Here is the uncomfortable truth about outbound email in 2026: your sequences, your copy, your offer, none of it matters if your emails land in spam. Deliverability is the foundation that every pipeline dollar sits on top of. A team sending 500 emails per day with 95% inbox placement will generate 10x the pipeline of a team sending 2,000 emails per day with 40% inbox placement. The math is not even close.
Google and Microsoft have continued tightening their filtering algorithms every quarter. The February 2024 bulk sender requirements from Google were just the beginning. In 2025 and into 2026, we have seen engagement-based filtering become the dominant signal, which means that even technically perfect authentication will not save you if your sending patterns look spammy. This guide covers the complete technical setup from domain purchase to ongoing monitoring, based on infrastructure we have built for dozens of B2B outbound programs generating $2M+ in pipeline per quarter.
Why Deliverability Is the Only Metric That Matters
Before we get into setup, let us quantify the problem. The average cold email inbox placement rate across B2B senders is roughly 62%, according to data from Instantly and Smartlead aggregated across thousands of accounts. That means 38% of cold emails never reach the primary inbox. They either land in spam, promotions, or get silently dropped. If your team is sending 1,000 emails per day, that is 380 emails per day that generate zero value but still damage your sender reputation.
The compounding effect is what kills most outbound programs. Poor deliverability leads to low engagement rates, which signals to email providers that your messages are unwanted, which further reduces deliverability. We have seen accounts go from 90% inbox placement to under 30% in as little as two weeks when this spiral kicks in. Recovering from that takes 4-6 weeks of careful remediation.
Conversely, teams with 95%+ inbox placement see reply rates 3-4x higher than teams at 70% placement, even with identical copy. The inbox is the bottleneck for everything downstream.
SPF, DKIM, and DMARC: The Authentication Foundation
Email authentication is table stakes in 2026. Without proper SPF, DKIM, and DMARC records, major email providers will either reject your messages outright or route them directly to spam. Here is what each does and exactly how to set them up.
SPF (Sender Policy Framework)
SPF tells receiving mail servers which IP addresses and services are authorized to send email on behalf of your domain. Without SPF, anyone could spoof your domain, so email providers treat missing SPF records as a red flag.
To set up SPF, add a TXT record to your domain DNS. For Google Workspace, the record looks like: v=spf1 include:_spf.google.com ~all. If you are using a sending tool like Instantly or Smartlead alongside Google Workspace, you need to include their SPF records as well. The key constraint is that SPF allows a maximum of 10 DNS lookups. Each include statement counts as one lookup, and nested includes count too. Going over 10 causes a permerror, which is treated as an SPF failure.
A common mistake is stacking too many services. If you have Google Workspace, Instantly, HubSpot, and a transactional email provider all in one SPF record, you can easily exceed the 10-lookup limit. The solution is to use separate domains for separate purposes, which we cover in the domain strategy section.
DKIM (DomainKeys Identified Mail)
DKIM adds a cryptographic signature to every email you send. The receiving server checks this signature against a public key published in your DNS to verify the message was not altered in transit and actually came from your domain. Google Workspace generates DKIM keys automatically, but you need to publish the public key in your DNS.
In Google Admin, go to Apps, then Google Workspace, then Gmail, then Authenticate Email. Select your domain and click Generate New Record. Google will give you a TXT record to add to your DNS. The default selector is google, and the key length should be 2048 bits. After adding the record, go back to Google Admin and click Start Authentication. It can take up to 48 hours to propagate, but usually works within a few hours.
For Microsoft 365 / Outlook, DKIM setup happens in the Microsoft 365 Defender portal under Email Authentication. You will need to create two CNAME records for each domain. Microsoft provides the exact records once you initiate DKIM signing for the domain.
DMARC (Domain-based Message Authentication, Reporting & Conformance)
DMARC ties SPF and DKIM together and tells receiving servers what to do when authentication fails. It also enables reporting so you can see who is sending email using your domain. Start with a monitoring-only policy: v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com. This tells providers to send you reports but not to reject any mail. After 2-4 weeks of monitoring, once you confirm all legitimate sending sources are properly authenticated, move to p=quarantine and eventually p=reject.
The rua tag specifies where aggregate reports get sent. These XML reports show you every IP address that sent email using your domain, along with pass/fail results for SPF and DKIM. Tools like DMARCian, Postmark DMARC, or EasyDMARC parse these reports into readable dashboards. Monitoring DMARC reports is critical because it helps you catch unauthorized use of your domain and identify authentication issues before they tank your deliverability.
Domain Strategy: Secondary Domains, Naming, and Volume Distribution
Never send cold email from your primary domain. This is the single most important rule in outbound email infrastructure. If your primary domain gets blacklisted, your entire company loses email access, including internal communications, customer emails, and transactional messages. The risk is not worth it under any circumstance.
How Many Domains Do You Need
The formula depends on your target sending volume. Each domain should send a maximum of 50-75 emails per day across all inboxes on that domain. Each inbox should send 25-35 emails per day maximum. For a program sending 500 emails per day, you need roughly 7-10 domains with 2-3 inboxes each. For 1,000 emails per day, plan for 15-20 domains. This feels like a lot, but domains cost $10-15 each per year. That is $150-300 per year for the infrastructure to protect your brand and sustain your outbound program.
Domain Naming Conventions
Your secondary domains should be close enough to your primary domain that they look legitimate, but distinct enough that reputation issues do not cross-contaminate. Good patterns include: getacme.com, tryacme.com, acmehq.com, meetacme.com, acmeleads.com, or hiacme.com. Avoid domains that look obviously fake or spammy. The domain should pass a quick visual inspection by the recipient. We typically buy domains from Namecheap or Cloudflare, point DNS to Cloudflare for easy record management, and set up a simple redirect to the primary domain so the secondary domain does not look like a dead page.
Domain Age and Setup Timeline
Brand new domains have zero reputation. Email providers are inherently suspicious of new domains sending cold email. After purchasing domains, let them age for at least 2 weeks before sending any email. During this aging period, set up authentication records (SPF, DKIM, DMARC), create your Google Workspace or Microsoft 365 accounts, and begin the warmup process. The total timeline from domain purchase to full sending volume is typically 4-6 weeks.
Inbox Setup: Google Workspace vs. Microsoft 365
Both Google Workspace and Microsoft 365 work for cold email, but they have different strengths. Google Workspace has better integration with most sending tools, slightly better deliverability to other Gmail users (which is a large portion of B2B), and costs $7.20 per user per month on the Business Starter plan. Microsoft 365 tends to have better deliverability to corporate Outlook inboxes and costs $6 per user per month on the Business Basic plan.
The optimal approach for most teams is to split across both providers. Use Google Workspace on half your domains and Microsoft 365 on the other half. This diversifies your infrastructure risk and improves deliverability across recipient mail providers. Each inbox needs a real-looking profile: first name, last name, a professional profile photo (use AI-generated headshots from tools like Generated Photos), and a signature with name, title, company, and phone number.
Set up 2-3 inboxes per domain. Each inbox represents a distinct sender persona. If your domain is getacme.com, create accounts like jeff@getacme.com, sarah@getacme.com, and mike@getacme.com. Each inbox sends 25-35 emails per day, giving you 75-105 emails per day per domain.
Email Warmup: Protocol, Tools, and Timeline
Warmup is the process of gradually building sender reputation by having your new inboxes send and receive emails that get opened, replied to, and marked as important. Without warmup, sending cold email from a new inbox will immediately trigger spam filters.
How Warmup Works
Warmup tools maintain large networks of real email accounts. Your inbox sends emails to these accounts, and they automatically open them, reply, and move them out of spam if needed. This creates positive engagement signals that build your sender reputation with email providers. The major warmup tools in 2026 are Instantly (built-in warmup with all plans), Smartlead (built-in warmup), Warmbox ($19/mo per inbox), and Mailreach ($25/mo per inbox).
Warmup Timeline and Volume Ramp
Week 1-2: Start with 5-10 warmup emails per day. Your inbox is brand new, so keep volume extremely low. Week 3-4: Ramp to 20-30 warmup emails per day. Monitor your inbox placement score in your warmup tool. You want to see 90%+ inbox placement before increasing. Week 5-6: Ramp to 40-50 warmup emails per day while beginning to send 5-10 real cold emails per day. Week 7-8: Full warmup at 40-50 per day, cold sending at 15-25 per day. Week 9+: Maintain warmup at 20-30 per day indefinitely while cold sending at 25-35 per day.
Critical rule: never stop warmup entirely. Even after your inbox is fully warmed, keep sending 15-20 warmup emails per day to maintain positive engagement signals. Most deliverability drops we diagnose trace back to teams turning off warmup to save costs or because they thought it was no longer needed.
Sending Limits, Rotation, and Campaign Structure
Google has a hard sending limit of 500 emails per day for Workspace accounts and 2,000 for legacy G Suite. Microsoft 365 allows 10,000 per day, but hitting anywhere near that limit will destroy your reputation. Practical limits for cold email are far lower than technical limits.
Set up your sending tool to rotate across all inboxes evenly. If you have 20 inboxes, each sending 30 emails per day, your total capacity is 600 emails per day. Instantly and Smartlead both handle rotation automatically. Set a delay between emails of 3-7 minutes (randomized). Set a daily cap per inbox of 30-35 emails. Enable inbox rotation so that the same prospect never receives follow-ups from different inboxes, as that looks extremely spammy.
Campaign structure matters for deliverability too. Keep sequences to 3-4 steps maximum. The first email should be your strongest, because each subsequent email has lower deliverability than the one before it. Space follow-ups 3-5 business days apart. Avoid sending on weekends and outside business hours, as engagement rates are lower and providers notice.
Spam Trigger Words and Content Best Practices
Content-based spam filtering is more sophisticated than ever. In 2026, it is less about individual trigger words and more about overall message patterns. That said, certain patterns consistently cause problems. Avoid excessive capitalization, multiple exclamation points, dollar signs, and phrases like free, guaranteed, act now, limited time, or click here. More importantly, avoid HTML-heavy emails. Cold emails should be plain text or very minimal HTML. No images in the first email. No more than one link. No tracking pixels if you can avoid them.
The biggest content signal is whether your email reads like a real one-to-one message or a mass blast. Short paragraphs (2-3 sentences max), conversational tone, specific personalization, and a simple question as the CTA all signal a real email. Long paragraphs, bullet points, bold text, and multiple CTAs signal a marketing blast. Write emails that would pass the test: if a human at Google read this, would they think it was a personal email or a marketing email?
Monitoring Tools and Ongoing Maintenance
Google Postmaster Tools
Google Postmaster Tools is free and essential. It shows your domain reputation (High, Medium, Low, Bad), spam rate, authentication results, and encryption stats for mail sent to Gmail users. Set it up for every sending domain. Check it weekly. If domain reputation drops below High, pause cold sending from that domain immediately and investigate.
Mail-Tester.com and MXToolbox
Mail-tester.com scores your email setup out of 10. Send a test email to the unique address they give you and get instant feedback on authentication, content, and blacklist status. Run this check monthly for every sending inbox. MXToolbox checks your domain and IP against over 100 blacklists. If you show up on any major blacklist (Spamhaus, Barracuda, SORBS), you need to request delisting immediately.
In-Platform Analytics
Both Instantly and Smartlead provide inbox placement testing, open rates, reply rates, and bounce rates at the inbox level. The key metrics to watch are bounce rate (keep under 3%, ideally under 1%), spam complaint rate (keep under 0.1%), open rate (should be 45%+ for properly warmed inboxes sending to verified emails), and reply rate (benchmark is 2-5% for cold outbound). If any inbox shows a bounce rate above 5% or open rates below 30%, pause it and investigate.
What to Do When Deliverability Drops
Deliverability drops happen to everyone eventually. The key is catching them early and responding quickly. Step 1: Pause all cold sending from affected inboxes. Step 2: Check authentication records, as DNS changes can break SPF or DKIM. Step 3: Check blacklists using MXToolbox. Step 4: Review Google Postmaster for reputation changes. Step 5: Audit recent email content for spam triggers. Step 6: Check your email list quality, because a batch of bad emails can spike bounces and tank reputation.
Recovery protocol: Increase warmup volume to 40-50 emails per day. Send zero cold email for 1-2 weeks. After two weeks, check placement scores. If above 90%, resume cold sending at 50% of previous volume. Ramp back to full volume over 2-3 weeks. If the inbox does not recover after 3 weeks, retire it and spin up a replacement on the same domain.
Instantly vs. Smartlead: A Deliverability-Focused Comparison
Both platforms are purpose-built for cold email at scale, but they have meaningful differences for deliverability. Instantly offers a larger warmup network (over 500K accounts), built-in email verification, and inbox rotation across unlimited accounts on higher-tier plans. Pricing starts at $37/month for 5,000 emails. Smartlead has a slightly smaller warmup network but offers more granular sending controls, better API access, and master inbox functionality that consolidates replies. Pricing starts at $39/month for 6,000 emails.
In our testing across multiple client accounts, Instantly consistently delivers 2-4% higher inbox placement rates, likely due to its larger warmup network. Smartlead offers better deliverability controls for advanced users who want to fine-tune sending patterns. For most teams, Instantly is the better starting choice. For teams sending over 2,000 emails per day with dedicated ops resources, Smartlead's advanced controls become more valuable.
Putting It All Together: The Complete Setup Checklist
Week 1: Purchase 5-10 secondary domains. Set up Cloudflare DNS. Configure SPF, DKIM, and DMARC on every domain. Create Google Workspace and Microsoft 365 accounts (2-3 per domain). Week 2-3: Let domains age. Set up warmup on all inboxes. Begin monitoring warmup scores. Week 4-5: Start sending 5-10 cold emails per day per inbox alongside warmup. Monitor bounce rates, open rates, and placement. Week 6+: Ramp to full volume (25-35 per inbox per day). Set up Google Postmaster for all domains. Create a weekly monitoring routine.
The entire infrastructure for a 500 email/day program costs roughly $200-300 per month: $70-100 for Google Workspace accounts, $50-80 for Microsoft 365 accounts, $37-79 for Instantly or Smartlead, and $15-25/year per domain. That is a fraction of what most teams spend on a single SDR, and it is the foundation that makes every other outbound investment worthwhile. Get deliverability right first, and everything else in your outbound program gets dramatically easier.