Cold Email Deliverability in 2026: Domains, Warmup and Safe Volumes

Picture a team that launches its first cold email campaign on a Monday. Replies come in on Tuesday and Wednesday. By the second week they slow to almost nothing, even though the list and copy have not changed.

Nothing broke in the sequence. The mail simply stopped reaching the inbox, and nobody had a way to see it.

This guide covers what decides whether cold email lands in 2026: the Gmail and Yahoo sender rules, SPF, DKIM and DMARC in plain words, separate sending domains, warmup, safe daily volume, list verification, the thresholds that matter, how to monitor placement and what to do when it drops.

What Deliverability Means for Cold Email

Deliverability is the share of your email that lands in the primary inbox, not in spam, promotions or nowhere. A message can be "delivered" by your sending tool and still sit in a spam folder nobody opens.

Mailbox providers like Gmail and Outlook decide placement from 3 broad things:

• Who you are. Is the sender authenticated, and does the domain have a history?
• How you behave. How much you send, how fast volume changes, and how many messages bounce.
• How people react. Whether recipients reply, ignore, delete or mark you as spam.

Cold email starts at a disadvantage on all 3. The domain is usually new, the recipient did not ask for the message and nobody has replied yet. That is why the setup matters more for outbound than for any other email you send.

The 2024 Gmail and Yahoo Sender Rules

Since February 2024, Gmail and Yahoo require bulk senders to meet a set of rules. They are written for bulk senders, but mailbox providers judge every sender on the same signals, so treat them as the floor for cold email.

The complaint rule is the one that catches cold senders. A small inbox with modest volume only needs a handful of spam reports to cross the line. Good targeting and an easy way to say "not interested" are the best protection.

SPF, DKIM and DMARC in Plain Words

These 3 records live in your domain's DNS settings. Together they prove to a mailbox provider that you are who you say you are.

• SPF (Sender Policy Framework) is a list of the servers allowed to send mail for your domain. If a message comes from a server not on the list, it looks forged.
• DKIM (DomainKeys Identified Mail) adds a digital signature to every message. The receiving server checks it against a public key in your DNS to confirm the message was not changed on the way.
• DMARC (Domain-based Message Authentication, Reporting and Conformance) tells receiving servers what to do when SPF or DKIM fails, and sends you reports about who is sending as your domain.

For a new sending domain, start DMARC in monitoring mode, read the reports for a few weeks, then tighten the policy once you are sure every legitimate sender passes. Check all 3 with a free DNS lookup tool before the first warmup email goes out.

Separate Sending Domains

Never send cold email from your main company domain. That domain carries your invoices, proposals, support replies and every conversation with existing customers. If cold sends damage its reputation, all of that mail starts landing in spam too.

Instead, buy separate sending domains that are close variations of your brand, and point each one at your main website with a redirect. A buyer who checks the domain lands on your real site.

Here is the full stack, from the domain at the bottom to the message at the top.

Fig. 1The 5 layers of deliverability

1. Domains

   Separate sending domains, never the main one. Each redirects to your real site.

   Secondary domainsRedirectsAge
2. Authentication

   SPF, DKIM and DMARC set on every sending domain, checked before the first warmup email.

   SPFDKIMDMARC
3. Inboxes and warmup

   2 to 3 inboxes per domain, warmed for 2 to 4 weeks, then about 40 sends a day each.

   WarmupDaily capsRotation
4. List quality

   Every address verified before it enters a sequence. Bounces and opt-outs removed at once.

   VerificationSuppression
5. Content and behavior

   Plain text, few links, no heavy tracking, real replies that create two-way conversations.

   Plain textOpt-outReplies

Our own setup at Oriel follows this exactly: 12 inboxes across 5 sending domains, and our main company domain sends nothing. Spreading volume across domains also limits the damage if one runs into trouble. You retire that domain and the rest keep sending. The math for how many you need is in How Many Domains and Inboxes Do You Need for Cold Email?.

Warmup and Safe Volume Per Inbox

A brand new inbox has no history. If it starts sending 100 cold emails on day 1, providers treat it as a likely spammer, because that is what spammers do.

Warmup builds history gradually. Warmup tools send and reply to emails between real inboxes, so your new inbox shows normal two-way behavior at slowly rising volume. It takes about 2 to 4 weeks before an inbox can send at volume.

After warmup, we plan on about 40 cold emails a day per inbox. That number is the most important one in this guide, because it changes how you think about scale. Volume comes from more inboxes, not more emails per inbox. Our 12 inboxes send about 480 emails a day at full warmup, which is 40 each.

A few habits keep warmed inboxes healthy:

• Keep warmup running alongside real sends. It keeps a steady base of positive engagement.
• Ramp real sends slowly. Start well under the daily cap and rise over a couple of weeks.
• Spread sends across the day rather than releasing a batch at 9am.
• Cap every inbox in your sending tool, so a mistake in one campaign cannot spike volume.

An example warmup schedule

Here is the shape of a cautious ramp for one new inbox. The exact numbers depend on your warmup tool and provider, so treat this as an illustration of the pattern.

• Week 1. Warmup only, starting with a handful of warmup emails a day and rising slowly. No cold sends.
• Week 2. Warmup continues at a higher daily number. Authentication and placement checked with a seed test.
• Week 3. First cold sends at a small fraction of the daily cap, to the best-verified contacts on the list.
• Week 4 onward. Cold sends rise toward about 40 a day if replies and placement hold. Warmup keeps running.

The point of the slow ramp is that every step looks normal to a mailbox provider. Nothing about the inbox's behavior changes suddenly, so nothing triggers a closer look.

List Verification and Hygiene

Many deliverability problems start with the list, not the copy. Every address that bounces tells the provider you are mailing people you do not know, and a burst of bounces can damage a new domain in a day.

Verify every address before it enters a sequence:

• Run each address through a verification tool. Remove invalid addresses and treat "catch-all" or "unknown" results as higher risk, sent at lower volume if at all.
• Re-verify old data. Contact data decays as people change jobs. A list built 6 months ago needs checking again. The contact data refresh play shows how to keep records current.
• Keep a suppression list. Anyone who bounces, opts out or replies "not interested" never gets another cold message from any inbox.
• Watch new data sources. When a list from a new provider goes out, watch bounces closely for the first few hundred sends.

Set a pause threshold for bounces and stick to it. If a campaign's hard bounces rise above a low single-digit percentage, stop and fix the list before sending more. Building lists that hold up is covered in How to Build a B2B Outbound List That Is Not 80% Wrong.

Monitoring Placement

You cannot fix what you cannot see. Watch these 4 things every week:

• Reply rate by inbox and by domain. A sudden drop on one domain while the others hold steady is the earliest warning you will get.
• Placement tests. Send to a set of seed addresses across Gmail, Outlook and other providers and check where the mail lands.
• Google Postmaster Tools. It shows domain reputation and spam rate for mail sent to Gmail users, once you send enough volume to register.
• Bounce and complaint counts. Tracked per campaign, so you can tie a spike to a list or a message.

Open rates are a weak signal. Privacy features in many mail apps load tracking pixels automatically, and the pixel itself can hurt placement. Many outbound teams turn open tracking off and judge by replies.

DMARC reports are worth a look too. They list every server sending mail as your domain, which catches a forgotten tool or a misconfigured inbox before it causes a problem. When replies do come in, handle them fast: a quick answer to an interested buyer creates exactly the two-way conversation providers reward. How to Handle Cold Email Replies covers the triage.

What to Do When Placement Drops

Placement drops happen to every sender eventually. What matters is the response. Pushing more volume through a struggling domain usually makes the problem worse.

Fig. 2What to do when placement drops

1. 01Pause the domain

   Stop cold sends on the affected domain. Keep warmup running.

2. 02Check authentication

   SPF, DKIM and DMARC still passing? DNS changes break them quietly.

3. 03Check the list

   Recent bounce spike or a new data source? Re-verify.

4. 04Cut volume and content

   Lower daily caps, strip links and tracking, simplify the copy.

5. 05Test and resume

   Seed placement test. Resume slowly, or retire the domain.

Work through the causes in order of likelihood:

1. Authentication. A DNS change, a new tool or an expired record can break SPF or DKIM without anyone noticing.
2. List quality. A new data source or an old list often explains a sudden spike in bounces.
3. Volume. A campaign that raised daily caps too fast, or several campaigns stacking on one inbox.
4. Content. Several links, images, link shorteners, heavy tracking or the same template sent thousands of times.

If a domain does not recover after a rest and a slow restart, retire it. Buy a new one, warm it and move on. That is the reason the setup uses several domains from the start.

Mistakes that commonly cause drops

• Sending from a domain bought last week. Skipping warmup to hit a launch date is a common way to burn a domain.
• One big inbox instead of several small ones. Pushing 200 emails a day through one inbox concentrates all the risk in one place.
• Mixing cold and transactional mail. Running cold sends from the domain that sends invoices or password resets puts the business mail at risk.
• Ignoring opt-outs. Mailing someone who already asked to stop is the fastest route to a spam complaint.
• Reading open rates as health. Opens can look fine while replies collapse, because automatic pixel loading inflates them.

Content still matters after the infrastructure is right. Plain, short, specific messages earn replies, and replies are the strongest positive signal a provider sees. How to Test Cold Email Copy covers how to improve the message without risking the domain.

FAQs

Protect Your Sending With Oriel

Oriel sets up and runs cold email infrastructure for B2B companies above $100k/month in revenue: separate sending domains, authentication, warmed inboxes, verified lists and daily monitoring, all in accounts you own. Your main domain never sends a cold email, and you approve every list and first message before it goes out.

On a 30-minute call, tell us how you send today and what volume you need. We will tell you how many domains and inboxes that takes, how long warmup will run and what we would check first in your current setup. If you are not ready for this yet, we will tell you that too.