The 2026 Cold Email Deliverability Checklist (SPF, DKIM, DMARC)

Here is the uncomfortable truth about cold email: the best-written email in the world is worth zero if it lands in spam. Reply rates are usually a deliverability problem wearing a copy problem's clothes.

Most teams rewrite their subject lines for weeks when they should fix their DNS records in an afternoon. This is the 2026 checklist - run it once, and your emails start reaching the inbox instead of the abyss.

Step 1: The DNS triple - SPF, DKIM, DMARC

Three DNS records prove to Google and Microsoft that your email is really from your domain. Without them, inbox providers treat you like a stranger.

• SPF - lists which servers are allowed to send mail for your domain. Usually one TXT record like v=spf1 include:_spf.yourprovider.com ~all.
• DKIM - signs your emails with a private key; the public key sits in DNS. Your provider gives you the selector and value (e.g. default._domainkey).
• DMARC - tells providers what to do with unauthenticated mail (p=none to start, then p=quarantine).

Check yours with a free tool like dmarcian or Google Admin Toolbox - paste your domain and look for three green checks.

Step 2: Warm up before you send

A brand-new domain or mailbox that suddenly sends 100 emails triggers every spam filter. Warm up over 2-3 weeks: start at 5-10 emails per day, add 5 per day, and only send to people likely to open and reply.

If you are using a fresh domain for outbound, give it two weeks of low-volume sending before any campaign. Most deliverability disasters happen in week one.

Step 3: Respect volume ceilings

The safe range for a single warmed mailbox is roughly 10-30 emails per day. Push past 50 and spam complaints start compounding. If you need more volume, add mailboxes and domains - not more sends from one address.

Step 4: Links are a lever - use them late

Every link raises your spam score. Rules of thumb:

• No links in the first email or first follow-up.
• Put the link in the second or third touch, or offer it on reply.
• Never use link shorteners on cold email - they look exactly like spam.

Step 5: Watch the words that trigger filters

Avoid all-caps, excessive exclamation marks, and classic spam phrases ("guaranteed", "free trial!!!", "act now"). Write like a person writing to a person: short sentences, one ask, no urgency theater.

Step 6: Reply to every reply

Engagement is the strongest inbox signal. A mailbox that replies quickly gets better placement; a mailbox that sends and never engages drifts toward spam. Set a rule: any reply gets answered within the hour.

Step 7: Verify the list before sending

Bounces are the fastest way to wreck a domain. Verify every address before a campaign - a 3% bounce rate is already toxic. If you are unsure about an address, leave it out. A smaller, verified list beats a big, rotting one.

The checklist in one line

DNS records green, mailbox warmed, 10-30 sends a day, no early links, no spam language, fast replies, verified list. That is the entire game. Do this and your email has a fair fight for the inbox - then the copy can do its job.