Cold email deliverability: the checklist that actually moves the needle

2026-10-21 · 8 min · by Yixiu Liu

Deliverability advice usually arrives as a list of forty tips with no ordering. This is the same material sorted by consequence: four layers, in the order that actually decides whether your message reaches an inbox.

Four layers of deliverability: authentication, list hygiene, volume shape, content — Fix top to bottom. Layer 4 cannot rescue layer 1.

Layer 1 — Authentication

Before a single message is judged on content, the receiving server asks whether you are allowed to send for that domain.

SPF lists the servers allowed to send for your domain. Keep it under ten DNS lookups or it fails silently.
DKIM signs the message. Without it, forwarding breaks and DMARC cannot align.
DMARC ties the two together and tells the world what to do with failures. Start at p=none with a reporting address, read the reports for two weeks, then move to quarantine. Going straight to reject on a domain you have not measured is how people lose their mail.

If you send from a @gmail.com address, Google handles all of this for you — which is one reason personal Gmail still delivers better than a hastily configured domain.

Layer 2 — List hygiene

Every invalid address you send to is a small negative signal, and the pattern of them is a large one.

Syntax. Cheap, instant, catches typos and scraped junk.
MX record. A domain with no mail exchanger cannot receive mail. This single check removes a surprising share of purchased lists.
Disposable and role addresses. info@, sales@, noreply@, plus the throwaway providers. Role addresses are not people.
Catch-all domains. Cannot be verified. Treat as risky, send last.
Spam traps. Recycled addresses that never opted in. An old list will contain them. If your bounce rate exceeds 2%, stop and clean before sending again.

Layer 3 — Volume shape

The same 500 emails can be fine or fatal depending on how they are spread.

Week	New mailbox	Warmed mailbox
1	20-30 / day	50-100 / day
2	40-60 / day	150-250 / day
3	80-120 / day	300-400 / day
4+	ramp toward your ceiling	ceiling, with hourly caps

Two rules that matter more than the table: keep an hourly cap (80/hour is a reasonable guard), and never send the whole list in one burst from a mailbox that has been idle for a month.

Layer 4 — Content

One ask per email. Multiple calls to action split attention and look like a newsletter.
Text that stands alone. If images are blocked — and they often are — the message must still make sense. Image-only mail is a spam signal.
Real unsubscribe and a physical address. Legal in the US and the EU, and the absence of it is a complaint magnet.
Restrained HTML. Heavy templates, tracking-heavy bodies and long redirect chains all cost you.
Subject lines that describe the mail. Curiosity gaps still work on humans and still hurt you with filters.

What to measure weekly

Metric	Healthy	Action if it drifts
Hard bounce	< 2%	Stop, clean the list, resume at half volume
Spam complaints	< 0.1%	Tighten targeting, add a real opt-out
Reply rate	Anything you can defend	The only metric a proxy cannot fake
Opens	Directional only	Never report to a client without the caveat

Where this shows up in the product: OutReach Pilot drops syntax-invalid, disposable and no-MX addresses before the first send, and keeps an hourly guard so a campaign cannot burst out of a warmed mailbox. The tracking side is covered in why your open rate is inflated.

Written by the maker of OutReach Pilot. The ramp numbers are a conservative starting point based on common provider guidance, not a guarantee; your sending history is the only reliable input.

← All posts · OutReach Pilot · Comparisons

Cold email deliverability: the checklist that actually moves the needle

Layer 1 — Authentication

Layer 2 — List hygiene

Layer 3 — Volume shape

Layer 4 — Content

What to measure weekly

Ship notes, not newsletters