How to keep cold emails out of spam

To keep cold emails out of spam, do four things. Authenticate your sending domain with SPF, DKIM and DMARC. Keep the share of people who mark you as spam far below the limits Gmail and Yahoo publish. Send a small number of emails to people who fit. Make it easy to stop hearing from you. The rest of this guide explains each step.

Most advice on this topic comes from tools that sell warm-up or inbox rotation. This guide uses the rules the mailbox providers and the regulator publish themselves, because those rules decide where your email lands.

1. Set up the records every sender needs

Since February 2024, Gmail asks every sender, not only big ones, to set up SPF or DKIM, keep valid forward and reverse DNS records, and use a TLS connection. Yahoo asks for the same minimum: its sender page tells all senders to implement SPF or DKIM at a minimum.

In plain terms, SPF lists the servers that may send mail for your domain. DKIM signs each message so the receiver can check that nobody changed it. DMARC tells the receiver what to do when those checks fail, and it ties the checks to the address in your From line. If you send from Google Workspace or Microsoft 365, the admin console walks you through SPF and DKIM. Add a DMARC record with the policy set to none to start; Gmail accepts that for bulk senders.

Do this even if you plan to send ten emails a day. A message that fails authentication starts from a worse position than a message with a weak subject line, and you cannot fix it later with better copy.

2. Know when Gmail treats you as a bulk sender

Gmail calls you a bulk sender when you send close to 5,000 messages or more to personal Gmail accounts in 24 hours, counting all mail from the same primary domain. The same page says that a sender who crosses that line once is treated as a bulk sender permanently.

Bulk senders must have SPF and DKIM and DMARC, and the From domain must align with the SPF or DKIM domain. Marketing messages must also carry a one-click unsubscribe header and a visible unsubscribe link. Gmail also wrote that from November 2025 it is ramping up enforcement, with temporary and permanent rejections for mail that does not comply.

A founder sending cold email by hand will not reach 5,000 a day. But your product emails, newsletter and cold outreach can share one domain, and the count is per domain. If your app sends a lot of mail, keep the bulk rules in mind for the whole domain, or send outreach from a separate subdomain with its own records.

3. Stay far below the spam rate limits

This is the number that matters most. Gmail tells senders to keep the spam rate in Postmaster Tools below 0.10% and never reach 0.30%. Yahoo uses the same ceiling: keep your spam rate below 0.3%. Gmail's FAQ adds that a rate above 0.1% already hurts inbox delivery for bulk senders.

Here is what those percentages mean for a small campaign. Take a founder who sends 500 cold emails in a month. Gmail's target of 0.10% of 500 is 0.5, so a single spam report already puts that founder at 0.2%, twice the target. Two reports make 0.4%, which is above the 0.3% line Gmail and Yahoo both draw. At this volume, every person who clicks the spam button counts.

That arithmetic is why small senders should care more about who gets the email than about trigger words. People mark mail as spam when it is irrelevant to them. A short list of people who have the problem you solve produces fewer reports than a long list of job titles. A good place to find those people is where they already describe the problem in public, which our guide on promoting your SaaS on Reddit without getting banned covers from the conversation side.

4. Write to fewer people, and to the right person

Bad addresses bounce, and repeated bounces tell a mailbox provider that you bought or guessed a list. Check each address before you send. Write to one decision-maker at each company, not to five people at once, because five copies of the same email multiply your chances of a spam report.

LitePal is built for this part of the work. It finds companies that fit your product, names the person to write to, checks their email and drafts a first line. You send the email yourself, from your own mailbox, so your domain and your reputation stay in your hands.

Keep the email itself plain. Write it like a note from one person to another: no images, no tracking-heavy templates, one link at most. A first line that shows you read something about their company does more for replies than any formatting trick.

5. Make it easy to leave, and follow the law

Cold B2B email is not exempt from the law in the United States. The FTC guide to CAN-SPAM states that the law makes no exception for business-to-business email. The same guide asks for honest headers and subject lines, a valid physical postal address, and a clear way to opt out. You must honor an opt-out within 10 business days, and each email in violation can cost penalties of up to $53,088 according to the January 2024 figures on that page.

The mailbox providers move faster than the law. Yahoo tells bulk senders to honor unsubscribes within 2 days, and Gmail recommends doing it within 48 hours. For a founder sending by hand, the simple version is one honest line at the end: tell people to reply if they do not want to hear from you again, and then stop, the same day.

An easy way out also protects your spam rate. A person who can reply "no thanks" does not need the spam button.

6. Watch the numbers every week

Sign up for Google Postmaster Tools for your sending domain. Gmail's FAQ says it calculates the spam rate daily, so a bad week shows quickly. If the rate climbs toward 0.1%, stop and look at the list before you send more. Change who you write to before you change the subject line.

Send at a human pace. A new domain that goes from zero to hundreds of emails in a day looks like what it often is. Start with a few emails a day, read every reply, and grow only when replies stay polite and the spam rate stays flat.

A checklist to keep cold emails out of spam

• SPF and DKIM are set for the domain you send from, and DMARC exists with at least p=none
• The From domain matches the domain that SPF or DKIM checks
• Outreach is on a subdomain if your app already sends a lot of mail
• Each address is checked before you send, and you write to one person per company
• Every person on the list has the problem you solve, and the first line shows it
• The email is plain text with one link at most and your postal address
• The last line tells people how to opt out, and you honor it the same day
• Postmaster Tools is connected, and you stop sending when the spam rate nears 0.1%

Paste your site into LitePal to get a short list of companies that fit, the person to write to at each with a checked email, and a first line drafted for every one.