---
title: "How to Improve Cold Email Deliverability: A Checklist for Teams Scaling Outbound"
description: "A cold email deliverability checklist for scaling teams: Gmail and Microsoft bulk sender rules, a diagnostic order for dropping opens, and pre-launch gates."
date: "2026-11-06T18:35:04.340Z"
updated: "2026-11-06T18:35:04.347Z"
author: "Carlos Agüero"
canonical: "https://sendpotion.com/feeds/blog/improve-cold-email-deliverability"
tags: ["how to improve cold email deliverability", "cold email deliverability best practices 2026", "improve email deliverability cold outreach", "cold email deliverability checklist"]
---

# How to Improve Cold Email Deliverability: A Checklist for Teams Scaling Outbound

*By Carlos Agüero, who works on multi-channel outreach automation and inbox deliverability at TargetGrid.ai, Skale.email and Potion.*

**Cold email deliverability** is the share of your outbound messages that reach a prospect's inbox instead of spam or a rejection, and you improve it by fixing authentication, complaints, list quality and volume, in that order. The stakes rose fast. GMass reports that Gmail has returned permanent 5xx rejections for non-compliant bulk mail since November 2025 ([GMass](https://www.gmass.co/blog/gmail-bulk-sender-guidelines/), April 2026), so a weak setup can now bounce outright instead of just landing in spam. This guide shows how to improve cold email deliverability without slowing your team down. You get the 2026 rules, a diagnostic order for when opens drop after you scale, and a pass/fail checklist for new domains. Still deciding on video for first touches? Start with [video outreach in cold email](https://sendpotion.com/feeds/blog/video-outreach-cold-email).

> **Key Takeaways**
> - Google, Yahoo and Microsoft all enforce bulk sender requirements as of 2026, and SPF, DKIM and DMARC are the entry ticket ([Red Sift](https://redsift.com/guides/bulk-email-sender-requirements), October 2026).
> - Cold email deliverability suffers when teams scale volume before checking authentication, complaints and list quality.
> - When opens drop after scaling, diagnose authentication, spam rate, list quality and volume before rewriting copy.
> - A new outbound domain should pass numeric pass/fail gates and have a named owner before it sends at volume.
> - Open rate is a weak deliverability signal, so judge by bounces, placement tests and replies.

## Google and Microsoft tightened bulk sender rules. Which cold email deliverability practices matter this year?

Authentication, complaint control and enforcement awareness are the cold email deliverability practices that matter most this year. Google, Yahoo and Microsoft all enforce bulk sender requirements as of 2026 ([Red Sift](https://redsift.com/guides/bulk-email-sender-requirements), October 2026). Senders need SPF, DKIM and DMARC on every domain. GMass reports that Gmail has returned permanent 5xx rejections since November 2025 ([GMass](https://www.gmass.co/blog/gmail-bulk-sender-guidelines/), April 2026).

![Laptop showing mail server authentication records beside a notebook checklist](https://ai-website-manager-media.s3.ap-south-1.amazonaws.com/blog_images/item_297_img1_20261022183619.webp)

A **bulk sender** is a sender whose volume crosses a mailbox provider's threshold. At Gmail that means close to 5,000 messages in 24 hours, and the status does not expire once crossed ([Minotaurus](https://www.minotaurus.com/en/insights/deliverability-gmail-yahoo), October 2026). Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM) prove a message came from an authorised server. **DMARC** (Domain-based Message Authentication, Reporting and Conformance) tells receivers what to do when those checks fail.

| Provider | Bulk threshold | Enforcement began | What non-compliant mail faces |
|---|---|---|---|
| Gmail | Close to 5,000 messages in 24 hours; status is permanent | February 1, 2024 | Permanent 5xx rejections since November 2025, per GMass |
| Yahoo | 5,000 per day | February 1, 2024 | Aligned with Google's spam-rate ceiling |
| Outlook.com, Hotmail, Live | More than 5,000 emails per day | May 5, 2025 | Microsoft says junk first, rejection later; dmarcian reports rejection. Verify against current Microsoft documentation |

Sources for the table: [Not the Junk Folder](https://www.notthejunkfolder.com/guides/outlook-sender-requirements) (2026), [Red Sift](https://redsift.com/guides/bulk-email-sender-requirements) (October 2026), [GMass](https://www.gmass.co/blog/gmail-bulk-sender-guidelines/) (April 2026), [Microsoft](https://techcommunity.microsoft.com/blog/microsoftdefenderforoffice365blog/strengthening-email-ecosystem-outlook%E2%80%99s-new-requirements-for-high%E2%80%90volume-senders/4399730) (April 2025) and [dmarcian](https://dmarcian.com/microsoft-enforces-spf-dkim-dmarc/) (May 2025).

### What does Microsoft actually enforce?

Microsoft's Outlook.com rules apply to domains sending more than 5,000 emails per day and require SPF, DKIM and DMARC ([Microsoft](https://techcommunity.microsoft.com/blog/microsoftdefenderforoffice365blog/strengthening-email-ecosystem-outlook%E2%80%99s-new-requirements-for-high%E2%80%90volume-senders/4399730), April 2025). They cover consumer domains, not Microsoft 365 tenants. On consequences, Microsoft's own post is cautious: "Non‐compliant messages will first be routed to Junk. If issues remain unresolved, they may eventually be rejected." ([Microsoft Defender for Office 365 team](https://techcommunity.microsoft.com/blog/microsoftdefenderforoffice365blog/strengthening-email-ecosystem-outlook%E2%80%99s-new-requirements-for-high%E2%80%90volume-senders/4399730), April 2025). dmarcian reports that Microsoft has rejected non-compliant mail from domains sending 5,000 or more emails a day since May 5, 2025 ([dmarcian](https://dmarcian.com/microsoft-enforces-spf-dkim-dmarc/), May 2025). The two accounts differ, so verify against current Microsoft documentation.

### How strict is the spam rate target?

Google's guidance is a Postmaster Tools spam rate below 0.10% and never reaching 0.30% ([Red Sift](https://redsift.com/guides/bulk-email-sender-requirements), October 2026). Per Red Sift's summary of Gmail enforcement, a sender above that ceiling loses mitigation support until the rate stays under 0.3% for seven consecutive days ([Red Sift](https://redsift.com/resources/blog/gmails-enforcement-ramps-up-what-bulk-senders-need-to-know), 2026). **Google Postmaster Tools** is a free Google dashboard that shows a sending domain's spam rate and reputation. Both figures are secondhand summaries of an undated Google help page, so recheck Google's page before you set policy. Cold outreach can breach the lower target easily, so treat it as an early warning.

### What applies if you send fewer than 5,000 emails a day?

Most Sales Development Representative (SDR) teams send a few hundred emails per domain per day, far below the formal threshold. The expectations still apply in practice. Authentication, low complaints and clean lists decide placement at every volume, and bulk status is permanent once crossed. For DMARC, Not the Junk Folder describes the minimum as p=none with alignment ([Not the Junk Folder](https://www.notthejunkfolder.com/guides/outlook-sender-requirements), 2026). Our recommendation: treat p=none as the floor, then move to quarantine or reject once reports show your own mail passing.

## Our open rates dropped after we scaled sequences. How do we improve deliverability for cold outreach?

Improve cold outreach deliverability after scaling by diagnosing in a fixed order: authentication and bounce logs, Postmaster Tools spam rate, list verification, volume per mailbox and sequence length, then copy last. Open rate alone misleads, because Apple Mail Privacy Protection and image blocking distort it. In Unspam's 2026 testing, which mixes cold and transactional mail, only 63% of tested emails reached the inbox ([Unspam](https://unspam.email/articles/email-deliverability-statistics), 2026).

![Sticky-note timeline of changes pinned to a whiteboard during an email performance review](https://ai-website-manager-media.s3.ap-south-1.amazonaws.com/blog_images/item_297_img2_20261022183619.webp)

The 63% figure comes from the vendor's own seed-test network, so read it as a rough guide, not an industry census. Start with a change log. Write down every change in the two weeks before the drop: new list, new mailbox, new tool, new template, higher volume. Then work down this table and stop at the first failure.

| Order | Check | What a pass looks like |
|---|---|---|
| 1 | Authentication and bounce logs | SPF, DKIM and DMARC pass in real headers; no spike in hard bounces |
| 2 | Postmaster Tools spam rate and domain reputation | Spam rate under Google's target; no Medium or Low reputation flag |
| 3 | List verification | Addresses verified before import; no purchased or stale lists |
| 4 | Volume per mailbox and sequence length | Volume ramped gradually; follow-ups capped; opt-out honoured |
| 5 | Copy and links | Short, relevant message; placement tested with each variant |

Placement differs by provider. Outlook is the weakest major provider for B2B mail: 75.6% inbox placement in Validity's report, but 66% in Unspam's broader testing ([Unspam](https://unspam.email/articles/email-deliverability-statistics), 2026). If a drop is concentrated in Outlook addresses, check the Microsoft rules above first.

### Which reply-rate benchmark should you compare against?

Benchmarks conflict because their denominators differ. Instantly's platform data puts the average cold email reply rate at 3.43%, with 5.5% for the top quartile and above 10% for elite campaigns ([Instantly](https://instantly.ai/cold-email-benchmark-report-2026), January 2026). Belkins analysed 7,530,489 cold B2B emails sent in 2025 and found an average reply rate of 0.45% ([Belkins](https://belkins.io/blog/cold-email-response-rates), 2026). The Belkins authors say their rates "look dramatically lower" than earlier published figures. The gap comes largely from how reply rate is calculated, so compare your number against one dataset's method only.

![Horizontal Bar chart: Cold email reply rate by performance tier (2026 benchmark). Highest: Elite (exceeds) at 10%.](https://ai-website-manager-media.s3.ap-south-1.amazonaws.com/blog_images/item_297_chart_c1.png)

*Source: [Instantly](https://instantly.ai/cold-email-benchmark-report-2026), 2026*

Instantly's authors draw a useful lesson for anyone scaling: "Reply rates remain stable despite growing volume proving that relevance, not quantity, drives conversations." ([Instantly research team](https://instantly.ai/cold-email-benchmark-report-2026), January 2026). Their summary is blunt: "In 2026, cold email is about resonance, not reach." ([Instantly](https://instantly.ai/cold-email-benchmark-report-2026), January 2026).

### How many follow-ups should a sequence have?

Step one produces 58% of all replies, and follow-ups produce the other 42% ([Instantly](https://instantly.ai/cold-email-benchmark-report-2026), January 2026). Follow-ups earn their place, but each one adds complaint risk. Cap steps, suppress anyone who replies or opts out, and keep the opt-out wording plain.

![Donut chart: Where cold email replies come from. Highest: Step one of sequence at 58%.](https://ai-website-manager-media.s3.ap-south-1.amazonaws.com/blog_images/item_297_chart_c2.png)

*Source: [Instantly](https://instantly.ai/cold-email-benchmark-report-2026), 2026*

Send timing is a weak lever by comparison. Belkins found Wednesday and Thursday delivered the best reply rate by weekday at 0.48%, against 0.45% for Monday and Tuesday ([Belkins](https://belkins.io/blog/best-time-to-send-email), 2026). Fix deliverability before you tune send days.

## Is there a deliverability checklist we can run before launching a new outbound domain?

Yes. A new outbound domain should pass pass/fail gates before it sends at volume: SPF, DKIM and DMARC verified from real message headers, a low spam rate, a low bounce rate, a seed-test placement result, and a named owner. Gmail's bulk status does not expire once crossed ([Minotaurus](https://www.minotaurus.com/en/insights/deliverability-gmail-yahoo), October 2026), so build these habits before volume grows.

![Clipboard with a printed pass and fail checklist and a pen on a wooden desk](https://ai-website-manager-media.s3.ap-south-1.amazonaws.com/blog_images/item_297_img3_20261022183619.webp)

Run these gates in order. If a gate fails, fix it and rerun; do not scale around it. Steps 3 and 5 are our suggested gates, not provider rules.

1. **Use a secondary domain.** Keep outbound off your primary company domain so a reputation problem cannot touch customer mail.
2. **Publish SPF, DKIM and DMARC.** Send a real test message and read the headers to confirm all three pass and align.
3. **Check DNS hygiene (our suggested gate).** Keep SPF within 10 DNS lookups, use a 2048-bit DKIM key, and confirm the reverse DNS and MX records resolve.
4. **Check blocklists.** Confirm the domain and sending IP are clean before the first send.
5. **Verify the list (our suggested gate).** Remove invalid and role addresses, and never send to purchased lists.
6. **Ramp gradually.** Start low per mailbox and raise volume only while the gates keep passing.
7. **Assign owners.** Name one person per domain and per mailbox.

| Gate | Pass condition | Basis |
|---|---|---|
| Authentication | SPF, DKIM and DMARC pass and align in real headers | Minimum is p=none with alignment ([Not the Junk Folder](https://www.notthejunkfolder.com/guides/outlook-sender-requirements), 2026) |
| Spam rate | Below the 0.10% target in Postmaster Tools during ramp-up | Google target ([Red Sift](https://redsift.com/guides/bulk-email-sender-requirements), October 2026) |
| Bounce rate | Under 2% | Our suggested internal gate, not a provider rule |
| Seed-test placement | Inbox placement above a threshold your team sets before scaling | Team policy; benchmarks vary widely |
| Ownership | One named owner per domain and mailbox | Team policy |

Warm-up is a debated step. **Warm-up** is the gradual ramp of sending volume on a new mailbox so providers see a normal pattern. Mailgun's editorial team argues it is never finished ([Mailgun](https://www.mailgun.com/blog/deliverability/email-warm-up-strategies-that-work/), July 2026), and Mail-Tester's team questions automated tools ([Mail-Tester](https://mailtester.com/blog/do-automated-warm-up-tools-improve-deliverability-data/), September 2026). Treat warm-up as a ramp, not a fix for list quality or complaints. To pick tooling that fits this workflow, see our [shortlist of video prospecting tools](https://sendpotion.com/feeds/blog/video-prospecting-tools).

## Who owns deliverability as the team scales?

A named owner per sending domain keeps a sales team fast while protecting cold email deliverability: one person watches Postmaster Tools, bounce logs and placement tests, backed by automated daily checks and written pause rules. Postmaster Tools v2 now shows a 'spam rate high' flag above 0.10% ([Folderly](https://folderly.com/blog/google-postmaster-tools), September 2026), a natural trigger to pause a domain.

![Row of labelled paper envelopes on a desk, each with a name tag showing ownership](https://ai-website-manager-media.s3.ap-south-1.amazonaws.com/blog_images/item_297_img4_20261022183619.webp)

Speed and deliverability only conflict when checks are ad hoc. Build these habits once:

- **Name an owner.** One person watches Postmaster Tools, bounce logs and placement tests for each domain.
- **Set pause and retire rules.** Our recommended policy: pause a domain when Postmaster Tools flags a high spam rate or a Medium reputation, and retire it if it does not recover.
- **Log every change.** New list, new tool, new template or higher volume goes in a shared change log, which turns the diagnostic order into a five-minute job.
- **Judge by replies, not opens.** Reps should watch bounces, placement tests and replies.
- **Test every variant.** If a sequence includes a video link, treat it like any other link and include it in your seed placement tests.

Personalisation helps once the inbox is secured. Our guide to [sending personalized videos at scale](https://sendpotion.com/feeds/blog/personalized-videos-at-scale) covers that side, and the [video prospecting playbook](https://sendpotion.com/feeds/blog/using-video-for-sales-prospecting) shows how SDR teams add it to every sequence.

> **Our data:** SendPotion's customer case study "GrowPronto books 45 meetings and closes 7 accounts with Potion" reports 45 meetings booked and 7 accounts closed.

## Limitations: who this checklist is not for

The cold email deliverability checklist in this guide has three limits: most thresholds come from secondary summaries of Google's and Microsoft's guidance, benchmark averages come from vendor datasets, and Microsoft's enforcement timeline is described differently across sources. The checklist is also not for teams sending purchased or unverified lists, because no setting offsets high complaint rates.

![Red pen marking caveats in the margin of a printed document about email sending limits](https://ai-website-manager-media.s3.ap-south-1.amazonaws.com/blog_images/item_297_img5_20261022183619.webp)

Keep these caveats in mind:

- **Secondary sources.** Google's help pages are undated living documents, so the spam-rate figures here come from vendor summaries of them. Recheck Google's and Microsoft's pages before you set policy.
- **Vendor benchmarks.** Instantly's data covers platform users only, and Unspam's data comes from its own seed-test network. Neither is a neutral industry census.
- **Microsoft's timeline.** Microsoft says non-compliant mail goes to junk first and may be rejected later, while dmarcian reports rejection in force. Verify against current Microsoft documentation.
- **Our own gates.** The DNS hygiene, bounce and pause thresholds are our suggestions, not provider rules.
- **Scope.** The guide covers deliverability, not legal compliance. Rules such as CAN-SPAM, CASL and ePrivacy need separate review.

## Frequently Asked Questions

### Do Gmail and Outlook bulk sender rules apply if I send fewer than 5,000 emails a day?

Yes, the expectations still apply below 5,000 emails a day, even though the formal bulk threshold does not. Gmail counts a sender as bulk at close to 5,000 messages in 24 hours, and that status does not expire once crossed ([Minotaurus](https://www.minotaurus.com/en/insights/deliverability-gmail-yahoo), October 2026). Authenticate every domain and keep spam complaints low from the first send, so growth never forces a rushed fix.

### What spam complaint rate is safe for cold email: 0.1% or 0.3%?

A safe spam complaint rate for cold email is below 0.10%, and 0.30% is a ceiling, not a goal. Google tells senders to keep the Postmaster Tools spam rate below 0.10% and never let it reach 0.30%, according to Red Sift's guide ([Red Sift](https://redsift.com/guides/bulk-email-sender-requirements), October 2026). Treat the lower figure as your working target and the higher one as a hard stop.

### Is DMARC p=none enough for cold outreach domains?

DMARC p=none is the stated minimum, but it is a floor rather than a target for cold outreach domains. Not the Junk Folder describes the Microsoft minimum as p=none with alignment ([Not the Junk Folder](https://www.notthejunkfolder.com/guides/outlook-sender-requirements), 2026). Sources disagree on whether Gmail and Yahoo demand more, so start at p=none, read your reports, and move toward quarantine or reject once legitimate mail passes.

### Do email warm-up tools actually work?

Email warm-up tools help new inboxes build a sending pattern, but they do not fix list quality, authentication or complaints. Mailgun's editorial team argues warm-up is never finished ([Mailgun](https://www.mailgun.com/blog/deliverability/email-warm-up-strategies-that-work/), July 2026), and Mail-Tester's team is more sceptical of automated tools ([Mail-Tester](https://mailtester.com/blog/do-automated-warm-up-tools-improve-deliverability-data/), September 2026). Use warm-up as a gradual ramp alongside verified lists and low complaint rates, not as a substitute.

## Conclusion

Cold email deliverability in 2026 is a routine, not a one-off fix. Remember five points:

- Authenticate every domain with SPF, DKIM and DMARC before the first send.
- Keep complaints low and treat Google's spam-rate target as an early warning.
- When opens drop, diagnose authentication, spam rate, list quality and volume before copy.
- Gate every new domain with pass/fail checks and a named owner.
- Judge results by bounces, placement and replies, not opens.

Once your infrastructure passes, pair it with relevant first touches, and see real [video prospecting examples that got replies](https://sendpotion.com/feeds/blog/video-prospecting-examples). When you are ready, Start Free Trial to generate AI videos in your own face, voice, and gestures at scale.