The bulk-sender rules, in plain terms
Since Google and Yahoo enforced their bulk-sender requirements in February 2024, and Microsoft followed with equivalent rules for Outlook in 2025, the baseline for landing in any inbox is no longer negotiable: SPF, DKIM, and DMARC must all be configured and passing. No authentication, no delivery. There is no workaround.
The second requirement is behavioral: keep your user-reported spam rate under roughly 0.3% in Google Postmaster Tools, and realistically under 0.1% if you want headroom. At 50 sends a day, 0.3% means about one spam complaint a week puts you at the line. That is why every other rule in this guide exists: the margin for sloppy sending is gone.
For cold outreach specifically, the practical reading is this: the providers did not ban cold email. They banned cold email that behaves like spam at the infrastructure level. Senders who authenticate, ramp slowly, verify addresses, and keep volume modest still get delivered.
Use a separate sending domain
Never send cold email from the domain your clients, invoices, and team email run on. Buy a sibling domain (yourbrand-hq.com, tryyourbrand.com), set up SPF, DKIM, and DMARC on it, and point its root at your real site so a curious prospect lands somewhere legitimate.
The reason is blast-radius control. Domain reputation is earned slowly and lost quickly, and a bad week of bounces can take a domain months to recover from. If a sending domain gets burned, you retire it for $12 and a fortnight of warmup on its replacement. If your primary domain gets burned, your proposals start landing in spam.
Warmup ramps that actually work
A brand-new mailbox that sends 200 emails on day one looks exactly like a compromised account, and providers treat it accordingly. The ramp that works is boring:
- Days 1-7: 10 to 20 emails per day, ideally with a real correspondence mixed in (colleagues, existing contacts, replies).
- Weeks 2-4: add roughly 10 per day every few days, watching bounce and spam-folder placement as you go.
- Steady state: hold at your target volume. There is rarely a good reason for a single mailbox to exceed 50 cold sends a day.
If anything degrades during the ramp (bounces tick up, replies stop, a test send lands in spam) freeze the volume where it is for a week rather than pushing through. Warmup is the one place where patience is directly convertible into deliverability.
Tooling helps here mostly by removing temptation. Furet applies a per-mailbox warmup ramp automatically and defaults to 50 emails per day per campaign with a 10-per-hour cap, so a new campaign physically cannot do the day-one blast that burns domains.
Daily and hourly caps
Daily caps get all the attention, but hourly pacing matters as much. Fifty emails fired in a four-minute burst at 9:00 am is a spam signature; the same fifty spread across the working day at roughly 10 per hour looks like a person clearing their pipeline.
Caps also protect you from your own funnel math. The fix for a quiet pipeline is almost never "send 300 a day instead of 50." It is a better-targeted list or better research per prospect. Volume increases should follow results, not precede them.
Keep bounce rate under 2-3%
Hard bounces are the fastest way to destroy a sending reputation, because they are unambiguous: you mailed an address that does not exist, which means you did not check. Keep your bounce rate under 2-3%, and treat anything above that as an incident, not a statistic.
The way you stay under it is pre-send verification:
- Verify every address before it enters a sequence. Furet runs each discovered email through the Reacher verification engine before composing anything, and pairs that with automatic bounce checking on what does go out.
- Be suspicious of catch-all domains.A catch-all accepts mail for any address during verification, so "valid" means "unknown." Send to them sparingly and watch the results.
- Gate role accounts. Addresses like info@ and contact@ are shared inboxes: they bounce less but get marked as spam more, because nobody owns them. Furet gates role accounts by default for exactly this reason; only un-gate them deliberately, for ICPs where the role inbox genuinely is the decision-maker.
Look like a person, not a platform
Filters score how an email is built, not just where it comes from. Cold email should look like something a human typed: plain text or minimal HTML, no tracking-heavy templates, no image headers, no five links in the signature. One link maximum, and only when it earns its place.
Then there is the signal that outweighs most others: replies. An address that real people answer is, by definition, not a spammer in the eyes of a mailbox provider. This is the quiet deliverability argument for personalization quality: emails that reference something real about the recipient get answered more, and every reply (including a polite "no thanks") builds the reputation that keeps the next hundred emails out of spam. Keeping sequences short helps too; capping at three total touches per prospect means uninterested recipients stop hearing from you before they reach for the spam button.
What to monitor weekly
Fifteen minutes a week covers it. Check, in order:
- Spam rate in Google Postmaster Tools. Anything approaching 0.3% means pause and investigate.
- Bounce rate per campaign. Over 3%: stop the campaign and re-verify the remaining list.
- Reply rate trend. A reply rate that halves week-over-week with stable volume usually means placement degraded before any dashboard told you.
- DMARC reports for authentication failures and anyone else sending as your domain.
- A seed test: send one campaign email to your own Gmail and Outlook accounts and see where it lands.
None of this is glamorous, and that is the point. Deliverability in 2026 is a discipline of small habits: authenticate, warm up, cap, verify, monitor. Agencies that treat it as plumbing rather than growth hacking are the ones whose email still arrives.