Send from separate, authenticated domains (SPF, DKIM and DMARC on every one). Warm each new mailbox for at least 2 weeks, 4 on a brand-new domain. Verify every list. Write short plain-text emails with one ask and no tracking. Send 10 to 20 cold emails per mailbox per day (15 is the default), keep each mailbox at 50 or fewer emails a day including warming, and scale by adding mailboxes rather than pushing each one harder. Keep bounces under 2% and spam complaints under 0.1%, and replace a burned domain instead of nursing it.
Cold email deliverability comes down to a handful of fundamentals done consistently. This guide covers them in the order you set them up, then lists the mistakes we see most often. Numbers come either from mailbox providers' own published rules or from named public sources; where something is our own guidance, we say so.
Step 1: Infrastructure and authentication
Since February 2024, Gmail and Yahoo require every sender to authenticate with SPF or DKIM, and bulk senders to publish DMARC with the From domain aligned (Google's sender guidelines, Yahoo's sender best practices). Outlook.com added the same requirement for high-volume senders in May 2025. Cold email rarely reaches the bulk thresholds per domain, but meeting the bulk rules anyway removes an easy reason to filter you.
- SPF lists the servers allowed to send for your domain.
- DKIM signs each message so the receiver can check it came from your domain and wasn't altered.
- DMARC ties the two to the visible From address and tells receivers what to do with mail that fails.
Never send cold email from your main business domain. Use separate sending domains that relate to your brand (getacme.com, acmehq.com) so a problem on a sending domain can't reach your everyday mail. Plan about 5 mailboxes per domain. The cold email calculator turns a daily target into mailboxes and domains, and how many domains you need explains the math.
On Winnr, every domain you buy or connect with nameservers gets SPF, DKIM and DMARC published for you, with DMARC at p=reject by default. Mailboxes are SMTP/IMAP accounts on Winnr's own sending infrastructure; SMTP for cold email explains how that compares with Google Workspace and Microsoft 365 inboxes.
Step 2: Warming
A new mailbox has no sending history, so its first messages get extra caution. Warming gives it a history first: a gradual ramp of realistic emails exchanged with a warming network, with replies, before any cold email goes out.
- Duration: at least 2 weeks before cold sending, and 4 weeks on a brand-new domain.
- Volume: ramp up gradually to around 20 warmup emails a day. Faster ramps suit older domains with a clean history; slower ramps suit brand-new ones.
- One warmup per mailbox. Don't run your infrastructure provider's warming and a sequencer's warmup pool on the same mailbox at once. You would double the volume without doubling the benefit.
- After the initial period you can keep warming on at a lower volume as maintenance, or turn it off once real campaigns are running. Either is fine; just keep the total per mailbox (cold plus warming) at 50 a day or less.
Winnr's built-in warming does this from the same dashboard as your domains: pick mailboxes, set a daily target (up to 20) and a ramp speed (Slow, Normal or Fast), for $0.60 per mailbox per month. Some sequencers also include a warmup pool; if you use one of those instead, the same rules apply. If you can't wait 2 to 4 weeks, pre-warmed mailboxes on aged domains are ready the day you buy them.
One caution on reading warming results: a warming health score measures how warmup mail fared inside the warming network. It is not inbox placement at Gmail or Microsoft. Use a seed test for that (Step 7).
Step 3: A clean, targeted list
No technical setup rescues a bad list. Sending to the wrong people produces no replies and more complaints, and sending to invalid addresses produces bounces.
- Define your ideal customer profile first: industry, company size, role, region, and the trigger that makes your offer relevant now.
- Prefer a small, accurate list. A few hundred well-matched prospects tell you faster whether an offer works than thousands of loose matches, and they protect your domains while you learn.
- Verify every address with an email verification service before it goes into a campaign, and treat catch-all domains with caution.
- Re-verify lists you haven't used for a while. Contact data decays as people change jobs.
- Keep bounces under 2%. Instantly's Cold Email Benchmark Report 2026 gives the same threshold. Above it, pause and clean the list.
Step 4: Content
Every email should read like a one-to-one note from a real person.
- Plain text. No templates, images or heavy formatting.
- Short. In Instantly's 2026 benchmark report, the best-performing first emails were under 80 words.
- One clear ask. A simple question ("Worth a 15-minute call next week?") beats a menu of options. Make the ask fit the stage: small in the first email, bigger once someone replies.
- A subject line that is specific and honest. Short, no clickbait, nothing that misrepresents the message.
- No links in the first email if you can avoid them, never link shorteners, and no attachments.
- Turn off open and click tracking. Tracking pixels and rewritten links are easy for filters to spot, and privacy features make open rates unreliable anyway. Judge campaigns on replies.
- Vary the wording. Spintax creates natural variation so you don't send thousands of identical messages.
- Lead with relevance to the recipient, not with your product's features. Reference something specific to their company or role.
Run your copy through the free spam word checker before launch.
Step 5: Follow-ups
Follow-ups matter, but the first email matters more than many guides admit. Instantly's 2026 report, based on its platform's 2025 sending, found 58% of replies came from the first email and 42% from follow-ups, and that sequences of 4 to 7 steps performed best.
- Plan 3 to 6 follow-ups after the first email.
- Space them out: 2 to 4 days early in the sequence, widening to a week later. Never daily.
- Add something each time: a new angle, a relevant example, a short question. "Just bumping this" adds nothing.
- Stop when someone declines or asks to be removed, and honor opt-outs immediately. Yahoo requires bulk senders to honor unsubscribes within 2 days.
Step 6: Volume
This is our own guidance for Winnr mailboxes, and it is where most deliverability damage happens:
| Phase | Cold emails per mailbox per day | Notes |
|---|---|---|
| Warming (weeks 1 to 2, or 1 to 4 on a brand-new domain) | 0 | Warming only |
| First week of cold sending | 5 to 10 | Watch bounces and replies daily |
| Second week | 10 to 15 | Hold if bounces or complaints rise |
| Steady state | 10 to 20 (15 default) | 50 or fewer in total per mailbox, including warming |
- Scale horizontally. Ten mailboxes at 15 a day are far safer than three at 50. Add mailboxes and domains for more volume.
- No spikes. Raise volume gradually, and don't make up for a quiet Friday by doubling Monday.
- Spread sends across business hours with random gaps between messages.
For the hard limits each provider enforces, see cold email sending limits by provider.
Step 7: Monitoring
- Bounce rate above 2%: pause the campaign and clean the list.
- Spam complaints: Google asks senders to stay under 0.1% and never reach 0.3% (Google's FAQ). Any complaint spike means stop and review targeting.
- Reply rate dropping with unchanged copy and list: run a seed test. Get test addresses at the providers your prospects use, send your real copy, and check which folder it lands in.
- Warming health dropping: lower cold volume on those mailboxes until it recovers.
- Blocklists: if placement collapses, look the domain up on the blocklist operator's own site (Spamhaus's domain checker, SURBL), one domain at a time.
Which deliverability numbers to track covers each metric and its source in more detail.
Step 8: Recovery
- Pause cold sending on the affected mailboxes the moment you see a problem.
- Find the cause: a bad list, a volume jump, a content change, or broken authentication. A replacement domain sending the same thing to the same list will burn too.
- Replace rather than wait. A domain on a blocklist may never come off, and delisting is never guaranteed. Moving campaigns to fresh or pre-warmed domains gets you sending again while you fix the cause.
The full process is in how to recover a burned domain. If a Google Workspace account was suspended, see what to do when Google Workspace suspends you.
The 10 most common cold email mistakes
- Sending from the main business domain. One bad campaign can then affect invoices, support and every other email your company sends.
- Skipping or rushing warming. Launching cold campaigns from mailboxes with no history is the fastest way to land in spam.
- Unverified or bought lists. Invalid addresses cause bounces and spam traps; people who never fit your offer cause complaints.
- Too much volume per mailbox. Pushing 50 or more cold emails through each mailbox instead of adding mailboxes.
- Volume spikes. Going from 10 a day to 40 overnight, or sending a week's volume in one morning.
- Generic templates. First-name-only personalization and the same message to every segment read as mass email to people and filters alike.
- Tracking, links and attachments in the first email. Each one adds risk for little benefit.
- Weak or multiple asks. Asking for a 30-minute demo in the first email, or offering three different next steps.
- No follow-ups, or empty ones. Stopping after one email, or sending "just following up" with nothing new.
- Not monitoring. Running campaigns without watching bounces, complaints and replies, so a problem is found weeks late.
Frequently Asked Questions
How many cold emails can I send per day per mailbox?
Winnr recommends 10 to 20 cold emails per mailbox per day, 15 by default, with 50 or fewer emails in total per mailbox once warming is counted. 50 mailboxes on Winnr's Startup plan send roughly 500 to 1,000 cold emails a day. Get more volume by adding mailboxes, not by pushing each one harder.
How long should I warm a new mailbox?
At least 2 weeks before cold sending, and 4 weeks on a brand-new domain. Start cold sending at the bottom of the 10 to 20 range afterwards. Pre-warmed mailboxes skip the wait because their warming is already done.
Do I need a separate warmup tool?
Not on Winnr. Warming is built in at $0.60 per mailbox per month. If you prefer your sequencer's warmup pool, that works too, but use one warmup per mailbox, not two.
Should I use open tracking for cold email?
No. Tracking pixels and rewritten links are easy for filters to detect, and privacy features inflate open rates. Turn tracking off and judge campaigns on replies.
What bounce and complaint rates should I stay under?
Keep bounces under 2% and spam complaints under 0.1%. Google says the spam rate must never reach 0.3%. Above those levels, pause the campaign and fix the list or targeting.
What should I do if a domain gets blocklisted?
Pause it, confirm the listing on the operator's own site, move campaigns to replacement domains and fix the cause. Delisting is never guaranteed, so don't wait on it.
The bottom line
The teams that do well with cold email aren't the ones with the cleverest subject lines. They nail the basics every time: separate authenticated domains, warmed mailboxes, verified lists, short relevant copy, modest volume per mailbox, and fast reactions when a number moves. Winnr handles the infrastructure part: 50 authenticated email accounts for $69/mo or 200 for $189/mo, built-in warming, and exports to Instantly, Smartlead, EmailBison and 20+ other sending tools. See Winnr pricing.