Cold Email Deliverability: How to Reach the Inbox

Cold email deliverability is the share of your outreach that lands in the inbox instead of spam, after the receiving server has accepted it. You improve it in four places: your technical setup (SPF, DKIM, DMARC), your sending domain's reputation, the quality of your list, and the way you write and pace your messages. This guide walks through each one for freelance designers and small agencies who send outreach themselves.

TL;DR

• Delivery means the server accepted your message. Deliverability means where it landed afterward. Only the second one decides whether anyone reads you.
• Authenticate every sending domain with SPF, DKIM and DMARC. Gmail requires all three once you send more than 5,000 messages a day to Gmail addresses.
• Treat a new domain as unknown, warm it up over several weeks, and keep spam complaints under 0.3% in Google Postmaster Tools.
• Clean your list, write short plain messages, link only to your own domain, and include a working opt-out. CAN-SPAM has no exception for B2B email.
• Test before each campaign and watch bounces, complaints and replies during it.

Table of Contents

• Delivery and deliverability are not the same thing
• Step 1: Get the technical setup right
• Step 2: Warm up and pace your sending
• Step 3: Keep your list clean
• Step 4: Write emails that do not trigger filters
• Step 5: Test before and during every campaign
• Compliance: what the law adds
• What about the "30/30/50 rule"?
• Does cold email still work?
• Put targeting and outreach in one workflow
• FAQ
• Sources

Delivery and deliverability are not the same thing

A message can be "delivered" and still never be seen. Klaviyo's help center separates the two: delivery is the recipient's server accepting the message, while deliverability is where it is placed afterward. It lists four main influences: who you send to and how they engage, your sending habits, your content and your sending infrastructure.

That list is a useful map for cold outreach, because every one of those four is in your hands:

Most deliverability trouble comes from the first two. Good copy cannot rescue a bad list or a domain that sends 300 emails on its first day.

Step 1: Get the technical setup right

Before you write a word, make sure mailbox providers can verify that you are who you say you are.

SPF, DKIM and DMARC

• SPF publishes which servers may send mail for your domain.
• DKIM adds a cryptographic signature to each message.
• DMARC tells receivers what to do when SPF or DKIM checks fail, and requires the visible From domain to align with the authenticated one.

Google's sender rules say all senders must use SPF or DKIM, have valid forward and reverse DNS records, use TLS and keep to RFC 5322 formatting. Anyone sending more than 5,000 messages a day to Gmail must use SPF, DKIM and DMARC together. Google also warns that unauthenticated mail may be marked as spam or rejected with a 5.7.26 error.

A small studio will rarely hit 5,000 a day, but set up all three anyway. The industry body M3AAWG says that to meet major mailbox provider requirements, mail needs a published SPF record, a DKIM signature and a DMARC policy, and it must pass DMARC alignment. Alignment is where hobbyist setups usually break: the domain in your From line must match the domain that passes SPF or DKIM.

Reverse DNS and consistent hostnames

If you run your own sending server, Spamhaus expects every sending IP to have a forward-confirmed reverse DNS entry, a HELO/EHLO hostname that resolves to that IP and stays consistent, and SPF and DMARC records on every sending domain. If you send through a mainstream mailbox provider, much of this is handled for you. Your job is the domain records.

Use a separate domain for outreach

Plenty of designers send cold email from their main portfolio domain. If that reputation takes a hit, your client emails and invoices suffer too. A common approach is a secondary domain, close to your brand name, used only for outbound. Point it at your real site so prospects who look you up find the real you.

There is a catch, and it matters. M3AAWG notes that a newly registered domain starts with an unknown reputation, which receivers may treat much like a bad one, and advises considering established domains with a proven history. Spamhaus goes further: domains registered in the last 24 hours can appear on its Zero Reputation Domains list, and domains used for mailing within 30 days of registration are treated with suspicion. So buy your outreach domain early, set up its records, and let it age before you send anything.

Step 2: Warm up and pace your sending

Mailbox providers judge you on consistency. A mailbox that has never sent and suddenly sends hundreds of messages looks like a compromised account.

Spamhaus advises senders to start slowly and consistently with any IP or domain that has not sent email in the past 90 days. Google recommends increasing volume gradually while watching spam rates and domain and IP reputation. Cloudflare's deliverability documentation gives the same advice in practical terms: begin at low, steady volume and raise it over several weeks.

A workable pattern for a solo designer or a two-person agency:

1. Week one: send a handful of real, one-to-one emails a day to people who know you: past clients, friends, collaborators. Ask them to reply.
2. Weeks two to four: raise the daily count in small steps, mixing in a few cold messages to well-matched prospects.
3. After that: hold a steady daily volume per mailbox rather than sending in bursts. If you need more volume, add another mailbox on a warmed domain instead of pushing one mailbox harder.
4. After any pause: if a mailbox sits idle for weeks, restart gently.

Early replies and "not junk" actions count for a lot. Cloudflare notes that user actions are the strongest positive signal for most providers, so ask early recipients to move a message out of junk or mark it Not Spam if it lands there.

Step 3: Keep your list clean

A bad list does more damage than bad copy. Every bounce and every complaint is a negative signal attached to your domain.

Cloudflare gives clear reference points: a delivery rate above 95%, a hard bounce rate below 2% and a complaint rate below 0.1%. Google sets its own ceiling at a spam rate below 0.3% in Postmaster Tools. Aim to sit well under both.

Practical list hygiene for designers:

• Verify addresses before sending. Run your list through an email verification service and drop anything invalid or risky.
• Prefer named, role-appropriate contacts. An owner or marketing manager at a local business is a better target than a generic info@ inbox.
• Target businesses with a real reason to hear from you. A restaurant whose site is slow on mobile and has no booking form has a reason to read an email about that. A business with a strong, recent site does not.
• Remove anyone who bounces, complains or opts out immediately, and never re-add them.
• Do not buy lists. Old, unconsented addresses bounce, and spam traps sit in them.

Finding the right businesses is the part many designers skip. Starting from specifics, such as a site's page speed, missing mobile layout or outdated design, gives you both a better list and a better first line. Our guide to lead generation for web designers covers how to build that list systematically.

Step 4: Write emails that do not trigger filters

Filters read your content, but they read your behavior more closely. Write for a person and the filter problem mostly solves itself.

• Keep it short and plain. A few sentences of text, without heavy HTML templates, banners or attachments.
• Link only to your own domain. Cloudflare warns that third-party redirect services and URL shorteners can lower your reputation score. One link to your site or a demo page is plenty.
• Be specific. Mention the business by name and one concrete issue you noticed. Generic mass copy gets deleted and reported.
• Match the subject line to the message. Deceptive subject lines are illegal in the US and a spam signal everywhere.
• Offer an easy exit. Spamhaus lists clear, legitimate opt-out methods among the habits that help overall deliverability. A simple line such as "Not interested? Reply and I won't write again" works.

For templates and subject-line ideas aimed at designers, see our cold email guide for web designers. If you are wondering where automation fits without making your messages sound robotic, our piece on automated sales outreach covers it.

Step 5: Test before and during every campaign

Testing is not a one-off. Run through this sequence before launch, then keep monitoring.

Before you send

1. Confirm SPF, DKIM and DMARC pass and align. Send a message to a personal Gmail account, open "Show original" and check that all three show as passing.
2. Send test messages to a few accounts at different providers (Gmail, Outlook, a business domain) and see where each lands: primary inbox, promotions tab or spam.
3. Check that your domain and sending IP are not on public blocklists.
4. Read the message aloud. If it sounds like a template, rewrite the first line.

While you send

If you send to Gmail recipients, set up Google Postmaster Tools. Its dashboards show spam rate, IP and domain reputation, authentication results and delivery errors for mail sent to personal Gmail accounts, and a compliance status view against Google's sender requirements. Postmaster data only appears once you send enough volume, so a tiny campaign may show nothing. In that case rely on your own numbers:

If bounces or complaints jump, pause the mailbox, find the cause (usually a new list segment) and resume at lower volume. Spamhaus puts it this way: how you send matters as much as what you send, and one strong negative signal can outweigh the absence of positive ones.

Compliance: what the law adds

Deliverability and legality overlap, because mailbox providers penalize the same behaviors the law targets. For US readers, the FTC states that CAN-SPAM covers all commercial email and makes no exception for business-to-business messages. Its guide requires accurate From, To, Reply-To and routing information, subject lines that reflect the content, clear identification of the message as an ad, a valid physical postal address and a working way to opt out, which you must honor promptly. Penalties apply per violating email, so read the full guide before you launch.

If you write to prospects outside the US, rules differ. The EU, UK and Canada each have their own consent or legitimate-interest requirements, and they change. Check the official regulator's guidance for each country you target, and when in doubt, ask a lawyer who handles email marketing in that jurisdiction.

What about the "30/30/50 rule"?

You may see a rule of thumb saying cold email success is roughly 30% targeting, 30% copy and 50% follow-up. It is a popular heuristic, not a measured standard, and the numbers do not even add up to 100. Take the useful part: targeting, message and follow-up all matter. Then notice what it leaves out: none of it helps if the message lands in spam. Deliverability sits underneath all three.

Follow-ups are worth sending, but treat them with the same care as the first email: space them out, stop after a few, and stop at once when someone opts out.

Does cold email still work?

Yes, when it is relevant, honest and sent in moderate volume. What has stopped working is high-volume, generic blasting, since mailbox providers now publish clear sender requirements and monitor complaint rates. For a designer the odds are good for a simple reason: you can show a real problem on a real website. An email that says "here is what I noticed on your site, and here is a quick mockup" is useful to the recipient, not just an ad.

Our perspective

Most advice on cold email deliverability is written for sales teams blasting thousands of contacts. Web designers have a different advantage: you do not need volume, you need relevance. We built CeeQuu around that idea.

When you find businesses by the actual weaknesses of their websites, score those weaknesses and send a pitch that shows a concrete redesign idea, you can send fewer emails and still give each recipient a reason to reply. Replies and engagement are the signals mailbox providers reward, and they come from relevance, not from tricks.

That is why our platform is designed to put prospecting, audit scoring, demo concepts and personalized outreach in one workflow. Less manual list-scraping means fewer guesses about who to email, and tighter targeting is the most reliable foundation for a healthy sender reputation.

iwan

Put targeting and outreach in one workflow

Deliverability is easier when the list is small, specific and well researched. CeeQuu is built for web designers and agencies: it identifies local businesses with weak websites, scores those weaknesses, generates personalized redesign proposals and demo concepts, and automates outreach and follow-up tracking. Our Pro plan covers agency lead generation, and you can see what it includes on the agency lead generation page.

If you want to see how audit scoring works first, try our website audit software. It shows what a prospect's site gets wrong, which gives you a specific first line for every email.

FAQ

What email deliverability is cold email?

It is the likelihood that your unsolicited outreach reaches a recipient's inbox instead of the spam folder. It depends on authentication records, your domain and IP reputation, list quality, sending pace and message content. Delivery only means the server accepted the message.

How do I check cold email deliverability?

Confirm that SPF, DKIM and DMARC pass, send test messages to several providers and note where they land, and check blocklists. Then monitor bounce rate, complaints and replies during the campaign. If you send to Gmail users, Google Postmaster Tools adds spam rate and reputation data.

What is the 30/30/50 rule for cold emails?

It is an informal rule of thumb that splits success into targeting, copy and follow-up. It is not an official standard, so use it as a reminder that all three matter rather than as a formula.

Does cold emailing work anymore?

Yes, when messages are targeted, honest and sent at modest volume with an easy opt-out. Generic bulk sending is what fails. Pitches that point to a real, specific problem on the recipient's website tend to earn attention because they are useful to the reader.

Sources

• Understanding email deliverability, Klaviyo Help Center
• Email sender guidelines, Gmail Help
• Postmaster Tools dashboards, Gmail Help
• Email deliverability, Cloudflare Email Service docs
• Sender Guidelines, Spamhaus
• M3AAWG Sender Best Common Practices
• CAN-SPAM Act: A Compliance Guide for Business, FTC

Recommended

• Cold Email for Web Designers: Templates, Tips and AI Tools That Work
• Automated Sales Outreach: How to Do It Without Sounding Like a Bot
• Lead Generation for Web Designers: Strategies, Tools and Systems That Work

Made with BabyLoveGrowth, the backlink builder