# Cold Email Deliverability: The Checklist That Keeps You Out of Spam

> The warmup schedule, authentication basics, and sending habits that keep cold email landing in the inbox instead of spam, plus what to do the moment opens crater.

_2026-08-03 · 10 min read · Cold Email_

# Cold Email Deliverability: The Checklist That Keeps You Out of Spam

**Quick answer:** Cold email deliverability comes down to a handful of habits: warm up a fresh mailbox slowly (10-20 emails a day in week one, doubling weekly to a ceiling of 50-100 per mailbox per day), send from a real connected mailbox rather than an anonymous SMTP relay, make sure SPF, DKIM and DMARC pass on your sending domain, keep messages text-only with at most one link, and watch your bounce rate, since anything over 3-5% poisons your sender reputation fast. Spread volume across mailboxes instead of pushing one harder, and if opens suddenly crater, pause 3-4 days and halve your volume rather than pushing through. LeadX builds a staggered sending window and your own connected Gmail account into every campaign so most of this is handled automatically.

Deliverability is earned slowly and lost instantly. You can write the sharpest, most personalized email in the world, but if it lands in spam, none of that matters, because nobody reads it. Most deliverability problems aren't mysterious, they're the predictable result of sending too much, too fast, from an address that hasn't earned the trust yet. The checklist below is the difference between cold email that reaches the inbox and cold email that quietly disappears.

## Why deliverability breaks: the short version

Every mailbox provider (Gmail, Outlook, Yahoo) is running a reputation score on your sending domain and IP behind the scenes, built from bounce rates, spam complaints, engagement, and sending patterns. A brand-new mailbox has no history, so it starts with zero trust. Sending 200 cold emails on day one from that mailbox looks nothing like normal human behavior, and it gets flagged. Everything on this checklist exists to build reputation the way a real, trusted mailbox naturally would.

## The warmup schedule

A fresh mailbox needs to earn its sending volume gradually, the same way a new credit card earns a higher limit over time. The schedule that works:

| Week | Daily volume |
|---|---|
| Week 1 | 10-20 emails/day |
| Week 2 | roughly double week 1 |
| Week 3 | roughly double week 2 |
| Ongoing ceiling | 50-100 cold emails per mailbox per day |

Never blast 200 emails on day one from a fresh mailbox, no matter how good your list is. The volume itself, not the content, is what trips spam filters on an unwarmed address. If you're running multiple mailboxes, each one needs its own warmup curve, warming up one doesn't transfer trust to another.

## Send from a real mailbox, not an anonymous relay

Mail sent from a real, connected Gmail or Google Workspace account with actual history, sent and received mail, calendar activity, normal usage, inboxes far better than mail routed through an anonymous SMTP relay with no history behind it. Mailbox providers weight sender reputation heavily on the account itself, not just the domain, so a relay with no track record starts every campaign from behind. This is the reasoning behind connecting your own Gmail account directly to your outreach tool rather than routing through a generic third-party SMTP server.

## SPF, DKIM, DMARC: table stakes, not optional

Authentication is table stakes. Without it, mailbox providers have no way to confirm the mail claiming to be from your domain is actually authorized to send from it, and unauthenticated mail gets routed to spam by default on most providers today.

- **SPF** tells receiving servers which mail servers are allowed to send on behalf of your domain.
- **DKIM** signs your outgoing mail cryptographically so receivers can verify it wasn't altered in transit.
- **DMARC** tells receivers what to do if a message fails SPF or DKIM, and gives you visibility into spoofing attempts.

If you're sending from a custom domain, check all three once in any free SPF/DKIM/DMARC checker tool before you start a campaign. If you're sending from Gmail or Google Workspace on Google's own infrastructure, this is largely handled automatically, but it's worth a one-time check rather than an assumption.

## Keep the message itself boring: text-only, one link max

Cold email that looks like a personal note gets delivered like one. That means:

- **No images.** Image-heavy emails read as marketing to spam filters, and they don't load the same way across every phone and inbox anyway.
- **No attachments.** Attachments from an unknown sender are one of the fastest spam triggers there is.
- **No tracking-pixel-heavy templates.** The kind of open-tracking pixel bundled into most marketing platforms is itself a spam signal on cold sends.
- **At most one link.** One link, ideally to something concrete like a demo, keeps the message readable as a note from a person rather than a campaign.

## Bounce rate is the metric that quietly kills reputation

A bounce happens when an email address doesn't exist or can't be delivered to. Over 3-5% bounce rate poisons your sending reputation fast, because mailbox providers read a high bounce rate as a sign you're sending to purchased or scraped lists you haven't verified. Good contact sourcing helps here, but the habit that matters most is deleting obviously stale or malformed addresses instead of sending to them anyway and hoping. A list with a handful of dead addresses is worth cleaning before a send, not worth risking your entire mailbox reputation over.

## Spread volume across mailboxes, don't push one harder

Two mailboxes sending 50 emails a day each will outperform one mailbox pushed to 100 a day, even though the total volume is identical. Each individual mailbox stays comfortably under strain and keeps building its own reputation, rather than one address absorbing all the risk. If your campaign needs more daily volume than a single warmed mailbox can safely handle, add a second connected mailbox rather than raising the ceiling on the first one.

## What to do when opens suddenly crater

If your open rate drops sharply and replies stop coming in, that's usually a sign mail has started landing in spam rather than the inbox, not that your list or copy suddenly got worse. The fix is not to push harder to compensate:

1. **Pause sending for 3-4 days.** This gives the mailbox provider's spam signals time to reset rather than compound.
2. **Halve your daily volume** when you resume, then work back up gradually rather than returning to the previous ceiling immediately.
3. **Recheck authentication** (SPF/DKIM/DMARC) in case something changed on the domain side.

Pushing through a spam-folder streak instead of pausing tends to make the problem permanent rather than temporary, because you're compounding the exact signal, high volume with poor engagement, that caused it in the first place.

## Why sending windows and staggered sends help

Real humans don't send fifty emails in the same second. A burst of identical-looking sends at exactly the same timestamp is a pattern mailbox providers can detect, while a natural spread across a sending window looks like normal usage. Sticking to business-hours sending windows and staggering individual sends by a few minutes each does two things at once: it keeps your pattern looking human, and it means recipients see your email at a time they're actually likely to check their inbox rather than buried at 3am. For the best specific send times and follow-up timing on top of the deliverability side, see [how to write cold emails that get replies](/blog/how-to-write-cold-emails-that-get-replies).

This is also one of the clearer differences between [running outreach manually and automating it](/blog/ai-outreach-vs-manual-cold-outreach): a human sending by hand tends to send in bursts (a batch after lunch, another before logging off), while a tool built around a sending window paces those same emails out automatically.

## How LeadX handles this for you

LeadX's outreach sequences send only inside a configured sending window, staggered a few minutes apart rather than all at once, and go out through your own connected Gmail account rather than an anonymous relay, which covers the two habits most likely to be skipped when running outreach by hand: staggered, human-paced sending and a real mailbox with history behind it. Sequences also stop automatically the instant a lead replies, so you're never continuing to send follow-ups into a thread that's already converted. Combined with the warmup, authentication, and volume habits above, this is the same deliverability foundation [LeadX's own outreach guidance](/blog/how-to-write-cold-emails-that-get-replies) is built on, and it's part of why LeadX ranks among the [cold email tools built for agencies](/blog/best-cold-email-software-agencies) rather than generic mass-mail platforms.

## Common mistakes to avoid

- **Skipping warmup on a fresh mailbox** because the campaign is time-sensitive. The volume spike itself is what triggers spam filters, regardless of how good the list is.
- **Ignoring bounce rate until it's already high.** Clean the list before sending, not after reputation damage is done.
- **Sending image-heavy or link-heavy templates** because they look more "professional." Plain text with one link consistently outperforms designed templates on cold sends.
- **Pushing through a spam-folder streak** instead of pausing. This is the single most common way a recoverable dip turns into a permanently damaged mailbox.

## Frequently asked questions

### How many cold emails can I send per day without hurting deliverability?

A fresh mailbox should start at 10-20 emails a day in week one, roughly doubling each week, up to a ceiling of 50-100 cold emails per mailbox per day. Beyond that ceiling, add another mailbox rather than pushing volume higher on one address.

### Why is my cold email going to spam?

The most common causes are sending too much volume too fast from an unwarmed mailbox, missing or misconfigured SPF/DKIM/DMARC records, a bounce rate above 3-5%, or content that looks like marketing (images, attachments, multiple links) rather than a personal note.

### Do I need SPF, DKIM, and DMARC for cold email?

Yes. These three records authenticate your sending domain and are effectively table stakes for inbox placement today. If you're sending from a custom domain, check all three in a free checker tool before running a campaign; Gmail and Google Workspace handle this automatically for their own domains.

### What should I do if my open rates suddenly drop?

Pause sending for 3-4 days, then resume at half your previous daily volume and build back up gradually. A sudden open-rate crash usually means mail has started landing in spam, and pushing through it with more volume tends to make the problem permanent rather than temporary.

### Is it better to use one mailbox or several for cold outreach?

Several, once your volume needs exceed what one warmed mailbox can safely send. Two mailboxes at 50 emails a day each carry less risk and build reputation more sustainably than a single mailbox pushed to 100 a day.

### How does LeadX help with deliverability?

LeadX sends through your own connected Gmail account rather than an anonymous SMTP relay, and paces sequences inside a staggered sending window (default 8am-5pm local time) rather than firing everything at once, both of which mirror the sending patterns of a real, trusted mailbox.

Want deliverability handled for you instead of managed by hand? [Start free with LeadX](/signup) and send your first sequence through your own connected Gmail.