Cold Email Deliverability Issues: Diagnosis Checklist

Cold email is the highest-risk category in email sending. You're emailing people who haven't opted in, which means higher complaint rates, more spam-trap exposure, and tighter filter scrutiny than any other use case. When deliverability breaks, it breaks fast. This guide is the diagnostic checklist I use when an agency or sales team comes to me with cold email problems.

The fix is usually mechanical. Five things break cold email deliverability; check them in order.

The five-cause diagnostic

In rough order of frequency:

1. Authentication broken or missing. SPF, DKIM, DMARC not configured or not aligning.
2. Mailbox not warmed. Sending from a fresh Google Workspace mailbox to 500/day triggers filters.
3. Domain too young. Domains under 30 days old are quiet-suspect at most receivers.
4. Content patterns. Spammy subject lines, link-heavy, attachments, image-only.
5. List quality. Bad data with high bounce rate signals you don't know your audience.

Diagnose by ruling each out in order.

Step 1: Authentication check

Send a test cold email from your real campaign mailbox to [email protected]. Get the report. You need:

• SPF: pass, aligned
• DKIM: pass, aligned to the From domain
• DMARC: pass (or at least not fail)
• mail-tester score: 9/10 or higher

If any of these fail, fix authentication before anything else. See the SPF setup guide and the DKIM setup guide. For DMARC alignment specifically, see DMARC aggregate report reading.

# Quick CLI check
dig TXT yourdomain.com | grep spf
dig TXT default._domainkey.yourdomain.com
dig TXT _dmarc.yourdomain.com

Practitioner note: I see DKIM misconfiguration roughly half the time on initial cold email audits. The most common failure: the DKIM CNAME was added in DNS but pointing at the wrong selector, or the cold-email tool was reconfigured and the old selector is stale. mail-tester shows this immediately.

Step 2: Mailbox warmup status

Each cold-email mailbox needs 21-30 days of warmup before campaign volume. Most tools (Instantly, Smartlead) ship with built-in warmup that sends and receives mail with other warmup pool members.

Verify:

• Warmup ran for the full 21-30 days, not skipped
• Daily send volume during warmup ramped progressively (5 → 10 → 20 → 40 → 80)
• Reply rate during warmup was high (>30%)
• No deferrals or 5xx errors during warmup

If you skipped or shortened warmup, restart it. Your cold campaign is essentially burned.

Step 3: Domain age

Mailbox providers treat domain registration date as a signal. A domain registered yesterday and immediately sending cold mail looks like a throwaway spam domain. Standard practice:

• Register the domain at least 30 days before any cold sends
• Add basic content (a simple landing page is fine)
• Configure MX, SPF, DKIM, DMARC immediately
• Wait the 30 days
• Then start mailbox warmup
• Then start campaigns

Total time from registration to first campaign: ~60 days. There's no good shortcut.

Step 4: Content patterns

Common cold email content red flags:

• ALL CAPS in subject line
• Excessive emojis (any in B2B)
• Image-only or image-heavy body
• Multiple links
• Tracking link rewrites that don't match your domain
• Attached PDFs or files
• "Re:" or "Fwd:" prefixes when not actually replies
• Aggressive personalization tokens that fail ({first_name} showing as literal text)

Test your template through mail-tester and Glockapps to see how filters score it.

Practitioner note: I had a client whose cold reply rate dropped from 4% to 0.8% with no campaign change. Cause: their sequence tool started rewriting links through a generic tracking domain (track.io/abc123). Receivers downgraded sends with mismatched tracking domains. Switching to custom domain tracking on their sending domain recovered reply rate inside two weeks.

Step 5: List quality

Run every list through a validator before sending. Standards:

Bounce rate (validated list)	Status
Under 2%	Healthy
2-3%	Watch carefully
3-5%	Pause and re-validate
Over 5%	Stop, full data review

Validators:

• NeverBounce — fast, integrated with most sequence tools
• ZeroBounce — strong on catch-all detection
• MillionVerifier — cost-effective for high volume
• Bouncer — good API

Validation catches typo addresses, role accounts (info@, sales@), known traps, and disposable domains. Skip this and you're flying blind.

Tools to diagnose

• mail-tester.com — free, fast spam score and authentication check
• Glockapps — inbox placement testing across multiple providers
• Google Postmaster Tools — domain reputation if you're sending volume to Gmail
• Microsoft SNDS — IP reputation at Outlook/Hotmail
• MXToolbox — blocklist check
• Instantly/Smartlead built-in — warmup status, recent delivery results

For monitoring tools more broadly, see deliverability monitoring tools.

When to burn it and restart

Sometimes diagnosis says the setup is unsalvageable. Signs:

• Domain on Spamhaus SBL/CSS for 30+ days
• All mailboxes on the domain showing 30%+ deferrals
• Postmaster Tools showing red domain reputation
• Multiple blocklist entries

In these cases, the cheapest path is usually a new sending domain. Burn the old one, register a new variant, follow the standard 60-day setup, and migrate your campaigns. See cold email infrastructure complete guide for the full setup.

Practitioner note: Don't try to fix a fully burned cold sending domain. I've watched agencies spend 3-4 months trying to rehab a domain when a fresh domain would have been campaigning within 60 days. The math is brutal: you can't rebuild reputation faster than you can build it from scratch.

If you're seeing cold email deliverability problems and want a methodical diagnosis with concrete fixes, book a consultation. I do cold email infrastructure audits including authentication, warmup verification, list quality review, and content pattern analysis.

Sources

• Gmail Sender Guidelines — Google
• Microsoft sender requirements — Microsoft
• M3AAWG Sender Best Common Practices — M3AAWG
• Mail-Tester — Mail-Tester
• Glockapps inbox placement testing — Glockapps

---

v1.0 · May 2026