Cold Email Deliverability: Setup, Limits and Warning Signs

Cold email deliverability rests on five habits: send from a separate secondary domain, authenticate it with SPF, DKIM and DMARC on day one, warm it up over several weeks, keep bounces and complaints very low, and cap daily volume per domain. Content and targeting matter, but infrastructure mistakes sink more campaigns.

Why cold email is harder than other mail

Recipients of newsletters asked for them. Recipients of cold email did not, so the same message is more likely to be reported as spam. Mailbox providers watch complaint rates closely, and Google’s sender guidelines ask bulk senders to stay under a 0.3% user-reported spam rate. For cold mail the margin is thin: a few unhappy recipients per thousand put you over.

That is why cold programs lean on conservative infrastructure. The choices below follow the published guidance in BusinessMCP’s cold email infrastructure guide and its cold email deliverability and compliance guide, which are vendor documents, so treat the numbers as one source’s rules of thumb.

The setup in order

1. Choose a separate domain. Never send cold outreach from your primary domain, because its reputation covers invoices, support and customer email. A close variant (getacme.com or tryacme.com style) costs about $10 to $15 a year per BusinessMCP’s guide. Details in sending domain versus subdomain.
2. Authenticate immediately. Publish SPF, DKIM and a DMARC record the same day you buy the domain. Run it through the free BusinessMCP checker to confirm all four records before a single message goes out.
3. Create a few mailboxes. Two or three inboxes per domain is the suggested setup. Mailbox hosting is about $70 to $100 per inbox per year in the same guide.
4. Warm up gradually. Roughly two to four weeks of ramping before real volume; stagger multiple domains by one to two weeks.
5. Verify every address before sending, as explained in email verification and bounce rate.
6. Cap volume. BusinessMCP enforces 200 emails per day per sending domain across all campaigns combined, and keeps individual inboxes to roughly 20 to 50 sends a day. No provider publishes an official figure, so these are caution levels, not rules.

Capacity planning

Domains	Daily capacity at 200/day ceiling	Notes
1	200	Enough for many small teams
2	400	Stagger warm-up
3	600	Check each domain’s metrics separately
5	1,000	Needing this many often signals a targeting problem

The figures assume fully warmed domains. BusinessMCP’s guide adds a useful sanity check: if you need ten domains to hit your volume goal, the problem is usually targeting, not capacity.

Key takeaway: more domains is not a deliverability strategy. Smaller, better-targeted sends from fewer domains outperform scale built on burned reputation.

The numbers to watch

• Bounce rate. About 2% is the benchmark cited; persistently above about 5% is the danger zone.
• Complaint rate. The 0.3% line from Google; aim far below. BusinessMCP’s finder-versus-verification guide cites under 0.1%.
• Reply and positive-reply rate. Real replies are the strongest signal you can generate.
• Postmaster Tools for Gmail domain reputation, checked weekly if volume is large enough to populate it.

Review both your platform’s data and Postmaster Tools. If either turns red, pause that domain, find the cause, and only then resume.

Common cold email mistakes

• Stacking several campaigns on one domain. BusinessMCP calls this a common reason for burned reputation.
• Buying a list and sending without verification. Hard bounces and spam traps accumulate fast.
• Skipping warm-up because a tool promises it is unnecessary.
• Heavy tracking. Multiple tracked links and image pixels add risk for little value.
• No clear opt-out. Include an easy way to decline, and honour it immediately.
• Ignoring the law. CAN-SPAM in the US and GDPR/ePrivacy rules in Europe set conditions for outreach. The FTC’s compliance guide is a primary source for US rules; other regions differ, and legal advice is worth getting.

When a domain is burned

If metrics stay red after you fix the cause, BusinessMCP advises retiring the domain and moving volume to a healthy one. Do not keep hammering a damaged domain, because that deepens the problem. Keep your primary domain safe by never having used it for outreach in the first place.

What good looks like

A healthy cold program has verified lists, one or two sending domains with all three authentication records passing, volume well under the caps, clean bounce and complaint numbers, and short plain messages written to a specific person for a specific reason. Everything else is detail. For the underlying authentication steps see the setup guide, and for provider rules that apply as volume grows, see Gmail and Yahoo bulk sender requirements.

A 30-day launch plan

A concrete calendar helps, because the temptation is always to start sending sooner than the domain is ready. This plan follows the ramp ranges in BusinessMCP’s guide and is a starting point, not a promise.

Week	Domain and DNS	Sending	Review
Before launch	Buy the domain weeks ahead, publish SPF, DKIM, DMARC the same day, add a redirect	None	Confirm all four records pass
1	Create two or three mailboxes	A handful of messages a day to people who know you or expect mail	Read headers of each test
2	No changes	Increase slowly, still only verified addresses	Check bounces daily
3	Add a second domain if needed, staggered	Approach, but do not exceed, the per-domain ceiling	Check complaints and replies
4	Review	Full cadence if every metric is clean	Decide whether to add domains or fix targeting

Warm-up services that exchange mail between mailboxes are sold widely. The evidence that artificial engagement helps is thin, and providers can penalise manufactured interaction, so spend the effort on real, relevant recipients instead.

Writing for deliverability, not just reply rate

Short, specific messages tend to perform better and generate fewer complaints. A message that clearly says who you are, why you chose this person and how to decline is both more ethical and safer. Avoid attachments in first touches, keep links to a minimum and use plain formatting. Follow-ups matter too; BusinessMCP’s guide to follow-up emails covers cadence, and the same rules apply: stop when someone declines, and suppress them permanently.

Checking the whole setup before day one

Before the first message goes out, run the sending domain through the free BusinessMCP email deliverability checker. It grades MX, SPF, DKIM and DMARC and shows the record to paste when something is missing. Then send a real test to a personal mailbox and read the headers, as described in our email deliverability test article. Only when both checks are clean should the first prospect receive a message. If you see problems later, the spam diagnostic gives the order in which to investigate.