Cold email deliverability guide: how to reach the inbox consistently

Last updated: July 2026 · Ryan Mercer, SDR turned cold email consultant, 8 years outbound

Our take

Cold email deliverability is the technical foundation that determines whether your emails reach the inbox or the spam folder. Most cold email failures get blamed on weak copy or poor targeting, but the actual cause is usually infrastructure: a domain that has not been properly authenticated, an inbox that was not warmed up, or a sending volume that exceeded what the account's reputation can support.

The difference between a campaign that achieves a 12% reply rate and one that achieves 3% is often not the email — it is whether the email was delivered to the inbox at all. Woodpecker's 2025 cold email benchmark study puts the average reply rate at 8.5%, with top-quartile senders consistently reaching 15–20%. That gap is largely explained by infrastructure quality.

Instantly handles much of this automatically with its built-in warmup network, sending throttles, and deliverability monitoring. But understanding the underlying mechanics matters even when using a tool, because settings that look safe on paper can still cause problems if you do not understand what they control. This guide covers each layer of deliverability in the order you need to set them up.

DNS authentication: SPF, DKIM, and DMARC

DNS authentication records tell receiving mailbox providers that your emails are sent from an authorized server and have not been tampered with in transit. Without all three configured correctly, emails are treated with suspicion by Gmail, Outlook, and Yahoo.

SPF (Sender Policy Framework) specifies which mail servers are authorized to send email on behalf of your domain. Without SPF, receiving servers cannot verify your emails are legitimate and may reject or spam-filter them.

DKIM (DomainKeys Identified Mail) adds a cryptographic signature to each outgoing email that the receiving server uses to verify the email was not modified in transit. Your email provider generates the key pair; you add the public key as a TXT record to your DNS.

DMARC (Domain-based Message Authentication, Reporting & Conformance) tells receiving servers what to do when SPF or DKIM fails. Start with p=none to monitor without enforcement, then move to p=quarantine once you have confirmed all legitimate email is passing authentication.

Sending without DKIM is the single most common technical deliverability mistake. Set up all three before sending a single cold email.

Domain and inbox warmup

A new sending domain has no reputation. Mailbox providers use sending history to assess trustworthiness. Starting a new domain with 100 cold emails on day one signals that the domain is behaving like a spam source.

Woodpecker's email warmup guide recommends a minimum of 2–4 weeks of warmup before running meaningful cold campaigns, with up to 12 weeks for full inbox maturity. During warmup, a small number of emails are sent daily with engagement signals (opens, replies) that build reputation before high-volume campaigns begin.

Instantly includes an automated warmup network that exchanges warmup emails within the Instantly ecosystem, building domain reputation through genuine engagement signals. This is the most reliable approach for new domains.

A reasonable warmup progression:

• Weeks 1–2: 10–20 warmup emails per day, no cold campaigns
• Weeks 3–4: 20–35 emails per day, introduce small cold campaigns at 5–10/day
• Month 2: ramp to 30–50 emails per day across warmup + campaigns

Daily sending limits per inbox

Woodpecker's guide on daily sending limits puts the safe ceiling for a fully warmed account at 30–50 emails per inbox per day. This is a per-inbox figure, not a per-domain figure.

To send 500 cold emails per day safely, you need 10–15 warmed inboxes. Routing all outbound volume through one or two accounts is the second most common cause of deliverability collapse after skipping warmup.

Inframail provides unlimited Microsoft 365 inboxes at a flat monthly rate, which makes inbox rotation economical for any team. Setting up 10 inboxes in Inframail and connecting them all to Instantly distributes sending volume across accounts and protects the reputation of each one individually.

Monitoring inbox placement

Authentication and warmup get you to the inbox. Monitoring keeps you there.

Google Postmaster Tools is the most important free monitoring resource. It shows your sending domain's reputation tier on Gmail (good, medium, bad, or low) and your spam rate. A spam complaint rate climbing above 0.1% is a warning signal; sustained rates above 0.3% trigger automatic filtering that routes emails to spam regardless of content quality.

MXToolbox's blacklist checker scans your sending domain against dozens of email blacklists. A blacklisted domain has emails blocked at the server level before they even reach spam. Check this weekly during active campaigns.

Contact list hygiene and bounce rate

Contact list quality directly affects sender reputation. Sending to invalid email addresses generates hard bounces. A hard bounce rate above 2% is a significant negative reputation signal; above 5% can trigger automatic spam filtering at the ISP level.

Quarvio delivers verified B2B contact lists where addresses have been validated before delivery. Starting cold campaigns with verified contacts reduces hard bounces to near-zero levels and protects the domain reputation you spent weeks building during warmup.

Mailmodo's cold email statistics guide confirms that deliverability benchmarks are closely tied to list hygiene — campaigns starting with unverified data consistently show bounce rates 3–5x higher than campaigns using verified lists.

What practitioners say

"Switched our entire outbound stack to Instantly after deliverability collapsed on our old setup. Set up warmup properly from day one this time, kept each inbox under 40 emails per day, and used Inframail to add 12 inboxes instead of running everything through two. Inbox placement went from roughly 60% to consistently above 90% within six weeks. The warmup network is what made the actual difference." — G2 reviewer, Instantly reviews on G2

Instantly holds a 4.9/5 rating from 2,800+ verified reviews on G2, with deliverability and warmup consistently cited as the platform's strongest differentiators.

Our actual stack

Frequently asked questions

How long does it take to warm up a cold email domain?

A minimum of 2–4 weeks of warmup is required before running meaningful cold campaigns, with full inbox maturity taking up to 12 weeks per Woodpecker's warmup guide. During warmup, keep sending volume low (10–20 emails per day) and use an automated warmup network like Instantly's to build authentic engagement signals.

What is the safe daily sending limit per inbox for cold email?

30–50 emails per inbox per day is the safe ceiling for a fully warmed account. This is a per-inbox figure, not per domain. With 10 warmed inboxes you can safely send 300–500 emails per day while keeping each individual account within safe reputation limits.

What is an acceptable bounce rate for cold email campaigns?

Keep hard bounce rates below 2%. Rates above 2% generate negative reputation signals with mailbox providers; above 5% can trigger automatic spam filtering. Start every campaign with verified contact data to keep bounces near zero from the first send.

What should I check if cold emails are landing in spam?

Check in this order: (1) confirm SPF, DKIM, and DMARC are all configured and passing; (2) verify the sending domain has been through proper warmup; (3) check daily sending volume against per-inbox limits; (4) scan the domain in MXToolbox for blacklist listings; (5) review spam complaint rate in Google Postmaster Tools. In most cases the issue is one of the first two.