Quick answer: Cold emails go to spam for four reasons, in order of impact: missing or broken authentication (SPF, DKIM, DMARC), a weak sender reputation (a brand-new or cold domain, or one with past complaints), sending too much too fast, and spammy content or behavior (link-heavy emails, spam-trigger words, no unsubscribe, low reply rates). Fix them in that order — authentication first, then reputation through warmup, then volume discipline, then content — and inbox placement recovers.

You can write the most relevant, well-targeted cold email in the world and still get zero replies — because the prospect never saw it. Deliverability is the silent killer of outbound. Mailbox providers like Gmail and Outlook decide, in milliseconds, whether your message reaches the inbox, the spam folder, or gets blocked entirely. Understanding how they make that decision is the difference between an outreach channel that compounds and one that quietly burns money.

1. Authentication: the gate you can't skip

Before a provider even reads your content, it checks whether you are who you say you are. That check is three DNS records — SPF, DKIM, and DMARC — and if they're missing or misconfigured, you're starting in a hole that good copy can't dig you out of.

This stopped being optional in 2024. Google and Yahoo rolled out sender requirements that effectively mandate SPF, DKIM, and DMARC for anyone sending in volume — plus a one-click unsubscribe and keeping spam complaints under a 0.3% threshold. Senders who ignored it watched their inbox rates collapse overnight. If you've set up none of this, that's almost certainly your number-one problem. We walk through the exact setup in SPF, DKIM & DMARC for cold email.

The fastest diagnostic: send a test email to a Gmail address, open it, click the three dots, and choose 'Show original.' If SPF, DKIM, and DMARC don't all say PASS, fix that before changing anything else. Nothing else matters until they pass.

2. Reputation: providers trust history, and you have none

Every sending domain and IP has a reputation score that mailbox providers build from how recipients react to your mail. A brand-new domain has no track record — and 'no history' reads as 'unknown risk,' which providers treat cautiously. Worse, if you bought a domain that was previously used for spam, you inherit its baggage.

Reputation is also behavioral. Opens, replies, and 'mark as not spam' build it up; deletions without reading, and especially 'mark as spam' clicks, tear it down fast. This is why blasting a cold list from a fresh domain is the classic way to torch deliverability in a week: you generate complaints before you've earned any trust to absorb them.

The fix is warmup — gradually ramping send volume while generating positive engagement so providers learn you're legitimate. It's not optional for a new domain. See email warmup explained for how to do it without faking signals.

3. Volume and velocity: too much, too fast

Even with perfect authentication, sending 500 cold emails on day one from a new mailbox is a flashing red flag. Legitimate senders ramp; spammers blast. Providers watch the slope of your volume as closely as the volume itself.

There's no single magic number, but the principle is consistency: a modest, steady daily volume per inbox beats a spiky pattern, and you scale by adding inboxes, not by cranking one inbox to the ceiling. We cover the real limits in how many cold emails you can send per day.

4. Content and behavior: the signals you control in the email itself

Once you're past the gate, the message itself sends signals. The biggest content mistakes that trip filters:

  • Too many links or images — a single tracked link is fine; a wall of links and graphics looks like a newsletter blast or worse.
  • Spam-trigger phrasing — 'free money,' 'act now,' 'guaranteed,' excessive exclamation marks and ALL CAPS still get scored.
  • No plain-text version and no unsubscribe path — both look evasive to filters and, for the unsubscribe, are legally required for commercial mail.
  • Misleading subject lines or spoofed 'Re:' threads — these generate complaints, which is the single most damaging signal there is.
  • Low reply rates on irrelevant blasts — if nobody engages, providers conclude nobody wants your mail.

The throughline: filters are trying to predict whether recipients want your email. The most durable deliverability strategy isn't tricking them — it's actually sending wanted, relevant, well-targeted mail to people who might genuinely reply.

The fix, in order

  1. Authenticate: set up SPF, DKIM, and DMARC and confirm all three PASS.
  2. Use a separate sending domain for cold outreach so you never risk your primary domain's reputation.
  3. Warm the domain for 2–4 weeks before real volume.
  4. Send modest, consistent daily volume per inbox; add inboxes to scale.
  5. Keep content clean: minimal links, plain language, a real unsubscribe, honest subject lines.
  6. Target tightly so replies stay high and complaints stay near zero.

This is exactly the stack that's tedious to build and maintain by hand, which is why platforms exist to handle it. JYNI provisions managed cold-outreach domains with SPF, DKIM, and DMARC configured and warmup handled, so your outreach starts from a clean, authenticated foundation instead of a brand-new domain you have to nurse yourself. The point isn't the tool — it's that deliverability is infrastructure, and treating it that way is what keeps you in the inbox.

Fix authentication today, start warmup this week, and hold your volume steady. Inbox placement is earned in that order — and once you have it, your existing copy will suddenly start performing like you always hoped it would.

Frequently Asked Questions

Why do my cold emails go to spam even though they look normal?

Almost always authentication or reputation, not the wording. If SPF, DKIM, and DMARC aren't all passing, or you're sending from a new or previously-abused domain with no warmup, filters route you to spam before they even weigh your content. Check authentication first using Gmail's 'Show original' view.

How do I check if my email authentication is set up correctly?

Send a message to a Gmail address, open it, click the three-dot menu, and choose 'Show original.' You'll see SPF, DKIM, and DMARC each marked PASS or FAIL. All three should PASS. Free tools like a DMARC checker can also test your domain's records directly.

How long does it take to fix cold email deliverability?

Authentication is a same-day fix. Reputation takes longer — if your domain is new or damaged, expect 2–4 weeks of warmup and disciplined sending before inbox placement is reliable. There's no instant fix for reputation; it's earned through consistent, low-complaint sending.

Can one spam complaint ruin my deliverability?

One won't, but complaints are the most damaging signal there is, and they compound fast on a weak domain. Google's 2024 rules ask senders to stay under a 0.3% complaint rate — roughly three complaints per thousand emails. Tight targeting and an easy unsubscribe are what keep you under it.

Should I just use my main company domain for cold email?

No. If cold outreach damages your reputation, you don't want that bleeding into the email your customers, invoices, and team rely on. Use a separate sending domain for cold outreach and keep your primary domain protected.