. This matters because B2B contacts change constantly — someone who verified clean in a batch last month may have churned last week. LeadsApp verifies contacts at the moment you reveal them rather than serving pre-verified data from a static database, which reduces the gap between verification and send.
For a deeper breakdown of these two approaches, read our piece on email verification: point of use vs. upload.
Hard removes vs. soft bounces
Hard bounces (invalid address, domain doesn't exist) should be removed immediately and permanently. Never retry a hard bounce.
Soft bounces (mailbox full, temporary server issues) can be retried once after a few days. If they soft-bounce again, move them to a suppression list.
Maintain a central suppression list across all campaigns. A contact that bounced in Campaign A will bounce in Campaign B — don't let your sequencer retry them.
Email content and spam trigger signals
Once your infrastructure is solid and your list is clean, content is the next layer. Spam filters read your email and make probabilistic judgments about whether it looks like spam.
Avoid classic spam trigger patterns
- All-caps words in subject lines: FREE, GUARANTEED, URGENT
- Excessive punctuation: "Limited time offer!!!!"
- Financially loaded phrases: "make money fast", "no cost", "risk-free"
- Heavy HTML formatting: lots of images, colors, fonts, tables — spam filters weight plain text higher for cold outreach
- Shortened URLs: bit.ly and similar redirect links are heavily associated with spam. Use full URLs or your own tracked redirect domain.
- Attachments on first touch: never. Even if your demo deck is brilliant, an attachment on a cold email is a guaranteed spam trigger.
The plain text advantage
The most consistently deliverable cold emails look like emails from a real person — because they do. No logo header, no HTML template, no unsubscribe footer in a fancy layout. Just text, maybe a link or two, and a clear ask.
This isn't just about spam filters. Plain text emails get better reply rates in A/B tests because they feel less like marketing automation. Both goals align.
Personalization beyond merge tags
Spam filters increasingly score emails for how templated they appear. Identical emails sent to thousands of addresses with only {{FirstName}} swapped is a signal. True first-line personalization — referencing the prospect's company, recent news, a job change, or a specific trigger — helps both deliverability and reply rates.
Monitoring and ongoing maintenance
Deliverability isn't a set-it-and-forget-it problem. You need a monitoring cadence.
Metrics to track weekly
- Bounce rate by campaign: flag anything above 3%
- Spam complaint rate: should stay below 0.1%. Google's Postmaster Tools shows this for Gmail recipients.
- Open rate by domain: a sudden drop often signals deliverability problems before your bounce rate even moves.
- Reply rate by sequence step: if step 1 reply rates drop but list quality is constant, check deliverability.
Tools worth using
Google Postmaster Tools — Free, shows your reputation with Gmail specifically. Since Gmail handles a large share of business email, this is essential monitoring.
Mail-Tester.com — Send a test email and get a spam score. Good for checking a new template before a campaign.
MXToolbox — DNS record verification and blacklist checking. Run your sending domains through this monthly.
Blacklist checks: Services like MultiRBL or MXToolbox's blacklist checker tell you if your IP or domain has been flagged by major blocklists. If you're listed, work out why — usually a spam complaint spike — before requesting delisting.
Rotation and rest
If a sending inbox has had a rough week — higher than normal bounces, a complaint or two — give it a rest for 3-5 days while continuing to engage it through your automated warm-up tool. Don't keep hammering a damaged inbox.
Building a sustainable outbound email program
The SDRs and founders who consistently get 3-6% reply rates from cold email aren't doing something magical with their copy. They've built infrastructure that actually delivers, and they maintain it.
That means dedicated sending domains, proper authentication, disciplined warm-up, clean verified lists, plain-text content, and weekly monitoring. None of these steps is complicated on its own. The discipline is doing all of them, consistently.
If your reply rates are stagnant or declining, audit your deliverability before blaming your messaging. In most cases, the email never arrived. Explore LeadsApp's verified contact search if you're rebuilding your prospect lists with accuracy in mind — bad data is the fastest way to undo good infrastructure.
For a closer look at how contact data quality and verification affect outbound performance, check out LeadsApp's features and the pricing breakdown if you're evaluating data providers.
Frequently Asked Questions
How many cold emails can I safely send per day?
Per inbox, keep daily sends under 150 — most experienced teams cap at 100. For higher volume, run multiple warmed inboxes in rotation through your sequencing tool. A 90-day-old inbox sending 100 emails/day across 5 inboxes gives you 500 sends/day without pushing any single sender past safe limits.
What bounce rate is acceptable for cold outreach?
Keep hard bounce rate below 3% per campaign. Above 5% will start damaging your sender reputation meaningfully. Above 10% is a crisis — pause the campaign, audit your list quality, and don't resume until you've verified the remaining contacts. Repeated high bounce rates can get your sending domain blacklisted.
How long does it take to warm up a new sending domain?
Plan for 4-6 weeks minimum before reaching full cold outreach volume. Rushing warm-up is one of the most common reasons new sending domains get flagged. Automated warm-up tools (Instantly, Mailwarm, Lemwarm) speed the process, but don't shortcut the timeline by more than a week or two.
Does cold email content affect deliverability or just spam filtering?
Both. Spam filters analyze content signals to score your email before delivery. But engagement signals — opens, replies, link clicks — also feed back into your sender reputation over time. Emails that recipients consistently mark as spam damage your domain's long-term deliverability, not just a single send.
Should I use open tracking in cold outbound emails?
Use it with caution. Open tracking works by embedding a tiny image pixel — some spam filters flag this, and Apple's Mail Privacy Protection makes open data unreliable anyway. Many high-performing outbound teams turn off open tracking entirely and focus on reply rate and meetings booked as their primary metrics. If you do use it, host your tracking pixel on your own domain, not a shared provider domain.
What's the difference between a hard bounce and a soft bounce?
A hard bounce means permanent delivery failure — the email address doesn't exist, the domain doesn't exist, or the receiving server has permanently rejected your domain. Remove hard bounces immediately. A soft bounce is temporary — full mailbox, server temporarily unavailable. Retry soft bounces once; if they fail again, suppress them.
Read next
How to Reduce Cold Email Bounce Rate in 2025
Cut your cold email bounce rate below 2% with proven tactics: list hygiene, point-of-use verification, domain setup, and sending infrastructure tips.
Email Verification: Point of Use vs. Upload
Point-of-use vs. upload-time email verification: which approach cuts bounce rates, protects sender reputation, and saves money on B2B outreach.