You avoid the spam folder by fixing five things in order: authentication, sender reputation, list quality, message content, and sending volume — and list quality is the one most people skip.
Most cold email that lands in spam does not get there because of one bad word in the subject line. It gets there because the underlying signals a mailbox provider reads — who is sending, from where, to whom, and how often — look like the signals a spammer produces. Google and Microsoft do not read your intent. They read your patterns. This post walks through each cause of poor placement and the specific fix, in the order that actually moves the needle. We run cold email at scale for clients, so the guidance here is what we do, not theory.
Start with authentication, because nothing else matters without it
Authentication is how a receiving server confirms that mail claiming to come from your domain actually came from you. If it fails, you are filtered before content is even evaluated. There are three records to get right.
- SPF lists which servers are allowed to send for your domain. If your sending tool is not in the record, or the record has too many lookups, mail gets flagged.
- DKIM signs each message cryptographically so the receiver can verify it was not altered and truly came from your domain.
- DMARC tells receivers what to do when SPF or DKIM fail, and gives you reporting. Start with a monitoring policy, confirm your legitimate mail passes, then tighten it.
Get all three passing before you send a single cold email. This is a one-time setup per sending domain and it is non-negotiable. A missing DKIM signature alone is enough to route you to spam at the major providers. If you are not sure how to read a DMARC report, our cold email deliverability guide breaks down the setup step by step.
One more structural decision: send cold email from a separate domain, not your primary company domain. If a cold campaign damages reputation, you do not want that bleeding into the invoices, contracts, and internal mail that ride on your main domain. Buy a lookalike domain, authenticate it, and keep the two worlds apart.
Sender reputation is a score you earn slowly and lose fast
Every sending domain and IP carries a reputation with each mailbox provider. It is built from how recipients react to your mail — opens, replies, and the absence of complaints and bounces — and it decays quickly when those signals turn negative. A brand-new domain has no reputation, which is why blasting a new domain with hundreds of cold emails on day one is the fastest way to get buried.
The fix is warmup and pacing. Warm a new domain gradually over several weeks, starting with a low daily volume and increasing only as engagement stays healthy. Keep early sends going to addresses likely to open and reply so you accumulate positive signals. During real campaigns, watch two numbers above all: bounce rate and spam-complaint rate. A rising bounce rate tells the provider your list is stale or fake. A rising complaint rate tells it your mail is unwanted. Either one, left unchecked, drags placement down for every message you send afterward.
Reputation is also why consistency matters. Sending 20 emails Monday, 400 Tuesday, then nothing for a week looks erratic and untrustworthy. Steady, predictable daily volume reads as a legitimate sender.
List quality is the cause almost everyone underrates
Here is the uncomfortable part. You can have flawless authentication, a warmed domain, and clean copy, and still land in spam because your list is dirty. When you send to invalid addresses, you generate bounces. When you send to spam traps — dead addresses providers use to catch senders who scrape or buy lists — you get flagged as a spammer directly. Both destroy reputation faster than any subject line ever could.
List quality is the foundation, and it has two parts.
First, verification. Before you send, validate every address so you are not mailing dead inboxes or obvious traps. This single step removes most of the bounce risk that sinks new campaigns. Do not trust a list just because it came from an export or a purchase — verify it yourself.
Second, enrichment and accuracy. Verified is not the same as correct. An address can be deliverable but belong to someone who left the company, or be a generic catch-all that no human reads. Good data means the right person, at the right company, with a current role. That is where enrichment earns its place: our enrichment product fills and confirms contact detail from multiple sources so the list you send to is real people who match your target, not noise. Pair that with lead scoring and you also stop wasting sends on contacts who were never a fit, which keeps your engagement rates — and therefore your reputation — high.
The principle is simple: fewer, more accurate contacts beat a huge unverified list every time. Volume with a bad list is not reach, it is self-sabotage.