Deliverability decides whether your message reaches an actual inbox, gets shuffled into promotions, disappears into spam, or never shows up anywhere at all. It isn't a switch you flip once — six separate pieces have to work in concert, and any one of them being weak drags the whole thing down.
I've watched people spend hours polishing email copy while sending from a domain with zero authentication configured. The copy was never the problem. This guide moves through every lever in the order it actually matters, so your time goes where it counts.
Defining deliverability properly
Delivery and deliverability get confused constantly, but they're not the same thing. Delivery just means the receiving server accepted your message. Deliverability means an actual person saw it somewhere they'd notice. A message can be technically delivered and still sit buried in spam — both things true simultaneously.
Google, Microsoft, and the rest make the placement call in milliseconds, drawing on signals collected over weeks beforehand. By the time you hit send, most of that verdict is already locked in. The real work of deliverability happens well before the campaign launches, not during it.
What providers are actually watching
Every mailbox provider functions as a black box from the outside, but at this point the inputs feeding it are well understood. They sort into three groups: who you are, how you behave, and how people respond.
- Identity signals. Your sending IP, your domain, your authentication records — basically whether you're a known, verified sender or an anonymous stranger.
- Behavior signals. Volume, consistency, bounce rate, complaint rate — whether you act like a real business or a spam operation.
- Engagement signals. Opens, replies, whether people rescue you from spam or just delete unread — whether anyone actually wants what's landing in their inbox.
Everything else covered here traces back to one of those three buckets.
Building solid infrastructure
Sending infrastructure is the foundation layer, and it's the part most people rush past. Two decisions shape the outcome: which IP you send from, and which domain you send from.
On the IP side, ask yourself whether the reputation attached to it is yours alone or shared with strangers. A dedicated IP means only your own sending shapes your standing. A shared pool blends you in with everyone else using it. That whole tradeoff gets a full walkthrough in the dedicated vs shared IP guide.
On the domain side, keep cold email entirely off your primary domain. Send it from dedicated domains instead, so a reputation hit never reaches your main site or your team's everyday inbox. This single decision outweighs almost everything else in your setup, and it's covered in full in the infrastructure setup guide.
Proving your identity
Authentication is how you prove you're genuinely allowed to send from your domain. Skip it and mailbox providers treat you as suspicious by default — and as of 2026, Google and Microsoft essentially require it from anyone sending at bulk volume.
SPF spells out which servers are authorized to send on your behalf. DKIM cryptographically signs your mail so it can't be tampered with in transit. DMARC tells receiving servers what to do when either check comes back failed. All three need to be configured correctly before your first cold email goes anywhere. Walk through setup in the SPF, DKIM, and DMARC guide, and confirm your own records with the free SPF, DKIM and DMARC checker.
Earning reputation through warmup
A newly created domain and IP show up with no reputation whatsoever. Fire off 2,000 cold emails on day one and you'll look exactly like a spammer, because acting like an established sender is a signal you haven't actually earned yet.
Warmup builds that reputation gradually, sending a small and steadily rising volume of mail that actually gets opened and replied to, teaching providers you're legitimate before real campaign volume kicks in. Plan on two to three weeks per account. Sendbox's human-like warmup manages the ramp itself and throttles back automatically whenever account health slips, and the warmup guide covers the full schedule.
Keeping the list clean
Your list is really a behavior signal in disguise. Sending to addresses that don't exist produces bounces, and once your bounce rate climbs past 2 to 3 percent, providers read that as dirty data — precisely what a spammer's list looks like from the outside.
Validate every address before it ever hits a campaign. A good validator flags invalid mailboxes, catch-all domains, and risky addresses so you can strip them out ahead of time. Sendbox validates automatically on import, and the free email verifier handles on-demand spot checks. The bounce rate guide goes deeper, including the strict gateways that bounce even perfectly valid addresses. Blasting a giant unverified list is the fastest way to torch a domain you spent weeks warming up.
Your writing and how people react to it
Content carries less weight than most people assume, and it only matters once the foundation beneath it is solid. Spam filters scan for trigger phrases, link-heavy formatting, image-heavy mail, and loud styling. Keep cold email short, plain, and light on links. The free spam checker catches the obvious offenders.
Engagement, though, can't be faked. Replies are the strongest positive signal cold email generates, which is exactly why a small, well-targeted list with relevant copy beats a giant generic blast even on placement — not just on outcomes. Write to earn replies, and the deliverability side largely takes care of itself.
Knowing where you actually stand
You can't fix what you're not tracking. Keep an eye on these continuously, not as a one-time check:
- Inbox placement. Run an inbox placement test before any campaign that matters, to see whether you're landing in primary, promotions, or spam.
- Bounce rate, per mailbox. A spike on one mailbox is your earliest warning sign. Breaking it out by mailbox catches trouble before it spreads.
- Blacklist status. Check domains and IPs regularly with a blacklist checker so a listing doesn't sit unnoticed for days.
- Reply rate. The clearest real-world proof that your mail is both landing and actually connecting.
Deliverability isn't a project you finish — it's a system you keep running. Get infrastructure and authentication right once, then keep watching behavior and engagement signals week after week.