Free Cold Email Blueprint: Download Now

Why Your Cold Emails Keep Going to Spam (9 Real Reasons + Fixes)

Your emails are reaching the server. They're just not reaching the inbox. Here are the 9 real reasons it's happening, and exactly how to fix every single one.

This article contains affiliate links. If you sign up through them, we may earn a commission at no extra cost to you. Read our affiliate disclosure.

Email deliverability guide 2026 - fix cold emails going to spam

Quick Verdict

Emails go to spam for three reasons, and they have to be fixed in this order: technical setup (SPF/DKIM/DMARC) first, sender reputation (warmup) second, content (spam words, links, unsubscribe) third. Fixing content before authentication is a very common wasted effort.

The priority order:
  1. Fix your DNS records (SPF, DKIM, DMARC), takes an afternoon
  2. Warm your inbox with Mailreach, takes 21 days
  3. Clean your list and rewrite your copy, takes a few hours
40%+Of commercial email goes to spam
21%Industry avg open rate
14–21 daysTypical warmup period
93%Of phishing starts with email

A typical scenario (illustrative): a freelance consultant sends a few thousand cold emails over three weeks and gets only a handful of replies. The list is reasonable and the offer is solid, so the problem is almost certainly underneath the copy.

A setup like that often has three problems at once, none of them obvious from inside an email client.

First: no DMARC record, so the domain is technically valid but Gmail has no policy to verify the sender. Second: a new domain that was never warmed and has been sending 60–80 emails a day from day one, which looks like a spam operation to Gmail's filters. Third: copy that opens with "I hope this email finds you well", a phrase so overused it reads like a template.

Each of those fixes is quick, and fixing all three gives the next campaign a working foundation, with the same list and the same general offer.

That pattern is common. Senders rarely have just one problem, and often they have fixed only one. They obsess over copy while their DMARC is missing, or they buy a warmup tool while their list is full of dead addresses dragging down their bounce rate. The nine reasons below span all three categories, because that's where the real failures live.

Category 1: Technical Setup Problems

These are the easiest fixes and often the most impactful. Technical setup problems mean your emails are arriving at the destination server with no proof they're legitimate. Email providers default to skepticism, and without proper authentication records, your emails look like forgeries.

1. No SPF Record

SPF (Sender Policy Framework) is a DNS record that tells receiving mail servers which IPs are authorized to send email on behalf of your domain. Without it, any mail server in the world can claim to be sending from your domain, and spam filters know this. A missing SPF record is an immediate credibility red flag.

How to check: Go to MxToolbox.com/spf and enter your domain. You'll see your SPF record or a "not found" error.

How to fix: Add a TXT record to your DNS. For Google Workspace it looks like this:

v=spf1 include:_spf.google.com ~all

For Microsoft 365: v=spf1 include:spf.protection.outlook.com ~all. Your DNS provider (Cloudflare, GoDaddy, Namecheap, etc.) is where you add this. It propagates within a few hours.

2. No DKIM Signature

DKIM (DomainKeys Identified Mail) adds a cryptographic signature to every email you send. The receiving server checks this signature against a public key published in your DNS. If the signature matches, the email wasn't tampered with in transit and it came from a server you authorized. Without DKIM, your emails have no integrity verification.

How to check: Use MxToolbox DKIM lookup or send a test email to mail-tester.com which will show you your full authentication status.

How to fix: DKIM is set up through your email provider, not your domain registrar. In Google Workspace, go to Admin Console → Apps → Gmail → Authenticate email → Generate new record, then add the provided TXT record to your DNS. Microsoft 365 has a similar flow under the Microsoft 365 Defender portal.

3. No DMARC Record

DMARC (Domain-based Message Authentication Reporting and Conformance) ties SPF and DKIM together and tells receiving mail servers what to do when a message fails authentication, reject it, quarantine it, or let it through and report it. Without DMARC, you have no policy, and Gmail increasingly treats that as a negative signal.

How to check: MxToolbox DMARC lookup. If you get "no record found," you have no DMARC policy.

How to fix: Start with a monitor-only policy. Add this TXT record to your DNS at _dmarc.yourdomain.com:

v=DMARC1; p=none; rua=mailto:dmarc-reports@yourdomain.com

The p=none means no action is taken on failing emails, you're just monitoring. Once you've confirmed your SPF and DKIM are working correctly, upgrade to p=quarantine and eventually p=reject.

4. Sending From a Free Gmail or Yahoo Account

If you're sending cold email from a @gmail.com or @yahoo.com address, stop. These providers have strict bulk-sending limits, and using a free consumer account for sales outreach is a one-way ticket to blocked. You need a custom domain with proper authentication.

Buy a dedicated domain for outreach, something like outreach.yourbrand.com or a variation of your main domain. Never use your primary company domain for cold email in case something goes wrong.

Pro tip: Check your technical setup at mail-tester.com, send a test email to the address they give you and you'll get a score out of 10 with specific issue callouts. Aim for 9.5 or higher before launching any campaign.

Category 2: Sender Reputation Problems

Even with perfect technical setup, a domain with a bad reputation will land in spam. Reputation is built over time based on how recipients interact with your emails, and it can be damaged fast by poor sending practices.

5. Sending Too Many Emails Too Fast

This is the single most common mistake new senders make. You register a domain, set up your Gmail or Workspace account, connect it to Apollo or Instantly, and start sending 200 emails a day from day one. Gmail's algorithms see a brand-new domain with zero sending history suddenly blasting out hundreds of emails. That's textbook spam behavior.

Email volume needs to ramp gradually. A domain in its first month should be sending 20–30 emails per day maximum, then increasing 10–20% per week as reputation builds. Most warmup tools handle this automatically.

6. No Inbox Warming Period

Sending anything from a new domain before warming it is like trying to close a deal with someone who's never heard of you and has no reason to trust you. Your domain has no reputation, which means email providers default to treating it as a potential threat.

Inbox warming solves this by building positive sending history before you launch campaigns. A tool like Mailreach connects to your inbox and runs automated warmup through a network of 10,000+ real inboxes over 14–21 days. By the time you launch, your domain already has a solid reputation.

Running warmup continuously alongside your campaigns (not just before them) also helps, it provides a steady stream of positive engagement signals to offset any negative signals from cold emails that bounce or get marked as spam.

7. High Bounce Rates From a Dirty List

Every time your email bounces, because the address doesn't exist, the inbox is full, or the domain has expired, it's a negative signal. A bounce rate above 3–4% will tank your sender reputation quickly. Above 5% and you're in serious trouble.

Where do bad email addresses come from? Usually from lists that haven't been verified, purchased email lists, or databases that haven't been refreshed in over a year. People change jobs, companies fold, email addresses get deactivated. A list that was 95% accurate 18 months ago might be 80% accurate today.

Before every campaign, verify your list. Apollo.io has built-in email verification. Snov.io also includes a verification tool. Use one of them. Never send to an unverified list.

8. Too Many Spam Complaints

Every time a recipient clicks "Report spam" on one of your emails, it sends a direct signal to their email provider that your domain sends unwanted mail. Even a 0.1% spam complaint rate (1 complaint per 1,000 emails) will start affecting your deliverability on Gmail. A 0.3% rate triggers serious filtering.

Spam complaints happen when people feel ambushed, don't recognize your name, or have no way to unsubscribe. The fixes: personalize your emails so people recognize the context, always include an unsubscribe option in bulk sequences, and make sure your targeting is tight enough that your offer is relevant.

Check your sender score: Google Postmaster Tools (free) shows your domain's reputation with Gmail specifically. If you're sending to a lot of Gmail addresses, this is essential monitoring. Register your domain at postmaster.google.com.

Category 3: Content Triggers

Spam filters don't just look at your domain's reputation, they also analyze the content of every email you send. Certain words, formatting patterns, and structural elements are associated with spam, and filters will route your email accordingly even if your reputation is solid.

9. Spam Trigger Words and Phrases

Spam filters were trained on years of spam email data. Certain words and phrases appear so consistently in spam that they're treated as red flags regardless of context. A partial list of what to avoid in cold email:

Avoid in subject lines Avoid in body copy
FREE · FREE!!! · 100% Free "Guaranteed results"
URGENT · Act Now · Limited Time "No risk whatsoever"
Winner · You've been selected "Double your income"
Earn $$$ · Make money fast "Best price"
Congratulations (unsolicited) "While supplies last"
Click here · Visit our website ALL CAPS SENTENCES
Words that spam filters were trained on. Beyond these, excessive punctuation (!!!!), all-caps subject lines, and emoji overuse trigger the same filters.

Beyond individual words: excessive punctuation (!!!!!), all-caps subject lines, and emoji overuse in subject lines all correlate with spam behavior.

Free tool: Paste your subject line and body into our Cold Email Spam Score Checker to get an instant 0–100 spam score with every trigger word highlighted inline. It runs entirely in your browser, so your copy never leaves your device.

Also watch out for more subtle clichés that aren't technically spam words but that trigger skepticism in both humans and filters: "I hope this email finds you well," "I came across your profile," "I wanted to reach out", these mark you as an AI-generated or template-driven sender, which increasingly gets treated like spam.

Other Content Issues

  • Too many links: More than 2–3 links in a cold email looks like phishing. Keep initial outreach to 1 CTA maximum, or zero links for the very first touch.
  • HTML-heavy emails: Image-heavy, heavily styled HTML emails with lots of colored backgrounds look like newsletters, not personal emails. For cold outreach, plain text or minimal HTML dramatically improves deliverability.
  • Missing unsubscribe link: Required by CAN-SPAM law for commercial email, and its absence triggers spam filters. Even in cold email sequences, include a one-line "reply to unsubscribe" option.

The Most Important Fix: Inbox Warming with Mailreach

Of all the issues that cause cold emails to land in spam, sender reputation is the hardest to fix, and the one that has the biggest impact on results. Technical issues are a one-time fix. Content you can clean up in an afternoon. But reputation takes time, and trying to shortcut it by just sending more email makes things worse.

This is exactly what inbox warming tools are designed to solve. Mailreach connects to your inbox and runs a systematic warmup process through a network of 10,000+ real, active inboxes. Every day, your inbox sends and receives emails within that network. Those emails get opened, replied to, and, critically, moved out of spam if they land there. Each positive interaction signals to Gmail, Outlook, and other providers that your domain sends emails that people want to receive.

After 14–21 days of this, your domain has the sending history that would otherwise take months to accumulate organically. Run an inbox placement test before and after warmup to see how your own accounts improve; results vary by domain, provider and sending volume.

The key mechanism: Warmup doesn't just improve your score on a deliverability test tool. It changes how Gmail's actual algorithms perceive your domain by generating real behavioral signals from real inboxes, the same signals that determine where your cold emails land when you launch a campaign.

The other critical point: warmup doesn't stop when your campaign launches. Keep Mailreach running alongside your active campaigns. The continuous positive signals from the warmup network offset negative signals from bounces and occasional spam complaints in your live sends. Think of it as ongoing reputation maintenance, not just a pre-launch checklist item.

Start Mailreach Warmup →

Free trial available • Setup takes under 10 minutes

Technical Fix Checklist

Use this as your step-by-step technical setup guide. Most of these take 5–15 minutes each and you only have to do them once per domain.

Check SPF at MxToolbox
Go to mxtoolbox.com/spf and verify your record exists and is syntactically correct. If it's missing, add the TXT record for your email provider.
Enable DKIM in Google Workspace or Microsoft 365
Generate the DKIM key in your email admin console and add the resulting TXT record to your DNS. Wait 24 hours for propagation, then verify at mail-tester.com.
Add a DMARC record (p=none to start)
Create a TXT record at _dmarc.yourdomain.com with v=DMARC1; p=none; rua=mailto:youremail@yourdomain.com. Monitor the reports for 2 weeks before tightening to p=quarantine.
Buy a dedicated sending domain
Never cold email from your primary company domain. Register a sending domain (e.g., outreach.yourbrand.com or a similar variation) and set up all authentication records on it.
Run a mail-tester.com check
Send a test email to the address provided at mail-tester.com and check your score. You want 9.5 or higher. The report will flag any remaining technical issues with specific fix instructions.
Critical rule: Always send cold email from a dedicated subdomain or variation of your main domain, never from your primary domain (yourcompany.com). If your outreach domain gets blacklisted or your reputation takes a hit, your main domain's reputation (which powers your website's transactional email, sales follow-ups, and client communication) stays clean.

Fix Your Email List Quality

A clean, verified list is the difference between a 2% bounce rate (fine) and a 7% bounce rate (catastrophic for your reputation). There are two sides to this: verifying the addresses before you send, and sourcing them properly in the first place.

Verify Before You Send

Apollo.io has a built-in email verification system. When you export a list from Apollo, every email address is marked with a verification status, verified, likely valid, or risky. Only send to "verified" or "likely valid" addresses. Anything marked risky gets cut.

Snov.io also includes a robust email verifier that runs addresses through a multi-layer check: syntax validation, domain verification, MX record lookup, and SMTP handshake. It's worth running your list through a dedicated verifier even if your source tool already did its own check, especially for lists older than 6 months.

Sourcing Rules

  • Never buy email lists. Purchased lists are full of invalid addresses, spam traps, and people who have no idea who you are. They destroy deliverability fast.
  • Don't use scraped lists without verification. LinkedIn scrapes, website scrapers, and other automated data pulls produce dirty lists. Always verify before sending.
  • Refresh lists older than 12 months. People change jobs. Domains expire. A list from 18 months ago has likely degraded by 15–25%. Re-verify before re-using.
Quick math: If you have 1,000 email addresses and 80 bounce (8%), you'll get reputation damage that will tank your next 5 campaigns. Spend $20 on verification first and you save your domain. It's always worth it.

How to Write Cold Emails That Avoid Spam Filters

The content principles for avoiding spam filters align almost exactly with the content principles for writing good cold emails. Spam filters are trained on what bad email looks like, and bad email looks like it was written by someone who doesn't respect the reader's time or attention.

The Core Rules

  • Plain text over HTML for initial outreach. Newsletters use HTML templates. Personal emails don't. Cold outreach should look like a personal email. No colored backgrounds, no logo headers, no image blocks.
  • Under 200 words for the first email. Long emails don't get read and are more likely to trigger content filters. Make your point in 3–4 short paragraphs maximum.
  • One call to action per email. Multiple links = phishing signal. Keep it to one ask, one link (or no link at all in the first touch).
  • Personalize the first line. Not a template opening. Something specific to the recipient. This isn't just good practice, it helps differentiation from mass spam that opens identically for every recipient.

Before and After: Simple Email Rewrite

The "after" version is shorter, specific, avoids all spam trigger words, has one low-friction CTA, and no HTML formatting. The "before" version hits almost every filter trigger in the book.

How to Monitor Your Deliverability Ongoing

Fixing spam issues is not a one-time task. Deliverability can degrade, a bad campaign, a spike in bounces, a blacklist listing, and you want to catch problems early before they compound. Here's a practical monitoring stack.

Mailreach Dashboard

Real-time inbox placement score updated daily. Set threshold alerts so you're notified if your score drops below 85% while a campaign is live. This is your primary monitoring tool.

Google Postmaster Tools

Free tool from Google. Shows your domain reputation and spam rate specifically for Gmail recipients. If a significant portion of your list uses Gmail (most B2B lists do), this is essential. Register at postmaster.google.com.

GlockApps

Sends test emails to seed accounts across Gmail, Outlook, Yahoo, and other providers and reports where they land. Useful for a full cross-provider placement test before launching a major campaign. Paid tool with a free tier.

Blacklist Monitoring

Mailreach includes blacklist monitoring built in. Alternatively, check MxToolbox Blacklist Monitor (free) at least weekly while campaigns are running. Getting blacklisted and not knowing is one of the most common reasons cold email stops working suddenly.

Your 7-Step Action Plan to Fix Email Deliverability

Everything in this guide, distilled into a sequential action plan. Follow these in order, don't skip steps, and don't launch cold email campaigns until you've completed steps 1–4.

1
Check SPF, DKIM, and DMARC

Use MxToolbox.com to verify all three records exist and are valid for your sending domain. If any are missing, add them today. This is a 30-minute fix that has an immediate positive impact on deliverability.

2
Set Up a Dedicated Sending Domain

Register a separate domain for cold outreach. Something like send.yourdomain.com or a close variation. Set up Google Workspace or Microsoft 365 on it and configure all authentication records.

3
Start Mailreach Warmup (Run for 21 Days)

Connect your new domain to Mailreach and let the warmup run for a full 21 days before sending any cold campaigns. Do not launch early. Keep warmup running continuously after campaigns start.

4
Verify Your Email List

Run every address through Apollo's verifier or Snov.io's verification tool. Remove anything marked invalid or risky. If your list is older than 12 months, re-verify it entirely before sending.

5
Rewrite Your Email Copy

Audit your sequences for spam trigger words. Switch to plain text format. Trim every email to under 200 words. Personalize the first line. One CTA per email, maximum. Use the before/after example from this guide as a template.

6
Start at 20 Emails/Day and Ramp Slowly

Even with a fully warmed inbox, start your campaign volume conservatively. Begin at 20 emails/day and increase by 10–20% each week. Sudden volume spikes after warmup can still trigger filters if they're extreme enough.

7
Monitor Weekly

Check your Mailreach dashboard every Monday. Run a GlockApps placement test before any major campaign. Monitor Google Postmaster Tools if your list is Gmail-heavy. Set blacklist alerts on MxToolbox. Catch problems early.

Run this check first: send a single test email to a Gmail address you own and click "Show original." The header shows whether SPF, DKIM and DMARC pass. If any of them says FAIL or NONE, fix that before rewriting copy or buying tools, because no amount of warmup or wordsmithing can make up for failing authentication. It's free, and it often explains a spam problem in one screen.

Frequently Asked Questions

The most reliable signal is a low open rate, below 20% on a targeted, warmed list usually means deliverability issues. Confirm it by sending test emails to accounts you control on different providers (Gmail, Outlook, Yahoo) and checking which folder they land in. You can also use mail-tester.com or GlockApps for a professional multi-provider placement test.

Gmail doesn't block cold email by category, it routes based on sender reputation, authentication, and content signals. A well-configured domain with proper SPF/DKIM/DMARC, a warmed inbox, and clean content will get primary inbox placement even for cold email. The issue isn't that Gmail hates cold email. It's that most cold email setups look indistinguishable from spam operations without the proper groundwork.

DMARC, if it's missing. Of the three categories (technical, reputation, content), a missing or misconfigured DMARC record is the single fix with the fastest, largest deliverability impact, and it takes about 30 minutes. Gmail and Yahoo both tightened bulk-sender requirements in 2024 to effectively require DMARC. Fix authentication first, then warm the inbox, then clean the copy. Read our full Mailreach review for the warmup side of this.

No. Running cold campaigns during the recovery window is the most common reason a domain never fully recovers. The warmup is trying to rebuild a positive engagement signal; cold sends with low open rates actively undo it. Pause all cold outreach for the full 3–6 week recovery, run warmup only, then resume at low volume. If you can't pause, move active campaigns to a separate warmed domain while the damaged one recovers.

Yes, but it requires patience. Pause all cold email campaigns on the damaged domain. Run inbox warmup for 3–6 weeks. Fix any technical issues (SPF/DKIM/DMARC). Remove yourself from any blacklists (use MxToolbox Blacklist Removal Center). After the recovery period, start new campaigns at very low volume and ramp slowly. For severely damaged domains, it's sometimes faster to register a new sending domain than to rehabilitate the old one.

You Can Fix Every Single Issue on This List

The technical stuff, SPF, DKIM, DMARC, dedicated sending domain, takes an afternoon. Do it once, do it right, and it holds indefinitely. The reputation piece (inbox warming) takes 21 days, but it's passive, you set it up and let Mailreach run in the background while you prepare your campaign. The content piece you can fix in an hour once you know what to look for.

The only piece of this that truly requires ongoing investment is the inbox warming. That's the one problem you can't solve with a one-time fix, reputation requires continuous maintenance. At $25/month, Mailreach handles that entirely on autopilot.

The math is simple: a working cold email system that lands in the primary inbox generates meetings. Meetings generate clients. For many B2B businesses, a single extra client can cover the cost of the tools in this guide.

FIX EMAIL DELIVERABILITY — Mailreach #1 Inbox Warming Tool • From $25/mo
Start Free Trial →