Email prospecting • 13 min

    Cold email deliverability: set up SPF, DKIM and DMARC, follow Google and Yahoo sender rules, ramp volume safely, clean your list and take pressure off email with LinkedIn.

    Back to blog

    Short answer

    Cold email deliverability rests on two pillars: complete authentication (SPF, DKIM and DMARC aligned with your From address) and a reputation protected by a low complaint rate. Google asks senders to stay below a 0.3% reported spam rate and recommends aiming under 0.10%. In practice, a verified and targeted list, volume that grows in steps and a sequence that shares the load with LinkedIn matter more than any warm-up tool.

    13 min••By Hugo Granjard

    Founder of Reakly

    Target keyword: cold email deliverability

    Key takeaways

    • Authentication proves who you are; reputation, built one send at a time, decides whether you reach the inbox.
    • Spam rate is the real ceiling: Google asks senders to stay below 0.3% and recommends under 0.10%.
    • A verified, targeted list protects a domain better than any warm-up tool.
    • Sharing the sequence between LinkedIn and email gets you the same conversations with fewer emails.
    Cover of the Reakly article on cold email deliverability: connected sequence steps representing spaced-out sends

    Most cold email deliverability advice says the same thing. Set up SPF, DKIM and DMARC. Buy a few extra domains. Turn on a warm-up tool. Then hit send. That's exactly why so many outbound programs end up in the spam folder.

    Authentication is non-negotiable. But all it does is prove who you are. It says nothing about how your recipients feel about your emails.

    The problem isn't technical. The problem is the pressure you put on a single channel. Too many emails, to lists that are too broad, with no clear reason to write. Spam filters can't read your intentions. They read how people react to what you send.

    And the margin for error is tiny. In its email sender guidelines, Google asks senders to keep the spam rate reported in Postmaster Tools below 0.10% and never reach 0.30%. Put differently: one complaint per thousand emails is already a warning sign.

    This guide gives you a two-part method: a clean technical foundation you verify once, and controlled email pressure, shared with LinkedIn, so every email you send has a real reason to exist.

    Why cold email deliverability is won after setup

    People talk about deliverability like it's a setting. It's a reputation. You build it, and lose it, one send at a time.

    Delivered doesn't mean seen

    An email counts as "delivered" when the recipient's server accepts it. That doesn't mean it reached the inbox. It can land in spam, in a secondary tab, or in a quarantine queue run by the prospect's IT team.

    Your sending tool probably shows a delivery rate close to 100%. Comforting. Also beside the point. What matters is inbox placement.

    Filters judge three things

    Simplified, a spam filter asks three questions:

    • Identity: is this sender who they claim to be? That's the job of SPF, DKIM and DMARC.
    • Reputation: how has this domain behaved so far? Complaints, bounces, volume, consistency.
    • Reaction: what do recipients do with these emails? Reply, ignore, or mark as spam.

    You can fix the first one in an afternoon. The other two are earned every week. That's where most problems live.

    Authentication proves who you are. Reputation decides whether anyone wants to hear from you.

    SPF, DKIM, DMARC: the technical foundation in an afternoon

    This is the best-documented part, and the easiest. It's still mandatory.

    What each protocol does

    ProtocolWhat it provesCommon mistake
    SPFWhich servers may send for your domainForgetting a sending tool, or exceeding the DNS lookup limit
    DKIMThe message was signed by your domain and not alteredSigning with the sending tool's domain instead of yours
    DMARCWhat to do when SPF and DKIM fail, plus alignment with the From addressNo record at all, or no reporting address to monitor
    PTR (reverse DNS)The sending IP maps to a real hostnameRarely something you manage yourself with a major mailbox provider

    Google's guidelines spell out the specifics. Every sender needs SPF or DKIM. Anyone sending more than 5,000 messages a day to Gmail needs SPF, DKIM and DMARC, and the DMARC policy can be set to "none". The domain in the From header must align with either the SPF or the DKIM domain. Google also requires TLS and valid forward and reverse DNS records. DKIM keys must be at least 1024 bits, and Google recommends 2048 bits where your provider supports it.

    Yahoo is on the same page. Its sender best practices require bulk senders to implement both SPF and DKIM and to publish a valid DMARC policy of at least "p=none".

    Alignment: the step everyone misses

    An email can pass SPF and DKIM and still fail DMARC. It happens when DKIM is signed with your sending tool's domain rather than your own.

    Check every tool that sends on your behalf: mailbox, sequencing tool, CRM, billing. Each one should sign with your domain. The test is easy: email yourself, open the full headers, and look for "dmarc=pass".

    Start DMARC in monitoring mode

    If you don't have DMARC yet, start with "p=none" and a reporting address. You block nothing. You learn who sends on your behalf. Once every legitimate source is aligned, you can tighten the policy.

    Don't enforce DMARC before you've checked your tools. Otherwise it's your own invoices that end up in spam.

    Which cold email deliverability rules actually apply in B2B?

    In B2B, the rules that matter are the ones set by major mailbox providers, plus the legal framework for prospecting where you operate. The most-cited thresholds come from Google and Yahoo: full authentication for bulk senders, a spam rate below 0.3%, and one-click unsubscribe honored within 48 hours. They mostly target consumer inboxes, but they describe what filters expect everywhere.

    The 5,000-message threshold, and what it doesn't say

    Google's sender requirements FAQ defines a bulk sender as one that sends close to 5,000 messages or more to personal Gmail accounts within 24 hours. Messages from the same primary domain count together. And the status doesn't expire: changing your sending habits won't remove it.

    Two caveats for B2B outbound:

    • The threshold is about personal Gmail accounts. Google states that its requirements and enforcement only apply to mail sent to those accounts, not to Google Workspace recipients. Your prospects mostly use work addresses.
    • That's not permission to be sloppy below it. Corporate mail filters lean on the same signals: authentication, reputation, reactions. Google's and Yahoo's rules are the best public summary of what's expected.

    Spam rate: the real ceiling

    This is the strictest number. Google asks all senders to stay below a 0.3% spam rate in Postmaster Tools and recommends aiming under 0.10%. Yahoo sets the same 0.3% ceiling and calculates it from mail delivered to the inbox.

    Do the math. Out of 1,000 emails that reach the inbox, three spam reports put you at the ceiling. One badly targeted list can tip a domain over.

    One-click unsubscribe

    Google and Yahoo both require bulk senders to support one-click unsubscribe on marketing messages, plus a visible link in the body. Google's FAQ says to process requests within 48 hours; Yahoo says to honor them within 2 days.

    Even for one-to-one prospecting emails, I recommend an easy way out: one line at the end, and an immediate opt-out in your tool. A prospect who can say "no thanks" easily doesn't reach for the spam button.

    RuleGoogleYahoo
    Minimum authentication for everyoneSPF or DKIMSPF or DKIM
    Bulk sendersSPF, DKIM and DMARC (at least "none")SPF, DKIM and DMARC (at least "p=none")
    Spam rate ceilingBelow 0.3%, aim below 0.10%Below 0.3%
    UnsubscribeOne-click for marketing, within 48 hoursOne-click for marketing, within 2 days
    DKIM keyAt least 1024 bits, 2048 recommendedAt least 1024 bits

    Don't forget the law

    Deliverability isn't only about filters. Prospecting rules vary by country, so check the ones that apply to you. France is a useful example: the CNIL, the French data protection authority, says B2B email prospecting doesn't require prior consent. It relies on a right to object, on one condition: the message has to relate to the recipient's job. Its example is software pitched to a company's IT director.

    Each message must identify the sender and offer a simple, free way to refuse further contact. Compliance and deliverability point in the same direction: a relevant, identifiable message with a clear way out gets fewer complaints.

    Regulators and spam filters agree on one thing: write to people your message is actually about.

    Domains, mailboxes and warm-up: getting the infrastructure right

    Once authentication is done, the next questions are where to send from and how fast to ramp.

    Protect your primary domain

    Your main domain carries customer emails, invoices and partner threads. If its reputation drops, everything suffers. That's why many teams run outbound from a secondary domain close to their brand name.

    That separation has a cost. A new domain has no history. It needs the same care (SPF, DKIM, DMARC, a website that redirects to your main site) and a gradual ramp. A secondary domain protects your brand. It won't protect you from a bad list.

    Ramp up gradually

    Neither Google nor Yahoo publishes a "safe" daily volume per mailbox. Any number presented as an official limit is an estimate. The useful rule is a principle: increase volume in steps, and only while the signals stay healthy.

    A sensible ramp looks like this:

    • Week 1: a handful of emails a day, to your best-fit contacts, the ones most likely to reply.
    • Following weeks: gradual increases, as long as bounces stay low and complaints don't show up.
    • Any time: drop back a step if replies fall or a complaint comes in.

    Automated warm-up tools trade emails between inboxes to simulate engagement. They can help you get started. They don't replace real replies from real prospects, which remain the strongest reputation signal.

    Watch what's happening

    Google offers Postmaster Tools to track your domain's spam rate toward Gmail. Turn it on, even at low volume. In your sending tool, track three numbers every week: bounces, replies, unsubscribes. Our guide to sales prospecting KPIs shows how to fit them into a weekly review.

    List quality: the biggest deliverability factor

    It's the least glamorous part. It's also the one that decides everything.

    Bounces erode reputation

    A bounce tells the mailbox provider you're writing to addresses that don't exist. Repeated, that's classic spammer behavior. Google's guidelines don't publish a bounce threshold, but the principle is simple: an unverified address should never enter a sequence.

    Verify every address before sending. Remove bounces immediately. Be wary of catch-all addresses, which accept everything without proving anyone reads them. Our guide to B2B lead enrichment covers how to find and verify addresses properly.

    Targeting lowers complaints

    A prospect who can't tell why you're writing has two options: ignore or report. A prospect who instantly sees the link to their job and situation has a third: reply.

    So complaint rate is mostly fixed in the list. Right role, right company size, right context. Above all, a reason to write now.

    List sourceDeliverability riskWhat to do
    Bought list, untargetedHigh: bounces, spam traps, complaintsDon't use it
    Broad export with no role filterHigh: lots of irrelevant recipientsNarrow by function and seniority
    ICP-targeted list, verified addressesModerateSend in steps, track complaints
    Prospects with a recent signal (hiring, funding, engagement)Low: the email has a reason to existPrioritize these contacts

    Generic addresses

    Addresses like info@ or contact@ rarely reply and often sit behind heavier filtering. Fewer addresses, but named and relevant, beat a long list of shared inboxes.

    Content that gets past filters (and gets replies)

    Content matters less to filters than people think. It matters a lot to how recipients react, and that matters a lot to filters.

    Write like a person, not a newsletter

    A prospecting email should look like something you typed yourself. Plain text. No heavy images. One link at most, often none. A simple signature.

    Weak "Hi {FirstName}, discover our revolutionary platform that will 10x your growth! Click here to book your free demo today."

    Strong "Hi Claire, saw you're hiring two account executives in Austin. The question that usually follows is how to get them productive fast without adding three more tools. Is that already on your radar, or too early?"

    The strong version has no link, no promise, no shouting. It has a reason to write and an easy question. That's what gets replies, and replies are what build reputation.

    What triggers filters and complaints

    • Multiple or shortened links: they look like phishing.
    • Tracking pixels and attachments: pointless in a first email, and often penalized by corporate filters.
    • Broken personalization: "Hi {FirstName}" gives the game away.
    • Identical messages in bulk: the same text sent a hundred times at once is an easy pattern to spot.
    • No way out: without a simple way to say no, the spam button becomes the exit.

    Follow up without harassing

    A good follow-up adds something: a piece of information, an example, a different question. "Just bumping this to the top of your inbox", four times in a row, drives complaints up. Our sales follow-up message examples show how to change the angle at each step.

    An email worth replying to protects your domain better than any warm-up tool.

    Take pressure off email with a multichannel sequence

    This is the most underrated lever. If your deliverability depends on sending a lot of email, the real problem is your dependence on email.

    Spread the touchpoints

    A sequence that lives only in email has to send a lot to get conversations. A sequence that combines LinkedIn and email can send fewer emails, better timed.

    Example for a 15-person consulting firm targeting CFOs:

    1. Day 1: profile visit and LinkedIn connection request, with no note or a short contextual one.
    2. Day 3: if accepted, a first LinkedIn message built on the signal you spotted.
    3. Day 6: if there's no connection or reply, one short email that picks up the same context.
    4. Day 12: a follow-up on whichever channel the prospect is most active.

    The result: one or two emails per prospect instead of four or five. Less pressure on your domain. More coherence for the prospect, who gets one conversation instead of two parallel campaigns. Our guide to multichannel prospecting across LinkedIn, email and WhatsApp covers how to orchestrate the channels.

    Stop the sequence the moment someone replies

    A prospect who replies on LinkedIn and then gets an automated email follow-up has every reason to report it. The sequence must stop on every channel at the first reply. It's a technical detail, and it's a deliverability detail too.

    In Reakly, multichannel campaigns across LinkedIn and email stop automatically when a prospect replies on any channel, and every conversation lands in the same inbox.

    The mistakes that burn a domain

    Launching a new domain at full volume

    A domain registered yesterday sending hundreds of cold emails is exactly the profile filters look for. Ramp in steps.

    Answering falling replies with more volume

    Replies drop, so you double sends. Complaints rise, placement drops, replies drop further. A falling reply rate is a targeting or messaging problem, never a volume problem.

    Ignoring opt-outs

    Contacting someone who asked you to stop invites a complaint, and in many countries breaks the rules too. Record every opt-out and honor it across every tool.

    Adding mailboxes to dodge limits

    Spinning up ten mailboxes to send ten times more just spreads the same problem around. If the list is bad, every mailbox collects its own complaints. Mailbox providers judge the domain, not just the inbox.

    Not measuring anything

    Without Postmaster Tools, without tracking bounces and complaints, you find out when replies collapse. By then there's no quick fix.

    SymptomLikely causeAction
    Replies suddenly crashLanding in spamCheck Postmaster Tools, cut volume, review the list
    Bounces climbingUnverified or stale addressesVerify before sending, clean the database
    Complaints climbingTargeting too broad or too many follow-upsTighten your ICP, shorten the sequence
    DMARC failing in headersSending tool not alignedSet up DKIM with your own domain

    Conclusion: fewer emails, better placed

    Cold email deliverability isn't something you fix once. The technical part is. SPF, DKIM, DMARC, aligned. One afternoon, then a quarterly check.

    The rest is earned every week. A verified list. Tight targeting. Messages worth replying to. An easy exit for people who aren't interested. And volume that only grows when the signals allow it.

    The strongest lever is also the simplest: stop asking email to carry everything. LinkedIn and email, coordinated, get you the same conversations with fewer emails.

    Volume wears a domain down. Relevance keeps it healthy.


    If you want to take pressure off your domain without losing conversations, Reakly runs LinkedIn and email in one sequence, stops follow-ups as soon as a prospect replies, and helps you reach the accounts showing a buying signal first. Fewer sends, better reasons to write.

    Frequently asked questions

    • Google and Yahoo require every sender to have at least SPF or DKIM, and bulk senders to have all three, with a DMARC policy of at least "none". For outbound, set up all three from day one: it takes an afternoon and it's the baseline filters expect.

    • Google asks senders to keep the spam rate reported in Postmaster Tools below 0.3% and recommends aiming under 0.10%. Yahoo also sets the ceiling at 0.3%. In practice, three spam reports per 1,000 emails that reach the inbox is enough to hit the limit.

    • Neither Google nor Yahoo publishes an official daily volume per mailbox. Start with a handful of emails a day to your best-fit contacts, then increase in steps as long as bounces stay low and no complaints come in.

    • A secondary domain protects the reputation of your main domain, which carries customer emails and invoices. It still needs the same setup (SPF, DKIM, DMARC) and a gradual ramp. It never makes up for a badly targeted list.

    • The usual causes are missing or misaligned authentication, a new domain sending too much too fast, unverified addresses that bounce, and recipients marking messages as spam because they're not relevant. Check your email headers for dmarc=pass, look at Postmaster Tools, then tighten your list before touching the copy.

    Put this method into practice with Reakly.

    Find the right prospects, reach out on LinkedIn and by email, and keep every reply in one place.

    See pricing

    7-day free trial · Cancel anytime