Guide

Cold email that actually lands: deliverability basics for small businesses

By Mandeep Rao · July 2026 · 9 min read

You can write the best cold email in the world and it doesn't matter if it lands in spam. Most first-timers obsess over the copy and ignore the plumbing — and the plumbing is what decides whether a human ever sees the message. We run our own cold outreach at Lead Friendly, so this is written from the operator's chair, not from a listicle. Here's what actually moves the needle.

Why cold email lands in spam

Inbox providers — Gmail, Outlook, and the rest — are constantly deciding whether to trust the address and domain a message came from. They look at your sending reputation: are you authenticated properly, do people mark you as spam, do your emails bounce, do you send in a natural pattern or in a firehose? A brand-new domain sending a hundred cold emails on day one looks exactly like a spammer, because that's what spammers do. The filter can't read your intentions; it reads your signals. Get the signals right and you get delivered. Get them wrong and even a warm, relevant email dies in the spam folder.

There are four things that matter most. Get these right before you worry about anything else.

1. A real sending domain, separate from your brand domain

Do not send cold email from your primary domain. If your business is acmeplumbing.com, buy a separate domain for outreach — something like tryacmeplumbing.com or acmeplumbing.co — and send from that. This is the single most important structural decision, and we'll come back to why below.

Set the sending domain up as a genuine, functioning domain: a real mailbox, a basic landing page (even a one-pager explaining who you are — that's part of why this content site exists), and proper authentication. A domain with nothing behind it looks disposable, and disposable domains get filtered.

2. SPF, DKIM, and DMARC, set up correctly

These three DNS records are how you prove the email is really from you. They are not optional — Gmail and Yahoo now require authentication for bulk senders, and unauthenticated mail increasingly gets rejected outright.

• SPF lists which servers are allowed to send mail for your domain. It's a TXT record. Your email provider tells you exactly what to put in it.
• DKIM adds a cryptographic signature to every message, so the receiver can verify it wasn't forged or tampered with in transit. Your provider gives you the key to publish.
• DMARC ties the two together and tells receivers what to do with mail that fails — and gives you reports on what's being sent in your name. Start with a monitoring policy (p=none) and tighten it as you confirm everything passes.

If you set up only one thing this year, make it these three. Passing SPF, DKIM, and DMARC is the difference between "trusted sender" and "unknown, treat with suspicion."

3. A reply-to address with a live MX record

A shocking number of cold campaigns send from an address that can't receive replies — a no-reply, or a mailbox on a domain with no MX record at all. Filters notice. A legitimate sender expects replies; a spammer doesn't care. If mail to your own from-address would bounce, that's a signal against you.

So: make sure the domain you send from has a valid MX record and a mailbox a human actually monitors. When someone replies "not interested," you want to see it and honor it. When someone replies "tell me more," you really want to see it. A live, monitored reply-to is both a deliverability signal and the entire point of sending in the first place.

4. Warmed-up volume, with caps

A new domain has no reputation, and reputation is earned slowly. If you blast from day one, you'll torch the domain before it ever had a chance. Warm it up: start with a small daily volume and increase gradually over a few weeks so your sending pattern looks like a real person's, not a machine's.

Then keep a daily cap per domain even once you're warm. Providers reward steady, moderate volume and punish spikes. This is also the real reason cold outreach scales through more domains, not more mail per domain — each domain is a limited, reputation-bound channel, and spreading volume keeps any one of them from looking abusive. Slow and boring wins here.

Why the sending domain stays separate from your main site

This deserves its own section because it's the mistake that hurts the most. Cold email is inherently risky to your domain's reputation — some recipients will mark it as spam no matter how careful you are. If you send from your primary domain and its reputation gets dinged, your normal business email starts landing in spam too: your invoices, your customer replies, your password resets. You've poisoned the well you drink from.

A separate sending domain is blast-radius isolation. If a cold domain's reputation takes damage, you retire it and spin up another, and your real business email — on your real domain — is completely untouched. Keep the two worlds apart on purpose.

List hygiene: control your bounce rate

Nothing wrecks a young domain faster than bounces. Every email you send to a dead address is a hard signal to the provider that you don't know who you're mailing — which is exactly the spammer profile. Keep your bounce rate low:

• Verify addresses before you send. Use an email verification service to weed out dead mailboxes, catch-alls, and role addresses. A basic syntax and MX check is free and catches the obvious garbage; catching live-domain-but-no-mailbox addresses generally needs a paid verifier, and it's worth it.
• Source your list responsibly. Scraped junk bounces. Targeted, real businesses bounce far less.
• Remove bounces immediately and never mail them again.
• Honor opt-outs instantly. One unsubscribe you ignore can become a spam complaint, which is worse for you than ten bounces.

Two links maximum, and plain formatting

Once the plumbing is right, keep the message itself clean. Heavy HTML, image-only emails, tracking pixels everywhere, and a wall of links all read as "marketing blast" to a filter — and to a human. Send plain, personal-looking text. Use at most one or two links; more than that starts to look promotional and hurts both deliverability and reply rates. A short, specific, single-purpose email from a real person outperforms a designed newsletter every time in cold outreach.

Where Lead Friendly fits

All of the above is doable yourself — none of it is secret. But it's fiddly, and one wrong DNS record or one aggressive send can cost you weeks. Lead Friendly can run compliant outbound email campaigns for you: separate sending domains set up and authenticated correctly, warm-up and volume caps handled, replies flowing into the same unified inbox as your calls and texts, and unsubscribes honored automatically. It's one piece of the broader platform — the same system that answers your phone and follows up on leads also fills the top of the funnel.