In short: Cold email deliverability is won before you hit send. Authenticate your domains with SPF, DKIM, and DMARC; send from separate sending domains—not your primary—and warm them up gradually over two to four weeks; keep per-inbox volume modest and copy clean. Reputation, not luck, decides whether you land in the inbox or spam.
You can write the perfect cold email and still get zero replies—because it never reached a human. Deliverability is the unglamorous engineering behind outreach: the DNS records, domains, and sending discipline that decide whether mailbox providers trust you. Get it right and your compliant outreach actually lands. Get it wrong and your whole pipeline quietly dries up.
Authenticate first: SPF, DKIM, DMARC
Before sending a single cold email, set up three DNS records on every sending domain:
- SPF lists which servers are allowed to send mail for your domain.
- DKIM adds a cryptographic signature so receivers can verify the message wasn't altered and really came from you.
- DMARC tells receiving servers what to do when a message fails SPF or DKIM—and gives you reporting.
Major providers increasingly require all three for bulk senders. Missing authentication is the single most common reason legitimate outreach gets junked.
Use separate sending domains
Never run cold outreach from your primary domain. If deliverability dips, you don't want your invoices, contracts, and normal business email caught in the fallout. Instead, register one or more dedicated sending domains—often close variations of your brand—and route cold email through those. Your main domain's reputation stays protected no matter what.
Warm up before you scale volume
A brand-new domain with no sending history that suddenly blasts hundreds of emails looks exactly like a spammer. Warmup fixes that: start with a small number of sends per inbox per day and increase gradually over roughly two to four weeks while engagement stays healthy. Patience here is the difference between a domain that lasts and one that's burned in a week.
Rotate domains and cap volume
To send meaningful volume safely, spread it across several warmed domains and inboxes rather than pushing one domain too hard. Keep per-inbox daily sends conservative. This multi-domain rotation protects reputation and keeps you in the inbox as you scale—and it's tedious to manage by hand, which is where dedicated tooling earns its keep.
The tooling that handles this for you
Configuring DNS, provisioning domains, warming inboxes, and rotating sends is real work—and doing it manually is where most small teams give up. Platforms built for outbound handle it for you. We use JYNI internally: it provisions managed sending domains with DKIM/SPF/MX configured, rotates across multiple domains to protect deliverability, and runs the outreach and CRM follow-up in one workspace. Whether you use a dedicated platform or wire it up yourself, don't run cold email without the deliverability layer underneath it.
Copy and list hygiene still matter
Authentication gets you eligible; behavior keeps you trusted. Avoid spam-trigger patterns—too many links, heavy images, misleading subject lines. Verify email addresses to keep bounce rates low, since high bounces wreck reputation fast. And target a relevant list: emailing people who have no reason to care drives the spam complaints that sink a domain. Quality of list and copy directly feeds deliverability.
Composite example (illustrative, not a real client record): A services firm went from ~15% to the inbox to the large majority landing simply by adding DMARC, moving cold sends off the primary domain to two warmed sending domains, and capping per-inbox volume. No change to the copy—the messages had been fine all along; they just weren't being delivered.
Takeaway: when replies suddenly drop, suspect deliverability before you blame the message.
FAQ
Why do my cold emails go to spam?
Usually missing SPF/DKIM/DMARC, an un-warmed domain, sending too fast, spammy copy or too many links, or low engagement. Fix authentication first, then warm up and keep volume gradual.
What are SPF, DKIM, and DMARC?
DNS records that prove your email is legitimate—SPF authorizes senders, DKIM signs messages, DMARC sets the policy and reporting. Set up all three before outreach.
Should I send cold email from my main domain?
No—use separate sending domains so your primary domain's reputation and normal business email stay protected. Many teams rotate across several warmed domains.
How long does domain warmup take?
Roughly two to four weeks—start small and ramp gradually while engagement stays healthy. Rushing warmup gets domains flagged.
Takeaway
Deliverability is the foundation everything else sits on. Authenticate every sending domain, keep cold outreach off your primary domain, warm up patiently, and rotate volume across domains. Do that, and your outreach gets the one thing it can't succeed without: a chance to be read.