Cold Email Deliverability Checklist: 17 Things to Check
Cold Email Deliverability Checklist — 17 Things to Check Before Sending
Your cold email campaign is ready. You've written compelling copy, identified your targets, set up your sequences. But if your emails land in spam, none of it matters.
Here's the complete checklist for cold email deliverability. Check every item before hitting send.
Domain Setup and Authentication
☐ 1. Your Domain Is At Least 30 Days Old
Why it matters: Brand new domains sending cold emails is the #1 sign of a spammer. ISPs don't trust domains registered yesterday.
How to check:
whois yourdomain.com | grep "Creation Date"
What to do if your domain is too new:
- Wait. Seriously. Register the domain and let it age for 30 days minimum before cold emailing.
- Use the domain for regular business in the meantime (website, receiving emails).
- Consider using an established subdomain of a mature domain.
Best practice: Use a domain that's 60+ days old for cold outreach.
Test your domain setup → checkyouremail.online
☐ 2. SPF Record Is Configured Correctly
Why it matters: Without SPF, receiving servers can't verify you're authorized to send from this domain.
How to check:
nslookup -type=TXT yourdomain.com
Look for a record starting with v=spf1.
What the record should look like:
If sending from Google Workspace:
v=spf1 include:_spf.google.com -all
If sending from your own server:
v=spf1 ip4:203.0.113.10 -all
If using multiple services:
v=spf1 include:_spf.google.com include:sendgrid.net -all
What to fix:
- Add SPF record if missing
- Include all services you send from
- End with
-all(hard fail) not~all(soft fail) - Keep under 10 DNS lookups
☐ 3. DKIM Signing Is Enabled
Why it matters: DKIM proves your emails haven't been tampered with and actually came from your domain.
How to check:
Send yourself a test email. View full headers. Look for:
DKIM-Signature: v=1; a=rsa-sha256; d=yourdomain.com
And in authentication results:
dkim=pass
What to fix:
For Google Workspace:
1. Admin Console → Apps → Gmail → Authenticate email
2. Generate new record
3. Add TXT record to DNS at google._domainkey.yourdomain.com
For other providers, follow their DKIM setup documentation.
☐ 4. DMARC Policy Is Set (Minimum p=none)
Why it matters: DMARC ties SPF and DKIM together. Gmail and Yahoo require it for bulk senders.
How to check:
nslookup -type=TXT _dmarc.yourdomain.com
What the record should look like:
Start with monitoring:
v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com
After 2 weeks of clean reports:
v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com; pct=100
What to fix:
- Add DMARC record at
_dmarc.yourdomain.com - Include valid email for reports (
rua=mailto:your@email.com) - Start with
p=none, upgrade top=quarantineafter monitoring
Test authentication → checkyouremail.online
☐ 5. Domain Warmup Is Complete (If Domain Is New)
Why it matters: Sending high volume immediately from a new domain gets you spam filtered.
Warmup schedule:
- Week 1: 50 emails/day
- Week 2: 100 emails/day
- Week 3: 250 emails/day
- Week 4: 500 emails/day
- Week 5: 1,000 emails/day
- Week 6+: Scale to your target volume
During warmup:
- Send to engaged, high-quality recipients first
- Keep open rates above 30%
- Respond to replies immediately
- No spam complaints
- Consistent daily volume (don't skip days)
What to fix:
- If you haven't warmed up, start now with low volume
- If you rushed warmup, reduce volume and rebuild slowly
☐ 6. Your Domain Isn't on Any Blacklists
Why it matters: Blacklisted domains get automatically filtered to spam or rejected entirely.
How to check:
Major blacklists to monitor:
- Spamhaus (spamhaus.org/lookup)
- Barracuda (barracudacentral.org/lookups)
- SORBS (sorbs.net/lookup)
Or use comprehensive checkers like checkyouremail.online.
What to fix:
- If listed, follow the blacklist's removal process
- Fix the root cause before requesting removal
- Wait 24-48 hours after fixing before requesting removal
List Quality and Targeting
☐ 7. You're Not Using Purchased or Scraped Lists
Why it matters: Bought lists contain spam traps and unengaged recipients. You'll get blacklisted within days.
What qualifies as a good list:
- People who match your ICP (Ideal Customer Profile)
- Verified email addresses
- Clear reason why they'd care about your message
- Company email addresses (not personal Gmail/Yahoo)
- Decision-makers, not generic role addresses
What to avoid:
- Purchased lists ("10,000 qualified leads")
- Mass-scraped LinkedIn emails
- Generic role addresses (info@, sales@, contact@)
- Personal email addresses for B2B outreach
- Anyone you can't articulate why you're reaching out to them
What to fix:
- Delete purchased lists
- Build targeted lists manually or using proper research tools
- Verify emails before adding to campaign
☐ 8. Email Addresses Are Verified
Why it matters: High bounce rates (20%+) signal poor list hygiene and tank your sender reputation.
How to verify:
Use email verification tools:
- ZeroBounce
- NeverBounce
- EmailListVerify
- Hunter.io email verifier
What they check:
- Email syntax validity
- Domain exists and accepts mail
- Mailbox exists
- Not a known spam trap
- Not a disposable email
What to fix:
- Verify every email before adding to campaign
- Remove any that show as invalid or risky
- Set up ongoing verification for new additions
☐ 9. Removed Role Addresses and Catch-Alls
Why it matters: Role addresses (info@, support@) and catch-all addresses rarely engage and often mark as spam.
What to remove:
Role addresses:
- info@company.com
- sales@company.com
- support@company.com
- contact@company.com
- admin@company.com
- hello@company.com
Why they're problematic:
- Read by multiple people or no one
- Low engagement rates
- Often forward to spam
- Not decision-makers
What to keep:
- Personal email addresses: john.smith@company.com
- Executive addresses: ceo@company.com, founder@company.com
- Department head addresses if you know the person
What to fix:
- Filter out role addresses from your list
- Research actual decision-maker names and emails
☐ 10. Personalization Goes Beyond First Name
Why it matters: {{FirstName}} personalization fools no one. Real personalization improves response and reduces spam reports.
Weak personalization:
Hi {{FirstName}},I noticed your company needs help with email deliverability...
Strong personalization:
Hi John,I saw TechCorp recently launched the new customer portal.
Quick question about how you're handling email notifications
for the 10,000+ daily active users...
Variables to use:
- First name (obviously)
- Company name
- Recent company news or launches
- Specific pain point relevant to their role
- Mutual connection or commonality
- Recent content they published
What to fix:
- Add company-specific research to each email
- Reference something specific about them
- Make it clear why you're reaching out to them specifically
Check your email content → checkyouremail.online
Email Content and Structure
☐ 11. Subject Line Is Under 50 Characters and Not Salesy
Why it matters: Subject lines affect both open rates and spam filtering.
Bad subject lines:
- "🚨 URGENT: Free Demo - Limited Time Offer!!!"
- "RE: Your Email Deliverability Problems"
- "Quick question {{FirstName}}"
- "Partnership opportunity"
Good subject lines:
- "Quick question about TechCorp's new portal"
- "Saw your post on email authentication"
- "Mutual connection suggested I reach out"
- "Thoughts on your Sender Score?"
Best practices:
- Under 50 characters
- Specific, not generic
- No emojis (for B2B cold email)
- No "RE:" or "FWD:" tricks
- No ALL CAPS
- One exclamation mark maximum
What to fix:
- Rewrite generic subject lines
- Remove spam trigger words
- Make it specific to the recipient
- Test subject lines before large sends
☐ 12. Email Body Is 50-150 Words
Why it matters: Long emails get ignored. Short emails get read and have higher response rates.
Ideal cold email length: 50-150 words
Structure: 1. Personal greeting (Hi John,) 2. Reason for reaching out (1 sentence) 3. Brief value proposition (2-3 sentences) 4. Simple ask (1 sentence) 5. Sign-off
Example (118 words):
Hi John,I saw TechCorp launched the new customer portal last week—congrats on that.
Quick question: How are you handling email deliverability for the password
reset and notification emails? We work with SaaS companies at your scale and
noticed a common issue where transactional emails hit spam during high-volume
periods.
We built a tool that specifically solves this for customer portal notifications.
Would it make sense to show you how it works? I can record a 3-minute video
for your team.
Let me know if you're interested.
Best,
Sarah
What to fix:
- Cut your email to under 150 words
- Remove unnecessary paragraphs
- Get to the point faster
- Single, clear call-to-action
☐ 13. Text-to-Image Ratio Above 80/20
Why it matters: Image-heavy emails look like marketing and get filtered.
For cold email:
- Avoid images entirely if possible
- Plain text emails perform best
- If you must include an image, keep it small (email signature logo)
- Never use large header images or graphics
What to fix:
- Remove all images from cold emails
- Use plain text format
- Save designed emails for newsletter, not cold outreach
☐ 14. 2 or Fewer Links Per Email
Why it matters: Multiple links signal marketing content and reduce trust.
Link best practices:
- 0-2 links maximum
- Link to your own domain (not tracking domains)
- No shortened URLs (bit.ly, tinyurl)
- No "Unsubscribe" link needed for true 1-to-1 cold email
- Links should be contextual, not call-to-action buttons
What to fix:
- Remove unnecessary links
- Use your actual domain for links
- Disable click tracking if possible
- Consider no links at all—ask for a reply instead
Test your email content → checkyouremail.online
☐ 15. Sender Address and Reply-To Match
Why it matters: Mismatched addresses look suspicious and hurt deliverability.
Correct setup:
- From: sarah@yourcompany.com
- Reply-To: sarah@yourcompany.com
Incorrect setup:
- From: sarah@yourcompany.com
- Reply-To: noreply@yourcompany.com
What to fix:
- Set reply-to address to match from address
- Never use noreply@ for cold outreach
- Use a real person's email address
- Make sure the address can receive replies
Sending Behavior and Volume
☐ 16. Starting Volume Is 50 Emails/Day or Less
Why it matters: Volume spikes trigger spam filters. Start small and ramp gradually.
Recommended ramp:
New domain/new sending:
- Days 1-7: 50 emails/day
- Days 8-14: 100 emails/day
- Days 15-21: 200 emails/day
- Days 22-30: 400 emails/day
- Month 2: 800 emails/day
- Month 3+: 1,500+ emails/day
Established domain:
- Start at 200/day
- Double every week until you hit target volume
What to fix:
- If you're planning to send 5,000 emails tomorrow, don't
- Ramp volume gradually over 4-6 weeks
- Monitor engagement at each stage
- Slow down if spam complaints or bounces increase
☐ 17. Consistent Daily Sending (No Large Gaps)
Why it matters: Inconsistent sending patterns look suspicious. Daily consistency builds reputation.
Good pattern:
- 100 emails every Monday-Friday
- Same time each day
- No skipped days
Bad pattern:
- 0 emails for 3 weeks
- Then 5,000 emails in one day
- Then 0 for another week
What to fix:
- Send consistent volume daily (or at least 5 days/week)
- Don't save up sends for batch blasts
- If you need to pause, ramp back up slowly when resuming
Monitoring and Engagement
☐ Bonus: Engagement Monitoring Is Set Up
Why it matters: You need to see what's working and catch issues early.
What to monitor:
Delivery metrics:
- Delivery rate (should be 95%+)
- Bounce rate (should be under 5%)
- Spam complaint rate (must be under 0.1%)
Engagement metrics:
- Open rate (aim for 30%+ for cold email)
- Reply rate (aim for 5%+ for cold email)
- Positive reply rate
- Unsubscribe/opt-out rate
Reputation metrics:
- Sender Score (check at senderscore.org)
- Blacklist status
- Gmail Postmaster reputation
What to fix:
- Set up tracking before launching campaign
- Check metrics daily during first week
- Pause campaign if spam complaints exceed 0.1%
- Investigate immediately if bounce rate spikes
Test your complete setup → checkyouremail.online
Red Flags That Mean Don't Send Yet
Stop and fix these issues before sending:
🚩 Sender Score below 70 Your reputation is damaged. Rebuild before cold outreach.
🚩 Bounce rate above 10% on test sends Your list quality is terrible. Verify emails first.
🚩 Domain registered less than 30 days ago Wait. Age your domain with regular use.
🚩 No SPF, DKIM, or DMARC Set up authentication first. This is non-negotiable.
🚩 You're on any major blacklist Get delisted and fix the cause before sending.
🚩 You bought the email list Delete it. Build a proper targeted list.
🚩 Planning to send 1,000+ emails on day 1 Start with 50/day and ramp gradually.
The Pre-Send Test Protocol
Before launching any cold email campaign:
Day -7:
- [ ] Set up domain and authentication
- [ ] Build and verify email list
- [ ] Write and review email copy
Day -3:
- [ ] Send 10 test emails to your own accounts
- [ ] Check where they land (inbox or spam)
- [ ] Test at checkyouremail.online
- [ ] Verify all links work
Day -1:
- [ ] Send 20 emails to seed list across providers
- [ ] Monitor delivery and engagement
- [ ] Fix any issues discovered
Day 1:
- [ ] Send first 50 emails
- [ ] Monitor bounces and engagement closely
- [ ] Respond to any replies immediately
Week 1:
- [ ] Keep volume at 50/day
- [ ] Track all metrics
- [ ] Adjust copy based on responses
- [ ] Remove hard bounces immediately
Week 2+:
- [ ] Gradually increase volume if metrics are healthy
- [ ] Continue monitoring
- [ ] Iterate on messaging
When to Stop and Reassess
Pause your campaign immediately if:
- Bounce rate exceeds 10%
- Spam complaint rate exceeds 0.1%
- Open rate below 15%
- You get added to a blacklist
- Multiple "stop emailing me" replies
- Sender Score drops below 70
Fix the issue before resuming. Continuing to send when metrics are bad only makes things worse.
The Complete Pre-Launch Checklist
Domain & Authentication:
- [ ] Domain is 30+ days old
- [ ] SPF record configured
- [ ] DKIM signing enabled
- [ ] DMARC policy set
- [ ] Domain warmed up (if new)
- [ ] Not on any blacklists
List Quality:
- [ ] No purchased/scraped lists
- [ ] Email addresses verified
- [ ] Role addresses removed
- [ ] Personalization beyond first name
Email Content:
- [ ] Subject line under 50 characters
- [ ] Body is 50-150 words
- [ ] Text-only or minimal images
- [ ] 2 or fewer links
- [ ] Sender and reply-to match
Sending Behavior:
- [ ] Starting with 50/day or less
- [ ] Consistent daily sending planned
- [ ] Engagement monitoring set up
- [ ] Test sends completed
- [ ] All metrics tracking properly
Cold email deliverability isn't luck. It's process. Check every item on this list before sending, and your emails will reach the inbox.
Run a free deliverability check right now at checkyouremail.online — no signup, results in 30 seconds.