Why Your Cold Emails Land in Spam (And How to Fix It)

You built a good list, wrote a decent message, sent 500 emails, and got two replies. Before rewriting the copy, check whether anyone actually saw it. Deliverability problems look exactly like bad copy from your side of the screen: silence.

This is the checklist, in the order that matters.

1. Authenticate the sending domain#

Three DNS records tell receiving servers you are who you claim to be. Without them, modern providers treat your mail as suspicious by default, and the major inbox providers now effectively require them for bulk senders.

SPF lists the servers allowed to send as your domain. One TXT record, and it must include whatever tool you send through.

DKIM cryptographically signs your messages so the recipient can verify nothing was altered in transit. Your sending tool gives you the record to publish.

DMARC tells receivers what to do when SPF or DKIM fails, and where to send reports. Start with p=none to observe without affecting delivery, then tighten once the reports are clean.

If you skip this section, nothing else on the list will save you.

2. Do not send cold email from your main domain#

If yourcompany.com is where your customers, invoices and support conversations live, do not use it for cold outreach. A reputation problem there is not just a marketing setback — it is your business email going down.

Buy a similar domain for outreach: yourcompany.co, getyourcompany.com, yourcompanyhq.com. Set it up fully, point it at a real page, and authenticate it. If it burns, you buy another one and your actual business is untouched.

3. Warm the domain up before you use it#

A brand-new domain sending 300 messages on day one is the clearest possible spam signal. Real businesses do not start that way.

Warming means building a sending history gradually — a handful of messages the first days, increasing over several weeks, with replies coming back. Automated warm-up services do this by exchanging mail between accounts in a network. They help, but nothing beats genuine conversations.

Give it three to four weeks. This is the step people skip, and it is the one that most reliably ruins the rest.

4. Clean the list before sending#

Every message to a dead address is counted against you. Providers watch bounce rates closely, and a high rate marks you as someone working from a purchased list.

Keep hard bounces under 3%. Under 2% is comfortable.

That means verifying addresses before sending, not learning from the bounces. Verification happens in layers: syntax, then whether the domain resolves and accepts mail at all, then — where the receiving server answers honestly — whether the specific mailbox exists. Many large providers accept everything and discard later, so treat a "valid" from any tool as a strong signal rather than a guarantee.

Also weigh role addresses carefully. info@ and contact@ are real and often read by the owner at a small business, but they attract more spam complaints at larger ones. They are worth sending to; they are not worth sending to carelessly.

5. Slow down#

Volume and speed both matter. A human does not send 500 identical messages in four minutes.

• Ramp gradually rather than jumping to your target volume.
• Spread sends across working hours instead of firing them in one burst.
• Use several sending accounts at moderate volume rather than one at high volume.
• Keep the daily number per mailbox modest — a few dozen, not hundreds.

6. Write like a person#

Spam filters read content too, and the patterns they penalise are the same ones that make readers ignore you.

Cut the link count. One link, at most. Zero in the first message is better.

No images or tracking pixels in a cold first touch. They signal bulk mail and add nothing.

Skip the marketing vocabulary. Guarantee, risk-free, act now, limited time, 100% — these read as advertising to both filters and humans.

Keep it short. Under 120 words. Long cold emails do not get read, and length correlates with spam scoring.

Personalise on something real. Not Hi {{first_name}} — that is table stakes. Reference something specific to that business that proves you looked. This is where a good lead list pays off: if your data includes the category, the city and the website, you have something concrete to open with.

7. Make replies possible#

Reply rate is one of the strongest positive signals available. Ask a small question that is easy to answer, and make sure replies land somewhere a human reads.

Send from a real, monitored mailbox. Never noreply@.

8. Watch the numbers that matter#

Metric	Healthy	Investigate
Hard bounce rate	under 2%	over 3%
Spam complaints	under 0.1%	over 0.3%
Reply rate	5–15%	under 2%
Open rate	40–60%	under 20%

Open tracking is increasingly unreliable — privacy features inflate and suppress it in different ways — so treat opens as a rough trend, and replies as the truth.

The order to fix things in#

If you are already in trouble, work top to bottom:

1. Stop sending.
2. Verify authentication is correct.
3. Clean the list properly.
4. If the domain is badly burned, move to a fresh one and warm it.
5. Restart at low volume with better-targeted, shorter messages.

Deliverability is not a trick you apply once. It is the accumulated result of sending relevant mail to addresses that exist, at a pace that looks human.

---

GoLeadX verifies every address before it reaches your CSV — syntax, MX and optionally a live SMTP check — and grades each one so you can send only to what is deliverable. Try a search.

Further reading#

The three questions this guide raises most often have their own answers: which mailbox setup survives cold sending is covered in cold email infrastructure, what the rejection messages actually mean is in hard bounce vs soft bounce, and the message itself is in cold email templates that get replies.

FAQ#

Why do my cold emails go to spam even with SPF and DKIM set up?#

Authentication gets you considered, not delivered. Once the records are correct, placement is decided by sending history, engagement and complaint rate. The usual causes at that point are a domain with no warm-up history, volume that ramped too fast, or a list poorly enough matched that people delete without reading — which providers measure.

How long does domain warm-up take?#

Three to four weeks for a new domain: a handful of messages a day at first, rising gradually, with real replies coming back. There is no way to compress it. A domain registered this week and sending three hundred messages tomorrow is the clearest spam signal there is.

How many cold emails can I send per day?#

Treat 30–50 a day per mailbox as the working ceiling after warm-up, and start well below it. For more volume, add mailboxes and domains rather than raising the per-mailbox number — the per-mailbox figure is what providers watch.

Does a spam complaint hurt more than a bounce?#

Yes. Complaint thresholds are far tighter — roughly 0.3%, or three per thousand — and a complaint is a person saying the mail should not have been sent. Bounces indicate a stale list; complaints indicate a badly targeted one, and providers weigh the second more heavily.

Should I use a subdomain or a separate domain for cold email?#

A separate registrable domain. A subdomain inherits some of the parent's reputation, which means a problem on it can affect the domain your invoices come from — and isolation is the entire reason for sending from somewhere else.

Do I need an unsubscribe link on a cold B2B email?#

Include an opt-out route in every message, whether or not your jurisdiction requires a formal unsubscribe link for B2B mail. A one-line "reply 'no' and I won't write again" satisfies most regimes, costs nothing, and prevents the complaint that would have cost you far more.