💡 TL;DR
Eighty percent of cold email deliverability problems are infrastructure problems, not content problems. Run through all 20 checks before every campaign launch. The non-negotiables: DKIM pass, SPF pass, DMARC policy set, Postmaster reputation at Good or High, spam rate under 0.08%, and bounce rate under 2%. Litemail pre-warmed inboxes arrive with items 1–12 already resolved from $4.99/inbox.
Eighty percent of cold email deliverability problems are infrastructure problems. Not copy. Not subject lines. Not send time. The fix is almost always something on this checklist — a DNS record, a reputation signal, a list quality issue — that takes minutes to resolve once you know what to look for.
DNS and Authentication: The First 6 Checks
These come first because everything else depends on them. Clean authentication is the precondition for good sender reputation. One failed DNS record can tank deliverability for an otherwise perfectly configured inbox.
✅1. SPF Record Is Published and Correct
Run your sending domain through mxtoolbox.com/spf.aspx. Confirm the record is present, includes the correct mail server reference (include:_spf.google.com for GWS, include:spf.protection.outlook.com for MS365), and ends with -all (hard fail). A softfail (~all) is not the same thing — fix it.
✅2. DKIM Is Enabled and Passing
Check DKIM at mxtoolbox.com/dkim.aspx. Verify the key is present and 2048-bit — not 1024-bit. If your DKIM key is 1024-bit, regenerate it. This is a 15-minute fix with a significant trust signal improvement in 2026.
✅3. DMARC Policy Is Active
Verify DMARC at mxtoolbox.com/dmarc.aspx. Confirm a policy of p=quarantine or p=reject is set. A p=none DMARC policy offers no protection and is a trust downgrade. Confirm aggregate reports (rua) are sent to an email you actually monitor.
✅4. Authentication Headers Pass on a Test Send
Send a test from your sending inbox to a Gmail address. Open it. Click the three dots → "Show original." Confirm SPF: PASS, DKIM: PASS, DMARC: PASS. Any failure is a hard stop before campaigns go live. This is your ground-truth check — not the DNS tool scan.
✅5. No SPF Record Lookup Limit Exceeded
SPF has a hard limit of 10 DNS lookups. Complex SPF records with multiple include statements can silently exceed this limit — causing PERMERROR that fails authentication even though the record looks correct. Use mxtoolbox.com's SPF check to confirm you're inside the 10-lookup limit.
✅6. Sending Domain Is Not on Any Blacklist
Check your domain at mxtoolbox.com/blacklists.aspx. A clean domain should show no listings. If you're listed on any major blacklist (Spamhaus, SURBL, Barracuda), investigate the cause before sending. Getting listed is a symptom of a bigger problem — not the problem itself.
Inbox Infrastructure: Checks 7 Through 12
DNS is clean. Now verify the sending infrastructure itself. These checks catch the inbox-level issues that DNS tools won't flag.
✅7. Mail-Tester Score Is 9/10 or Higher
Go to mail-tester.com, send a test email from your inbox to their unique address, and check your score. A score below 9/10 means something is misconfigured — the report tells you exactly what. A Litemail pre-warmed inbox consistently scores 10/10 because DNS, IP, and reputation are all pre-verified. Fix everything flagged before sending campaigns.
✅8. Google Postmaster Shows Good or High Domain Reputation
Add your sending domain to postmaster.google.com and check domain reputation after 24–48 hours of inbox activity. Good or High means primary inbox placement for most Gmail recipients. Unknown means not enough sends yet. Low or Medium means an infrastructure problem needs fixing before campaigns run.
✅9. Sending IP Is Dedicated, Not Shared
Confirm your sending inbox uses a dedicated IP — not a shared pool. Shared IPs mean another sender's behaviour can destroy your deliverability overnight. Ask your inbox provider explicitly. Pre-warmed inbox providers like Litemail use dedicated US and EU IPs on every account.
✅10. Sending Domain Is at Least 30 Days Old
Brand-new domains sending cold email trigger age-based spam filters at most receiving mail servers. A domain under 30 days old pitching cold email contacts is a high-risk pattern. If you're in this position, either wait or use pre-warmed inboxes on domains with older registration dates.
✅11. Inboxes Are Spread Across Multiple Domains
Use 3–4 inboxes per domain, across 3 or more separate domains for your total rotation. If one domain gets flagged or blacklisted, the others continue running. Domain diversification is the single cheapest piece of deliverability insurance — $10–15/year per domain.
✅12. Daily Send Volume Is Within Safe Limits
Confirm your sending platform is set to a maximum of 40–50 cold emails per inbox per day with at least 90 seconds between sends. Exceeding this ceiling with pre-warmed inboxes is the most common way to burn reputation in the first month of real campaign activity.
List Quality and Compliance: Checks 13 Through 17
Infrastructure and reputation checks are only half the picture. List quality and compliance failures are responsible for more deliverability problems in 2026 than DNS misconfiguration. These five checks protect your infrastructure from list-driven damage.
✅13. Every List Has Been Email-Verified
Run every prospect list through an email verification tool (NeverBounce, ZeroBounce, or similar) before loading it into your sending platform. Remove any address flagged as invalid, disposable, or risky. Target a post-verification bounce rate under 2% — above that, domain reputation degrades measurably within 10 days.
✅14. One-Click Unsubscribe Is Included
Google's 2024 sender requirements mandate one-click unsubscribe for bulk senders (over 5,000 emails per day to Gmail). Even below that threshold, including a clear unsubscribe mechanism reduces spam reports from people who want off your list. Missing it means they report you as spam instead — a worse outcome for your reputation than an unsubscribe.
✅15. No Role-Based Email Addresses in Your List
Addresses like info@, admin@, support@, hello@, contact@ are role-based — they're typically monitored by multiple people or filtered automatically. Cold email to role-based addresses generates disproportionately high spam reports and low engagement. Remove them from every list before sending.
✅16. Suppression List Is Updated and Active
Maintain a suppression list of every address that has unsubscribed or reported your email as spam. Load it into your sending platform's exclusion list before every new campaign. Sending again to an unsubscribed contact is both a compliance risk (CAN-SPAM, GDPR) and a reputation hit.
✅17. Spam Rate in Postmaster Is Under 0.08%
Check spam rate in Google Postmaster Tools before launching any new campaign. If it's above 0.06%, pause and clean your list first. Don't send into a rising spam rate — the recovery takes 2–4 weeks and every send during that period compounds the problem.
Content and Sending Pattern: Final 3 Checks
These last three checks are the ones most people skip because they feel subjective. They're not.
✅18. No Open-Tracking Pixel on First Sends
Open tracking pixels are hosted on third-party domains — often domains shared across many cold email senders. If any of those shared tracker domains are flagged, every email using them takes a deliverability hit. Consider disabling open tracking on your first 2–3 weeks of sends from a new inbox. Reply tracking is cleaner and more reliable anyway.
✅19. No HTML-Heavy Email Templates
Cold email that looks like a marketing newsletter — multiple images, heavy HTML formatting, branded headers — triggers spam filters at a much higher rate than plain text or minimal HTML emails. Cold email should look like it was written and sent personally. One link maximum in the first email of a sequence.
✅20. Sending Schedule Matches Human Patterns
Send within recipient business hours (8am–5pm in their timezone). Don't send at exactly the same minute every day — vary the time window by 30–45 minutes. Perfectly timed sends at identical intervals are a machine-send pattern that spam filters recognise. Your sending platform's randomisation settings handle this automatically — confirm they're on.
The Advice About Open Rates That Will Hurt You
Here's something commonly recommended that's actually counterproductive: optimising heavily for open rates in cold email. Higher open rates do not reliably correlate with better deliverability outcomes. In some cases, obsessive open-rate optimisation drives tactics that hurt reputation.
Specifically: aggressive subject line testing using curiosity gaps or urgency triggers may lift open rates while simultaneously generating more spam reports from people who feel misled by the subject line versus the content. One percentage point in spam rate from misleading subject lines costs you more than 5 percentage points of open rate gain is worth.
Track reply rates. Track positive reply rates. Those are the signals that actually matter — both for campaign performance and as indirect deliverability signals that Gmail and Outlook use to calibrate domain reputation.
Start With All 20 Points Pre-Cleared — Litemail Pre-Warmed Inboxes
Every Litemail pre-warmed inbox ships with checks 1–12 already passed: automated SPF/DKIM/DMARC, verified Good reputation in Postmaster Tools, dedicated US and EU IPs, 2048-bit DKIM keys, blacklist-clean infrastructure. You handle checks 13–20 — the list quality and sending pattern checks that are specific to your campaign. From $4.99/inbox.
Get Pre-Warmed Inboxes from $4.99 →
DNS auto-configured · Postmaster verified · Dedicated IPs · No minimum order · Full admin access
About Litemail — Litemail provides pre-warmed Google Workspace and Microsoft 365 inboxes for cold email outreach. From $4.99/inbox with automated DNS, dedicated US and EU IPs, and full admin access.
View pre-warmed inbox plans →
Related reading:
Cold Email Deliverability Guide 2026 · SPF DKIM DMARC Auto-Setup 2026 · Email Deliverability Monitoring Tools 2026 · Cold Email Blacklist Prevention for B2B Sales 2026 · DMARC Not Working — Fix Guide 2026
Key Takeaways
Check all three DNS records — SPF, DKIM, DMARC — plus a live authentication header test on a real send. DNS tool scans are a starting point, not a guarantee.
Upgrade DKIM keys to 2048-bit if you're still on 1024-bit — it's a 15-minute fix with a real trust signal improvement.
Keep spam rate under 0.08% — not 0.10%. Reputation degradation begins before Google's published threshold.
Verify every prospect list before sending — bounce rate above 2% starts degrading domain reputation within 10 days.
Remove role-based addresses (info@, admin@, support@) from every list — they generate disproportionately high spam reports.
Domain diversification (3–4 inboxes per domain, 3+ domains) is cheap insurance against a single domain getting flagged.
Track reply rates, not open rates, as your primary deliverability signal — reply rates are cleaner and more meaningful for both performance and reputation.
Frequently Asked Questions
What is the most important email deliverability check for cold email in 2026?
Authentication — specifically DKIM. Of the three DNS records, DKIM is weighted most heavily by Gmail for inbox placement decisions. Get a 2048-bit DKIM key correctly configured before anything else. Then verify SPF and DMARC are also passing on a live test send. Clean authentication is the precondition for everything else on this checklist.
How do I check if my cold email is passing SPF, DKIM, and DMARC?
Send a test email from your sending inbox to a Gmail address you control. Open the email in Gmail. Click the three dots (⋮) and select "Show original." Look for the authentication results section — you'll see SPF, DKIM, and DMARC results. All three should say PASS. Any other result is a problem to fix before campaigns launch.
What bounce rate is acceptable for cold email in 2026?
Keep bounce rate below 2% per campaign. Above 2%, Google's systems treat your domain as a source of invalid email — a spam signal. Above 5%, reputation degradation accelerates rapidly. Verify your list with an email verification tool before every campaign. This is not optional — it's the single most impactful list hygiene step you can take.
Do I need to check deliverability before every campaign?
Yes, for new inboxes and new domains — at minimum run mail-tester.com and a Google Postmaster reputation check before the first campaign. After that, check Postmaster weekly and run mail-tester monthly spot checks on random inboxes from your rotation pool. Don't assume a passing check in month one means everything is still fine in month three.
What is the spam rate threshold that Google acts on in 2026?
Google's published threshold is 0.10%, but in practice reputation degradation begins at approximately 0.08%. Treat 0.08% as your real ceiling. If Postmaster shows your spam rate trending above 0.06%, pause your campaign immediately and clean your list. Don't wait to hit the official threshold before acting.
Does Litemail pre-configure all DNS records on their pre-warmed inboxes?
Yes. Every Litemail inbox ships with SPF, DKIM (2048-bit keys), and DMARC all correctly configured automatically. There's no manual DNS setup required. The inboxes arrive with all authentication records passing and verified Good or High reputation in Google Postmaster Tools within 48 hours — so you enter a campaign with checks 1–12 of this checklist already cleared.
Buy Pre-Warmed Email Inboxes & Domains | Litemail
Buy pre-warmed email accounts, inboxes and domains from $4.99/inbox. Google Workspace & Microsoft 365. Automated DNS, US & EU IPs. Setup in 5 minutes.
Related reading:
Cold Email Deliverability Guide 2026 · SPF DKIM DMARC Auto-Setup 2026 · DMARC Not Working — Fix Guide 2026 · Email Deliverability Monitoring Tools 2026 · Cold Email Blacklist Prevention 2026
