Email Deliverability Guide: How to Stay Out of Spam in 2026
Bad deliverability kills outbound before it starts. This guide covers SPF, DKIM, DMARC, warm-up, volume limits, and the 2026 rules that changed everything.

Posted by
Related reading
How to Build a Lead Scoring Model in a Spreadsheet
You don't need expensive tools to score leads. This guide shows you how to build a practical lead scoring model in a spreadsheet you can start using today.
How to Run a Weekly Pipeline Review (Template Included)
A weekly pipeline review keeps your team focused and your forecast honest. Here's how to run one in 30 minutes, with a template you can copy.
How to Track Competitor Activity for Sales Intelligence
Knowing what your competitors are doing helps you time outreach and sharpen messaging. Here's how to track competitor activity without expensive tools.
You could have the best outbound sequences in the world, the most dialled-in ICP, the sharpest messaging — and none of it matters if your emails land in spam. Email deliverability is the foundation that everything else sits on. If your messages aren't reaching the inbox, you're spending money to talk to nobody.
And deliverability has gotten harder. Google and Yahoo rolled out strict new sender requirements in 2024, and the enforcement has only tightened since then. Microsoft followed with its own rules in 2025. By 2026, the bar for getting into someone's inbox is higher than it's ever been — especially for cold outbound.
This guide covers everything you need to know about email deliverability in 2026. Not theory — practical steps. Authentication setup, warm-up schedules, volume limits, content rules, monitoring tools, and the specific changes from the past two years that you need to know about. Whether you're starting from scratch or fixing a domain that's already in trouble, this will get you sorted.
Why This Matters for B2B Teams
Let's put some numbers to it. The average cold email open rate across B2B outbound is somewhere between 25% and 45%, depending on who you ask. But that assumes your emails actually reach the inbox. If your deliverability rate is 70% (which is more common than people realise for outbound senders), you're immediately cutting your effective reach by 30% before anyone even sees your subject line.
Worse, deliverability problems compound. When emails go to spam, recipients don't engage with them. Low engagement signals tell email providers that your messages aren't wanted. That causes more of your future emails to go to spam. It's a downward spiral, and once you're in it, recovery takes weeks or months.
For B2B teams running outbound, deliverability isn't a technical detail to hand off to IT. It's a core part of your go-to-market strategy. If you're investing in intent-based email outreach or any form of cold email, the technical foundation has to be right first. Otherwise, you're building on sand.
What You Need Before You Start
Deliverability setup touches DNS, email infrastructure, and your sending tools. Here's what you need access to before starting.
- DNS management access. You'll be adding TXT, CNAME, and possibly MX records. If your domain is managed by someone else (an IT team, a web developer), make sure they can make changes quickly. Delays here are frustrating because each DNS change can take up to 48 hours to propagate.
- A dedicated sending domain (or domains). Never send cold outbound from your primary business domain. If your company is acme.com, set up a separate domain like acme-mail.com or getacme.com for outbound. This protects your primary domain's reputation if something goes wrong. More on this in Step 1.
- An email sending platform. For cold outbound, you'll likely use a tool like Smartlead, Instantly, Lemlist, or Woodpecker. For marketing emails, tools like Mailchimp, SendGrid, or Amazon SES. You need admin access to whichever platform you're using so you can configure authentication properly.
- A warm-up tool. Most modern outbound platforms include warm-up functionality. If yours doesn't, standalone tools like Warmbox or Mailreach work. You'll need this for new domains and new email accounts — more on the specifics later.
- A deliverability monitoring tool. Tools like GlockApps, Mail-Tester, or MXToolbox let you test whether your emails land in the inbox, spam, or promotions tab. You'll use these throughout the process to verify your setup is working.
Step-by-Step: Building Bulletproof Email Deliverability
Step 1: Set Up Your Sending Domain Infrastructure
Your domain infrastructure is the first thing email providers evaluate. Get this wrong, and nothing else matters.
Dedicated sending domains. Purchase 2–5 domains that are similar to your primary brand. If your company is Acme Solutions (acme.com), consider domains like acmesolutions.com, acme-solutions.co, getacme.com, or meetacme.com. Each domain should be plausible as a company domain — not random or spammy.
Email accounts per domain. Create 2–3 email accounts per sending domain. Use real-sounding names and roles: james@acmesolutions.com, sarah.m@acmesolutions.com. Avoid generic addresses like info@ or sales@ for outbound. Each email account should send a maximum of 30–50 emails per day for cold outbound. If you need to send more than that, add more accounts and domains rather than pushing volume through fewer accounts.
Domain age matters. Brand new domains have no reputation, which is a problem. Email providers are suspicious of domains that start sending immediately after registration. If you're planning an outbound campaign, register your sending domains at least 2–4 weeks before you need them. This gives you time to warm them up properly. Check our domain warm-up guide for the full warm-up schedule.
Step 2: Configure SPF, DKIM, and DMARC
These three authentication protocols tell email providers that your messages are legitimate and haven't been spoofed. As of 2026, all three are mandatory — not optional.
SPF (Sender Policy Framework). SPF tells receiving servers which IP addresses and services are allowed to send email on behalf of your domain. You add an SPF record as a TXT record in your DNS settings. The format looks like this:
v=spf1 include:_spf.google.com include:sendgrid.net ~all
Replace the "include" entries with whatever email services you use. Important: you can only have one SPF record per domain. If you use multiple sending services, include them all in a single record. The "~all" at the end means "soft fail anything not in this list" — meaning emails from other sources will be flagged but not automatically rejected.
DKIM (DomainKeys Identified Mail). DKIM adds a cryptographic signature to your emails that proves they came from your domain and weren't modified in transit. Your email platform will generate a DKIM key pair and give you a TXT or CNAME record to add to your DNS. Each sending service needs its own DKIM record. Follow the exact instructions from your email platform — the record format varies by provider.
DMARC (Domain-based Message Authentication, Reporting, and Conformance). DMARC ties SPF and DKIM together and tells email providers what to do when authentication fails. Add a DMARC TXT record to your DNS. Start with a monitoring-only policy:
v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com
The "p=none" means "don't take action on failures, just report them." The "rua" address is where DMARC reports get sent. Monitor these reports for 2–4 weeks to make sure everything is authenticating correctly, then progressively tighten the policy to "p=quarantine" and eventually "p=reject" as you gain confidence that all legitimate sending sources are properly configured.
Step 3: Warm Up Your Domains and Accounts
A new domain with a new email account that starts sending 50 cold emails on day one will go straight to spam. Email providers need to see a pattern of normal, reciprocal email activity before they trust a new sender.
Warm-up is the process of gradually building that trust. Here's the schedule we recommend:
- Week 1–2: Warm-up tool only. No cold outbound. Let the warm-up service send and receive emails on your behalf — typically 10–20 per day, gradually increasing. These are real emails exchanged between accounts in the warm-up network, with opens, replies, and removals from spam.
- Week 3: Start adding 5–10 cold emails per day per account alongside the warm-up activity. Focus on your highest-quality prospects — people most likely to open and reply. Positive engagement in these early sends builds your reputation faster.
- Week 4–5: Gradually increase cold volume to 20–30 per day per account. Monitor deliverability closely with testing tools. If you see inbox placement dropping, slow down.
- Week 6+: Reach your target sending volume of 30–50 emails per day per account. Keep the warm-up tool running indefinitely at a low level (5–10 per day) to maintain positive engagement signals.
Never skip warm-up. Even if you're in a rush. An impatient sender who skips warm-up will spend more time recovering from spam flags than they saved by starting early.
Step 4: Follow the 2026 Sending Rules
The email landscape in 2026 has specific rules that didn't exist two years ago. Here are the ones that matter most for B2B outbound.
- Spam complaint rate must stay below 0.1%. Google enforced this starting in 2024, and it's now the standard across all major providers. If more than 1 in 1,000 of your recipients mark your email as spam, your deliverability drops dramatically. For cold outbound, this means you need extremely targeted lists and highly relevant messaging. Mass blasting is dead.
- One-click unsubscribe is mandatory. Every marketing and bulk email must include a one-click unsubscribe header (RFC 8058). Most email platforms handle this automatically, but verify that your tool includes the List-Unsubscribe-Post header, not just a text link in the footer. For one-to-one sales emails (genuinely personalised, low-volume), this requirement is less strictly enforced, but including an opt-out is still best practice.
- Alignment between From address and authentication. The domain in your From address must match the domain authenticated by SPF and DKIM. Sending from sarah@acme.com but authenticating through a different domain will cause failures. Make sure your "From" domain, SPF domain, and DKIM domain all align.
- Engagement-based filtering is more aggressive. Email providers now weight engagement signals (opens, replies, clicks, time-on-email) more heavily than ever. If your first 100 emails to Gmail addresses get no engagement, Gmail will start routing your messages to spam for the next 100. This is why warm-up and initial send quality matter so much — first impressions with a new provider set the tone for everything after.
Step 5: Write Emails That Don't Trigger Spam Filters
Even with perfect technical setup, your email content can trigger spam filters. Here are the content rules for 2026.
- Keep it plain text (or near-plain text). HTML-heavy emails with lots of images, buttons, and formatting are more likely to trigger spam filters, especially for cold outbound. Plain text emails that look like one human wrote them to another human perform best — both for deliverability and reply rates.
- Limit links to 1–2 per email. Every link in your email is a potential spam signal. For your first email in a sequence, try using zero links. For follow-ups, one link maximum — ideally to your website or calendar. Never include tracking pixels in cold outbound; use your email platform's native open tracking instead.
- Avoid spam trigger words. Words like "free," "guarantee," "act now," "limited time," "click here," and "buy now" raise spam scores. Write naturally. If your email reads like marketing copy, it'll be treated like marketing copy — and filtered accordingly.
- Personalise beyond just the first name. Emails that are clearly templated (same structure, same phrasing, just a name swap) get caught by pattern-matching filters. Add genuine personalisation — reference their company, a recent post, a specific challenge, or why you're reaching out to them specifically.
- Watch your sending patterns. Don't send all your daily emails in a 30-minute burst at 9am. Spread sends across a 4–6 hour window. Consistent, spread-out sending patterns look natural. Bursty patterns look automated.
Step 6: Monitor and Maintain Deliverability
Deliverability isn't something you set up once and forget. It requires ongoing monitoring — ideally weekly.
- Weekly deliverability tests. Send test emails through GlockApps or a similar tool to check inbox placement across Gmail, Outlook, Yahoo, and other providers. If you see your emails landing in spam for a specific provider, investigate immediately — don't wait for it to affect your campaign metrics.
- Monitor your spam complaint rate. Google Postmaster Tools (free) shows your spam complaint rate for Gmail. Set this up for every sending domain. If the rate creeps above 0.05%, reduce volume and improve targeting before it hits the 0.1% threshold.
- Check blacklists regularly. Use MXToolbox to check if your sending domains or IP addresses are on any email blacklists. Being listed on a blacklist can tank your deliverability overnight. Most listings happen because of spam complaints or sending to spam traps (outdated email addresses repurposed by providers as honeypots).
- Rotate sending accounts. Even healthy email accounts benefit from periodic rest. If you have 6 email accounts across 3 domains, consider rotating: 4 active, 2 resting, swapping every 2–3 weeks. This gives accounts time to recover and prevents any single account from accumulating too much negative signal.
Common Mistakes and How to Avoid Them
- Sending from your primary domain. This is the most expensive mistake. If your primary domain gets flagged for spam, it affects all your business email — not just outbound. Always use dedicated sending domains for cold outreach. The cost of a few extra domains ($10–$15/year each) is nothing compared to the cost of your entire company's email being unreliable.
- Skipping warm-up because you're in a rush. A domain that's burned in week one takes 4–8 weeks to recover — far longer than the 2–3 weeks you'd have spent warming up properly. Impatience costs more time, not less.
- Buying email lists. Purchased lists are full of outdated addresses, spam traps, and people who never consented to hear from you. The bounce rate and complaint rate from a purchased list will destroy your sender reputation. Build your lists from verified data sources, or work with providers who verify contacts individually.
- Ignoring bounce rates. A bounce rate above 3% is a red flag. Above 5% is an emergency. High bounces tell email providers your lists are dirty, and they'll throttle your sending. Clean your lists before sending, remove hard bounces immediately, and use email verification tools (NeverBounce, ZeroBounce) on any list before loading it into your outbound tool.
- Not monitoring after setup. Deliverability degrades over time without maintenance. Domains that were perfectly healthy can slip into spam if you stop monitoring engagement metrics, complaint rates, and blacklist status. Treat deliverability as an ongoing operational task, not a one-time project.
How This Connects to Intent-Based Lead Gen
Deliverability and intent-based outreach are deeply connected. Intent-based lead gen naturally supports better deliverability because you're sending to people who are more likely to engage. When someone is actively researching solutions like yours, they're more likely to open your email, read it, and reply — all positive signals that improve your sender reputation.
This is one of the reasons the Totalremoto approach works well: by focusing on prospects showing buying intent, the emails we help clients send naturally get higher engagement. Higher engagement means better deliverability. Better deliverability means more emails reaching the inbox. It's a virtuous cycle that starts with targeting the right people at the right time.
If your deliverability is solid and your targeting is signal-driven, your outbound will outperform teams sending 10x more emails with worse infrastructure. Volume doesn't win in 2026 — precision does.
Frequently Asked Questions
How long does it take to recover a domain from spam?
It depends on how badly it's damaged. A domain with a temporary reputation dip from one bad campaign can recover in 2–4 weeks if you stop sending, fix the issues, and resume slowly. A domain that's been flagged as a persistent spammer — high complaint rates, blacklist entries, multiple spam trap hits — can take 2–3 months to recover, and sometimes it's faster to start fresh with a new domain.
Can I send cold emails from Google Workspace?
Yes, and for B2B cold outbound, Google Workspace is one of the best options. Gmail has strong sender reputation by default, and emails from Google Workspace accounts tend to reach Gmail inboxes better than emails from other providers. The caveat: Google enforces strict sending limits (around 500 per day for standard accounts, 2,000 for Google Workspace). For cold outbound, you should stay well below these limits — 30–50 per account per day.
What's the difference between deliverability and open rate?
Deliverability is whether your email reaches the inbox at all. Open rate is whether the recipient opens it once it arrives. You can have great deliverability (95% inbox placement) but a low open rate if your subject lines are bad. And you can have what looks like a decent open rate but actually have poor deliverability — because the opens you're seeing are only from the subset of recipients who received the email in their inbox. Always measure deliverability separately from open rate.
Should I use a shared IP or a dedicated IP?
For most B2B outbound teams, shared IP through your email platform is fine. Dedicated IPs give you complete control over your sender reputation, but they also mean you're solely responsible for building and maintaining that reputation. If you send fewer than 50,000 emails per month, a shared IP is usually better — you benefit from the platform's overall reputation. If you send significantly more than that, consider a dedicated IP, but be prepared for a longer warm-up period.
Do I need separate domains for email and LinkedIn outreach?
Your LinkedIn profile will typically use your primary domain, while your email outreach uses dedicated sending domains. This is fine — LinkedIn profiles and email sending reputation are independent systems. Just make sure your sending domains look legitimate and professional. If a prospect Googles your sending domain, it should resolve to a real website (even a simple redirect to your main site) rather than a parked or empty page.
Outbound That Actually Reaches People
Totalremoto handles the technical infrastructure — domain setup, warm-up, authentication, monitoring — so your outbound messages actually reach the inbox. Combined with intent-based targeting, it means fewer emails sent, more emails delivered, and higher quality conversations.
See how we build pipeline, or book a call to talk about your outbound infrastructure.