Your cold emails go to spam for one of three reasons: your technical setup is incomplete, your sending behavior looks suspicious, or your recipients don't engage. If you send cold email and wonder why reply rates are near zero, the answer is almost always deliverability. Here are the 12 most common causes and exactly how to fix each one.
1. Missing or Misconfigured SPF, DKIM, and DMARC Records
Since February 2024, Google and Yahoo require SPF, DKIM, and DMARC for bulk senders. If any of these records are missing or misconfigured, your emails will be flagged or blocked. SPF tells receiving servers which IPs can send for your domain. DKIM adds a cryptographic signature to verify message authenticity. DMARC tells servers what to do when authentication fails.
Fix: Publish SPF, DKIM, and DMARC records for every domain you send cold email from. Use a 2048-bit DKIM key. Start DMARC at p=none to monitor, then escalate to p=quarantine and p=reject over 2-4 weeks. Verify setup with a tool like mail-tester.com.
SPF (Sender Policy Framework) is a DNS TXT record that lists all IP addresses authorized to send email from your domain. Without it, any server can claim to be you. DKIM (DomainKeys Identified Mail) adds a digital signature to each email that receiving servers verify against a public key in your DNS. DMARC tells servers what to do when SPF or DKIM fails. All three are non-negotiable for inbox placement in 2026.
2. Sending from a New Domain Without Warming
A brand-new domain that suddenly sends hundreds of emails looks exactly like a spam operation to mailbox providers. They have zero reputation data on your domain. A spike like that triggers automatic filtering.
Fix: Warm up new domains for 3-6 weeks before sending cold email. Start with 5-10 emails per day using a warm-up service (simulated engagement from real mailboxes). Gradually increase to 50-80 per day. Never skip warm-up — domains flagged in the first week can stay blacklisted for months.
3. High Spam Complaint Rates
Every time a recipient clicks "Report spam" on your email, your sender reputation takes a hit. Google's threshold is around 0.1% complaint rate. Above 0.3% triggers active filtering. The faster complaints come in after sending, the more damage they cause.
Fix: Remove unengaged contacts from your list. Make sure your email clearly identifies who you are and why you are emailing. Include an easy, obvious unsubscribe link in every email — recipients who cannot find the unsubscribe button are more likely to hit "Report spam."
4. Sudden Spikes in Sending Volume
Going from 50 emails per day to 500 emails per day in a single day looks like a compromised account or a botnet to mailbox providers. Consistency matters more than volume. A steady, gradual increase signals a legitimate business.
Fix: Never increase daily volume by more than 20-30%. If you need to scale, add more warmed inboxes across multiple domains. Spread volume evenly. Use 40-50 emails per inbox per day as a safe ceiling.
5. Poor List Hygiene (High Bounce Rates)
Hard bounces (invalid email addresses) damage your sender score with every attempt. A bounce rate above 2% is a warning sign. Above 5% and most providers will start penalizing you. Bad lists are the fastest way to destroy deliverability.
Fix: Clean every list before you send. Remove invalid, catch-all, and role-based addresses (info@, sales@, admin@). Expect to remove 10-20% of any list you buy or scrape. Re-verify lists every 90 days. Never send to a list that hasn't been cleaned.
6. Low Engagement (Opens and Replies)
Mailbox providers track how recipients interact with your emails. If no one opens, replies, or clicks, the algorithm assumes recipients don't want your mail and starts routing future messages to spam. It is a negative feedback loop: low engagement causes spam placement, which causes even lower engagement.
Fix: Improve your subject lines and first sentences. Test personalization variables. Keep the body short — 80-100 words maximum. Include a clear, low-friction call-to-action (reply to this email, book a 10-minute call). Remove contacts who never open after 3 sends; they drag down your aggregate engagement.
Cold email engagement benchmarks: A healthy cold email campaign sees 5-15% reply rate and 40-60% open rate after the first send (once authentic engagement is possible). Below 3% reply rate indicates a targeting or deliverability problem. In our experience, improving list segmentation and personalization can move opening rates from 20% to 50% within a single campaign cycle.
7. Sending from a Shared or Reputation-Damaged IP
Most email service providers put you on a shared sending IP with hundreds of other senders. If one sender on that IP runs a spam campaign, your deliverability suffers. Shared IPs are the most common cause of unexplained deliverability drops.
Fix: Use dedicated IPs for high-volume sending. If you cannot get a dedicated IP, choose an email service provider that actively monitors and removes spammers from shared pools. ACA uses BYOK model where you connect your own sending accounts, so you control which IPs and domains you use.
8. Email Content Triggers (Less Common but Real)
Modern spam filters rely far more on reputation than content keywords. But certain patterns still hurt: heavy HTML formatting, multiple images, all-caps subject lines, excessive exclamation marks, and too many links (more than 1-2 per email). A plain text email with a single link and natural language performs best.
Fix: Send plain text or light HTML. One link maximum in cold outreach. Avoid words commonly associated with spam (FREE, ACT NOW, LIMITED TIME, CONGRATULATIONS). Write like you would write a human being, not a marketer.
9. No Personalization or Relevance
Generic emails sent to thousands of recipients with no personalization are spam by definition. They also generate zero engagement — which, as we covered, compounds the deliverability problem. A personalized email to a well-targeted prospect generates 2-3x higher reply rates on average.
Fix: Reference the recipient's role, company, or recent activity in the first sentence. Use personalization variables for first name, company name, and job title. Even better: reference something specific — a recent LinkedIn post, a job change, a company milestone. It signals relevance to both the recipient and the spam filter.
10. Using Shared Tracking Domains
When you use a tracking domain shared by thousands of other senders (like the default tracking domain from your ESP), your email reputation gets tied to the worst sender on that domain. If another customer triggers a spam block, your link and open tracking get caught in the same filter.
Fix: Set up a custom tracking subdomain (e.g., track.yourdomain.com). Configure CNAME records to point your tracking to your ESP's servers. This isolates your tracking reputation from other senders. It also looks more professional to recipients who hover over links.
11. No Unsubscribe Link or Hard-to-Find Unsubscribe
Under CAN-SPAM and GDPR, an unsubscribe link is legally required. But even beyond compliance, making unsubscribing difficult drives recipients to hit "Report spam" instead — which is far more damaging to your reputation than an unsubscribe.
Fix: Include a clear, single-click unsubscribe link at the bottom of every email. Process unsubscribes within 24 hours. Do not require login or multiple steps to opt out. One click, done. It hurts nothing to lose an uninterested contact, and it protects your deliverability.
12. DMARC Reject Policy Without Gradual Escalation
A DMARC policy of p=reject on a domain that hasn't been monitored first will silently block legitimate emails that fail SPF or DKIM — including emails you may not even know are sending on your behalf. Jumping straight to p=reject is the most common DMARC mistake.
Fix: Start with p=none for 2-4 weeks. Review DMARC reports to see every sender using your domain. Identify any unauthorized senders or misconfigured services. Move to p=quarantine for 2-4 weeks. Only then move to p=reject. This gradual approach ensures you don't break any legitimate email flows.
Use a gradual DMARC escalation when: your domain has multiple services sending email (Google Workspace, SendGrid, HubSpot, analytics tools, booking systems) and you're unsure of all sources. Skip the gradual escalation when: you have a brand-new secondary domain used exclusively for cold email with only one sending source (your cold email platform). Even then, start at p=none and monitor for 2 weeks before moving to p=reject.
Quick Diagnostics to Run Today
If you are not sure which of these 12 issues is causing your spam placement, run these diagnostics in order:
- Check authentication: Use MXToolbox to verify your SPF, DKIM, and DMARC records are published correctly.
- Run a spam score test: Send a test email to mail-tester.com and see your score. Aim for 9/10 or higher.
- Test inbox placement: Use GlockApps or MailReach to send test emails to seed accounts at Gmail, Outlook, and Yahoo. See exactly where they land.
- Check blacklists: Use MXToolbox to check if your sending domain or IP is on any blacklist.
- Review engagement data: Look at your last 3 campaigns. Are open rates above 30%? Reply rates above 3%? If not, start with list quality and personalization.
The most common reason cold emails go to spam is not any single issue — it is the combination of missing authentication, brand-new domains, and poor targeting. Fix those three in that order and 80% of deliverability problems disappear.
Frequently Asked Questions
How quickly can I fix my spam placement?
If the issue is missing authentication (SPF/DKIM/DMARC), you can fix it in minutes by publishing the correct DNS records. If the issue is a blacklisted domain or bad sender reputation, it can take 1-4 weeks to recover — and only if you stop sending from the affected domain and fix the root cause first.
Should I use a different domain for cold email?
Yes. Your primary business domain (the one your website is on) should never send cold email. If it gets blacklisted, your email and website credibility suffer. Register secondary domains for cold outreach (e.g., yourbrand-team.com, getyourbrand.io) and warm them up before use.
How many emails per day is safe for a new domain?
After a 4-6 week warm-up, 40-50 emails per day per inbox is a safe volume. Never exceed 80 per inbox per day. To scale beyond that, add more warmed inboxes across multiple domains rather than increasing volume per inbox.
Does sending to bought email lists cause spam placement?
Yes — almost immediately. Bought lists contain spam traps, invalid addresses, and recipients who never agreed to receive email from you. Sending to them generates hard bounces, spam complaints, and almost no engagement. The combination destroys deliverability within days.
Does email content really affect deliverability?
Less than most people think. Reputation and authentication matter far more than content keywords. But heavy HTML, multiple images, all-caps subject lines, and aggressive promotional language can still trigger filters, especially on newer domains with limited reputation.
How does multi-channel outreach affect email deliverability?
Multi-channel outreach (email + LinkedIn + WhatsApp) can improve email deliverability because you send fewer follow-up emails per prospect. When a sequence moves from LinkedIn to email to WhatsApp, each channel carries less weight and the total email volume to any single recipient drops. Platforms like ACA coordinate this automatically.