You can write the best copy in the world and still land in spam. Deliverability is the unglamorous plumbing that decides whether your message is ever seen. This cold email deliverability checklist is the exact running order we use to keep campaigns in the inbox - print it, tape it above your monitor, and work through it before you press send.
We manage 1,500+ mailboxes and run our own campaigns at 98.7% inbox placement, ~4.5% reply rate and ~0.8% bounce. None of that comes from luck. It comes from doing the boring things in the right order, every time.
What is a cold email deliverability checklist?
A cold email deliverability checklist is a fixed sequence of technical and behavioral checks - DNS authentication, warmup, sending limits, list hygiene and inbox placement testing - that you run before and during a campaign so your emails reach the inbox instead of spam.
Think of it as preflight for a plane. Pilots do not skip the checklist because they have flown before. The whole point is that it removes "I think we're fine" from the equation and replaces it with "yes, every line is green." Deliverability fails quietly: you do not get an alert when your domain reputation drops, you just watch replies dry up. The checklist is how you catch problems before they cost you a pipeline.
Deliverability is not one big decision - it is a hundred small ones you stop forgetting to make.
The cold email deliverability checklist (print this)
Here is the full list. Each item is either green or it is not - no "kind of."
- [ ] SPF, DKIM and DMARC published and passing on every sending domain
- [ ] Sending domains separate from your primary brand domain (lookalikes)
- [ ] MX and tracking set up; avoid shared open-tracking domains that are already blacklisted
- [ ] Custom tracking domain per sending domain, not the platform default
- [ ] Warmup running for 3-4 weeks before real sends, ramping gradually
- [ ] Volume capped at about 25 emails per mailbox per day
- [ ] List verified with bounces removed; target sub-1% bounce rate
- [ ] Catch-all addresses flagged and handled, not blindly mailed
- [ ] Personalization present in the first line and the ask
- [ ] One clear CTA, plain-text feel, minimal links and no image-heavy HTML
- [ ] Unsubscribe path that actually works (one-click for bulk senders)
- [ ] Inbox placement test to Gmail, Outlook and Yahoo seed accounts
- [ ] Daily monitoring of bounce, spam complaints and reply rate
- [ ] Blacklist watch on every domain and sending IP
Print it, run it, and do not start a campaign with a red box on the page.
Do I really need SPF, DKIM and DMARC for cold email?
Yes - without all three passing, mailbox providers cannot verify you sent the message, and in 2026 that means spam at best and silent blocking at worst. SPF, DKIM and DMARC are no longer optional polish; they are the entry ticket.
Google and Yahoo's bulk sender rules made authentication a hard requirement, and the rest of the industry followed. SPF tells receivers which servers may send for your domain, DKIM signs the message so it cannot be tampered with, and DMARC ties them together with a policy. Skip one and you are guessing whether you pass. Our full walkthrough lives in the SPF, DKIM, DMARC cold email guide, and if you sell to consumer inboxes, read the Google and Yahoo bulk sender rules too.
The mistake we see most: authentication set up on the brand domain but not on the lookalike domains people actually send from. Every domain you mail from needs its own passing records. No exceptions.
Why do my cold emails go to spam even with good copy?
Usually because the problem is reputation, not words - a cold domain, no warmup, too much volume too fast, or a list full of dead addresses. Copy matters, but mailbox providers judge the sender before they judge the sentence.
Spam filters score patterns. A brand-new domain blasting 200 emails on day one looks exactly like a spammer, regardless of how human the copy reads. So does a campaign with a 6% bounce rate, because high bounces signal you bought or scraped a bad list. We break down the real causes in why cold emails go to spam, but the short version is: fix the sender first, then the message.
If you are seeing sudden placement drops, check three things in order - have you been blacklisted, did your bounce rate spike, and did you exceed your daily cap? Most "the copy stopped working" panics are actually one of those three.
How long should warmup run before I send?
Plan on 3-4 weeks of warmup before any real campaign, ramping volume slowly so each mailbox builds a track record of normal, replied-to conversation. Rushing this is the single most common way people torch a brand-new domain.
Warmup teaches mailbox providers that your domain sends real mail that humans open and reply to. Do it too fast and you trigger the opposite signal. We are stubborn about this for a reason - see why we never rush warmup and the full cold email warmup guide. Warmup is also not a one-and-done event; you keep a baseline of warmup traffic running underneath live campaigns so reputation never goes cold.
The same patience applies to volume. Once warm, cap each mailbox at about 25 emails per day - the reasoning is in 25 emails per mailbox and how many cold emails per day. Want more output? You add mailboxes, sized to your goals, not more sends per mailbox.
How do I keep my bounce rate low?
Verify every address before you send, remove anything that fails, and handle catch-all domains carefully - your target is sub-1% bounce, because a high bounce rate is a direct hit to domain reputation. Mailbox providers treat bounces as a signal you do not know who you are mailing.
A clean list starts with a tight ICP. If you are mailing the wrong companies, even verified addresses will not reply and may complain - tighten it using the ICP guide before you build the list. Then verify. Catch-all domains accept everything at the gateway, so verification can't confirm the mailbox exists; treat them as a separate risk bucket - we explain how in catch-all emails explained.
If your bounce rate is already high, stop sending and clean before you do more damage - the recovery steps are in the email bounce rate fix. And if a domain or IP gets listed, work through blacklist removal before resuming.
Should I test inbox placement before launching?
Yes - seed-test every campaign into real Gmail, Outlook and Yahoo accounts so you see where you actually land, not where you assume you land. "It sent successfully" tells you nothing about placement.
Inbox placement testing catches the difference between delivered and seen. A message can be accepted by the server and quietly filed in Promotions or Spam, and the sending platform will still show it as delivered. The only way to know is to look at real inboxes - the method is in inbox placement testing. Run a test, fix what's red, then scale. Once live, watch your numbers against cold email reply rate benchmarks so you know whether a dip is placement or messaging.
Does separating sending domains actually help?
Yes - send from dedicated lookalike domains, never your primary brand domain, so that if a campaign gets flagged your main domain's reputation stays clean. This is basic risk containment.
If you send cold outreach from your money domain and something goes wrong, your invoices and customer replies can start landing in spam too. Lookalike domains isolate that risk - the full reasoning is in lookalike sending domains. How many you need depends on your volume and goals, which is exactly why we size infrastructure rather than ship a fixed package - the trade-offs are covered in shared vs dedicated cold email infrastructure.
What keeps deliverability healthy after launch?
Daily monitoring and good sending behavior. Watch bounce, spam complaints and reply rate every day, keep your cadence human, and let deliverability data shape what you change next. Set-and-forget is how good campaigns slowly die.
Behavior on the recipient's side feeds reputation, so structure your outreach to earn replies, not ignores. A tight follow-up strategy - including a real break-up email - keeps engagement high without nagging, and a mixed email + LinkedIn cadence spreads touches across channels so no single domain carries all the load. Personalization at scale earns the opens and replies that protect your reputation over time.
This is the part most teams skip because it never ends - which is exactly why we monitor it daily across every mailbox we run, and why deliverability is something we operate, not something we hand over.
Let Moongie run the checklist for you
You can work this cold email deliverability checklist yourself - every step is real and it works. But if you would rather have it done and watched daily, that is the whole job we do: ICP research, verified lists, managed cold email infrastructure, warmup and live deliverability monitoring, plus mixed outreach and landing pages that turn replies into pipeline. See how we work and then get in touch - tell us who you want to reach, and we'll handle the rest.
Want this handled for you? Moongie runs managed cold email infrastructure, mixed email + LinkedIn outreach and high-converting landing pages. Book a free 30-minute strategy call - or win our playbook in the Inbox Run game.