Fixing email deliverability b2b starts with three non-negotiables: full SPF, DKIM, and DMARC alignment with List-Unsubscribe headers in place, a separate outbound domain with mailboxes warmed gradually, and a validated list that keeps your spam rate far under provider thresholds, ideally maintaining a very low user-reported spam rate. Skip any one of these and the others cannot save your inbox placement.
TL;DR:
- Authenticating every domain with SPF, DKIM, and DMARC, and including List-Unsubscribe headers, are critical to prevent emails from landing in spam.
- Using a separate outbound domain and gradually warming new mailboxes helps isolate reputation risks and improves sender trust.
- Validating contact lists before sending, especially filtering out invalid, disposable, or role addresses, significantly reduces bounce and spam complaint rates.
- Maintaining a spam rate below 0.3% for seven consecutive days is essential to meet Gmail, Yahoo, and Microsoft guidelines and avoid deliverability throttling.
- Ongoing monitoring of spam reports, bounce rates, and inbox placement tests guides timely adjustments in cadence, content, and infrastructure.
Table of Contents
- The 8-step checklist to fix deliverability now
- How to configure SPF, DKIM, DMARC, and the other required records
- Structuring sending domains, mailboxes, and IPs for scale
- The validation workflow that keeps bounces and traps out
- Message design that earns engagement, not just opens
- What to monitor and how to fix delivery when it drops
- A 90-day pilot to lift cold deliverability
- Gmail, Yahoo, and Microsoft bulk-sender rules you cannot ignore
- Handling feedback loops and complaint monitoring
- Sender reputation factors and how to improve them
- How GDPR and privacy rules shape B2B deliverability
- Segmentation and targeting that improve engagement
- Email frequency and cadence that B2B recipients tolerate
- Why infrastructure beats copy every time
- Get hands-on help running this playbook
- FAQ
- Sources
The 8-step checklist to fix deliverability now
Most B2B teams chase subject-line formulas when their real problem sits in the infrastructure. Fix fundamental elements of infrastructure and list hygiene in priority order to address the main causes of email landing in spam before altering message content.
- Authenticate every sending domain with SPF, DKIM, and DMARC, and include List-Unsubscribe headers on commercial messages.
- Send cold outreach from a domain separate from your primary corporate domain, using a dedicated tracking domain.
- Gradually warm new mailboxes and IPs on a controlled schedule over time.
- Validate every contact list before use, removing hard bounces, role addresses, and disposable addresses.
- Use plain text in early cold sends with few links and no attachments until engagement is confirmed.
- Monitor spam rates and provider dashboards daily during ramp-up.
- Conduct seed inbox-placement tests before full-volume sends to identify provider-specific filtering.
- Process unsubscribe requests promptly and implement sunset policies for inactive contacts.
These steps interact. A clean list without authentication still gets filtered, and a warmed mailbox sending to a dirty list burns its reputation within days. The sections below walk through exactly how to execute each one.
How to configure SPF, DKIM, DMARC, and the other required records
Authentication is the foundation everything else sits on. Without it, mailbox providers have no reliable way to confirm you are who you say you are, and they default to suspicion.
SPF publishes which servers are authorized to send mail for your domain, so receivers can reject messages from unauthorized sources. DKIM attaches a cryptographic signature to each message, letting receivers verify it was not altered in transit and really came from your domain. DMARC sits on top of both, telling receivers what to do when SPF or DKIM checks fail and generating reports you can use to monitor abuse.
A few configuration details matter more than people expect:
- Align your DMARC policy with the domains used in your From header and your DKIM signature; partial alignment leaves gaps attackers can exploit.
- Publish List-Unsubscribe headers with an HTTPS link per RFC 8058, which Gmail requires for one-click unsubscribe on promotional and bulk messages.
- Confirm TLS is enabled on your sending infrastructure and that your PTR record resolves correctly, since mailbox providers increasingly treat missing reverse DNS as a red flag.
- Use DNS lookup tools and DKIM validators to confirm records propagate correctly before you send a single test message.
Pro Tip: Send a test message to a Gmail, Outlook, and Yahoo account before any campaign launch and check the raw headers for "pass" on SPF, DKIM, and DMARC; a single misconfigured record can silently sink an entire campaign.
Google's own sender guidelines spell out exactly what bulk senders need: authentication across all three protocols, one-click unsubscribe support, and spam-rate discipline. Gmail enforces these requirements actively rather than treating them as suggestions. Treat this section as setup work you do once per domain, then verify quarterly as DNS providers and mail platforms change.
Structuring sending domains, mailboxes, and IPs for scale
Your primary corporate domain carries years of reputation tied to invoices, support replies, and internal mail. Cold outreach volume and the occasional spam complaint that comes with it put that reputation at risk, so a dedicated outbound domain isolates the blast radius if something goes wrong.
- Register a separate outbound domain that resembles your brand but is distinct from your primary domain, and point your custom tracking domain to it.
- Start with a small number of mailboxes rather than one mailbox pushed to high volume; providers trust a mailbox with consistent, moderate sending more than one that spikes.
- Add mailboxes as you add volume instead of increasing a single mailbox's daily cap past safe limits; this keeps per-mailbox sending patterns looking human.
- Choose dedicated versus shared IPs based on monthly volume, since senders with enough consistent volume benefit from a dedicated IP's isolated reputation, while lower-volume senders are often better served by a reputable shared pool.
- Follow a gradual warm-up cadence, starting around a handful of messages per mailbox per day and increasing over several weeks, checking acceptance and engagement at each step before scaling further.
- Stop increasing volume immediately if bounce rates spike or spam complaints appear, and hold at the current level until metrics stabilize.
- Segregate transactional and outbound traffic onto separate domains or IPs, since a shared infrastructure means a bad cold campaign can damage the deliverability of password resets and receipts too.
Pro Tip: If your warm-up stalls, look at mailbox age and sending history before blaming content: a two-week-old mailbox sending 150 messages a day will struggle no matter how good the copy is.
Yahoo's own best-practices guidance backs this segregation approach, noting that separating mail types by IP and domain is operationally simpler than repairing a primary domain's reputation after damage occurs. Build the separation before you need it, not after a campaign tanks your main domain.
The validation workflow that keeps bounces and traps out
Infrastructure fixes get undone fast by a dirty list. A single batch of purchased or scraped contacts can push your bounce rate and spam complaints high enough to erase weeks of careful warm-up.
- Check syntax first, filtering out malformed addresses before any other step to save processing time.
- Run MX and domain checks to confirm the receiving domain actually accepts mail.
- Ping the mailbox where the receiving server supports it, to catch addresses that look valid but no longer exist.
- Detect catch-all domains separately, since these accept all mail regardless of whether the specific address exists, and treat them as higher risk rather than a confirmed valid send.
- Flag role and disposable addresses like info, sales, or temporary mail services, and remove them before upload.
- Set a re-engagement and sunset window, typically pruning contacts who show zero opens or clicks after several consecutive campaigns.
Ambiguous results deserve a conservative read in B2B contexts: when validation returns "unknown" or flags a catch-all, route that contact to a smaller, separately monitored send rather than your main list. Build validation into your enrichment pipeline so every new contact passes through these checks automatically rather than relying on a one-time cleanup, and complement that with a documented list validation process before upload plus spot-check sampling after each send to catch anything that slipped through. Industry deliverability guidance consistently points to validated lists paired with conservative warm-up as the combination that moves inbox placement more than any subject-line test ever will.
Message design that earns engagement, not just opens
Mailbox providers read engagement as a trust signal, so what you send after authentication is solid still shapes whether you stay there.
- Start with plain text in early sends from a new domain or mailbox, since heavy HTML and tracking pixels read as bulk marketing to filters still learning your sending pattern.
- Limit links to one or none in a first-touch cold email, and skip attachments entirely until the recipient has replied at least once.
- Personalize with signal-based details pulled from a prospect's recent activity, role change, or public statement rather than generic mail-merge fields, since this moves reply rates in ways template copy cannot.
- Pace sends to a realistic cadence, spacing follow-ups by several days rather than daily, since aggressive frequency drives spam reports faster than it drives replies.
- Test in small samples during warm-up, comparing two subject lines or openers across a few dozen sends rather than your full list, so a bad variant does not damage reputation at scale.
Pro Tip: Swap tracking pixels for text-only confirmation where the data allows it during the first two weeks on a new domain; fewer tracking elements means fewer signals that look like mass marketing to a filter still forming an opinion of you.
Subject lines built around a specific signal rather than a clever hook tend to outperform in reply rate, and a compact library of signal-based subject line approaches is worth testing against your current templates. For teams using AI to personalize at scale, our practical guide to AI-assisted cold email covers how to keep that personalization from reading as generic. Teams without in-house capacity for ongoing subject-line testing sometimes bring in outside help; agencies like CROWD and Dot Xero run managed email campaigns, and resources like POPJAM's subject-line testing playbook walk through structured A/B approaches if you want to run tests yourself.
What to monitor and how to fix delivery when it drops
Deliverability is not a one-time setup. It requires ongoing monitoring because thresholds shift and a single bad list upload can undo months of warm-up in days.
- Track user-reported spam rate daily, aiming to stay below 0.1% and treating anything approaching 0.3% as an emergency.
- Watch hard bounce rate, since a sudden spike usually points to a dirty list or a broken sending configuration.
- Monitor complaint rate separately from bounces, since complaints damage sender reputation faster than bounces do.
- Check inbox placement through seed testing, sending to a panel of monitored addresses across major providers to see where messages actually land.
Google reports that bulk senders exceeding a 0.3% spam rate risk delivery being throttled or rejected entirely, making daily tracking during any ramp-up period essential rather than optional.
Google Postmaster Tools, Microsoft SNDS, and Yahoo's complaint feedback loop are the three dashboards worth checking regularly, each surfacing reputation and spam-rate data specific to that provider. When delivery drops, pause or slow sending immediately, re-verify your authentication records, review a sample of recent content for anything that looks spammy, and run a fresh seed test before resuming. If the problem persists past a few days of remediation, escalate to the mailbox provider's support channel with your sending domain, IP, and a timeline of the issue ready to share.
A 90-day pilot to lift cold deliverability
Running this as a structured pilot rather than an ongoing improvisation keeps teams accountable to real milestones.
Days 1 to 30: authenticate the outbound domain fully, begin mailbox warm-up at low volume, and validate the first list segment before any send.
Days 31 to 60: scale warm-up cadence, add mailboxes as volume grows, and run weekly seed inbox-placement checks across Gmail, Outlook, and Yahoo.
Days 61 to 90: hold spam rate below the 0.1% target, test one engagement variable at a time, and document which infrastructure and content changes moved reply rates.
Check Postmaster and SNDS dashboards daily throughout, and treat any single-day spike above acceptable thresholds as a stop signal, not noise to monitor through. A detailed walkthrough of this exact structure, including the 90-day pilot framework built from real campaign data, is available in our cold email deliverability pilot case study.
Gmail, Yahoo, and Microsoft bulk-sender rules you cannot ignore
Google, Yahoo, and Microsoft all tightened bulk-sender requirements, and the practical effect is that authentication and spam-rate discipline are now enforcement conditions rather than best-practice suggestions.
Google's bulk sender guidelines require SPF, DKIM, and DMARC for any sender pushing significant daily volume to Gmail addresses, along with one-click unsubscribe support and a spam rate that stays below 0.1%, with 0.3% treated as the ceiling before mitigation eligibility is at risk. Cross that line and Google may throttle or reject mail outright rather than simply filtering it to spam.
Yahoo's sender guidance aligns closely, expecting confirmed opt-in practices, authenticated domains, and active complaint-rate monitoring to maintain standing. Microsoft's requirements follow the same general shape: authenticate everything, keep complaint rates low, and expect enforcement rather than a warning when thresholds are crossed.
The practical procedure that works during warm-up is straightforward. Resume scaling only after seven consecutive days back under 0.3%, since that is the window Google's guidance ties to regaining full mitigation eligibility. This single rule prevents more deliverability damage than almost any other tactic in this article, because it catches problems while they are still small.
Handling feedback loops and complaint monitoring
A feedback loop is the mechanism mailbox providers use to tell you when a recipient marked your message as spam, and ignoring it is one of the fastest ways to lose sending privileges on a domain.
Yahoo and other providers offer complaint feedback loop access to senders who register for it, surfacing which specific messages triggered a spam report. Set up access to every available feedback loop for your sending domains and review the reports on a regular cadence rather than only after a problem appears.
When complaint rates rise, the fix is rarely a single tweak. Check whether a specific list segment, subject line, or send time correlates with the spike, since isolating the trigger lets you remove the problem without pausing your entire program. Yahoo's sender best practices recommend segregating mail types by domain or IP precisely so a complaint spike on one campaign does not drag down reputation for everything else you send.
Treat complaint rate as a leading indicator, not a lagging one.
Sender reputation factors and how to improve them
Sender reputation is less a single score than a composite that each mailbox provider calculates independently, weighing your authentication status, complaint rate, bounce rate, engagement patterns, and sending consistency.
Authentication failures weigh heavily, since an unauthenticated domain signals risk before a receiver even reads message content. Consistent sending volume and timing matter too: a mailbox that sends 40 messages a day, five days a week, builds trust faster than one that sends 200 one day and zero the next.
Engagement signals carry real weight as well. Opens, replies, and messages moved out of spam folders all tell a provider your mail is wanted, while messages deleted without opening or marked spam tell the opposite story. Domain age and history also factor in, which is part of why a brand-new outbound domain needs deliberate warm-up rather than an immediate full-volume launch.
Improving reputation is less about a single fix and more about compounding good signals over time: clean authentication, a validated list, conservative volume growth, and content that earns replies rather than complaints. There is no shortcut that replaces consistency here, and reputation recovers slower than it degrades, which is exactly why monitoring daily during any growth phase matters more than monitoring weekly.
How GDPR and privacy rules shape B2B deliverability
Privacy regulation affects deliverability indirectly but meaningfully: the compliance signals mailbox providers reward, like honoring unsubscribe requests and avoiding deceptive sending practices, overlap heavily with what GDPR and similar laws require.
For contacts in the European Union, GDPR requires a lawful basis for processing personal data and extends specific rights around opt-out and data deletion that your sunset and unsubscribe policies should already satisfy if built correctly. Even outside jurisdictions where GDPR directly applies, building your program around prompt unsubscribe handling and honest sender identification keeps you aligned with the same behaviors mailbox providers reward through reputation scoring.
The practical overlap is useful: a List-Unsubscribe header that satisfies Gmail's one-click requirement also satisfies the kind of easy opt-out that privacy regulation expects. A sunset policy that prunes unengaged contacts after a defined window reduces complaint risk and supports data minimization principles common across privacy frameworks.
Review which privacy regulations apply to your specific contact list based on where recipients are located, since requirements vary by jurisdiction and a B2B exemption in one region does not necessarily apply in another. When in doubt on a specific legal question, that is a conversation for counsel familiar with your contact list's jurisdictions, not a general deliverability guide.

Segmentation and targeting that improve engagement
Sending the same message to your entire list is one of the fastest ways to generate the mixed engagement signals that hurt deliverability. A message relevant to a finance director reads as irrelevant, and possibly as spam, to an IT manager.
Segment by role, industry, and buying stage at minimum, since each segment responds to different language and different proof points. A segment that has engaged with previous content, attended a webinar, or downloaded a resource is warmer than a cold list pulled from a database, and warmer segments can tolerate slightly higher send frequency without triggering complaints.
Targeting tighter segments also means smaller, more controlled sends, which pairs naturally with the warm-up and testing approach covered earlier. A 200-contact segment of recently funded startups in a specific vertical lets you tailor subject lines and openers precisely, and the tighter relevance typically shows up as a higher reply rate and a lower complaint rate than a broad, generic blast.
Review segment performance regularly and retire segments that consistently underperform rather than continuing to send into low-engagement lists, since those lists are exactly where spam-trap risk and stale data concentrate over time.
Email frequency and cadence that B2B recipients tolerate
B2B recipients are busy professionals managing crowded inboxes, and cadence that feels normal in consumer marketing often reads as aggressive in a B2B cold sequence.
A typical cold sequence spaces messages several days apart rather than sending daily, giving the recipient time to notice and respond before the next touch arrives. Compressing that cadence to push for faster results usually backfires, producing spam complaints rather than replies.
Frequency also interacts with warm-up status. A brand-new domain sending daily to a full list looks nothing like legitimate business correspondence to a filter still learning your pattern, while a domain with established reputation has more room to flex cadence for time-sensitive outreach.
Match cadence to the relationship stage: tighter spacing for a first-touch sequence to a cold list, and more flexibility once a prospect has engaged and a real conversation is underway. The goal throughout is a pattern that reads as a person following up, not a system blasting a list.
Why infrastructure beats copy every time
The biggest mistake we see in B2B outreach is treating deliverability as a content problem when it is almost always an infrastructure problem first. Teams rewrite subject lines for weeks while an unauthenticated domain or a dirty list quietly caps their results regardless of how good the copy gets.
Fix authentication and data quality before touching messaging. Once those are solid, copy tests actually produce signal instead of noise, because you are no longer fighting filters that would suppress even a great message. Most teams can run the authentication and validation work internally with a few focused days of effort, reserving outside deliverability specialists for cases where warm-up stalls repeatedly or a domain's reputation needs forensic repair.
Getting this right requires your SDRs, campaign operations, and IT or dev team aligned on the same checklist, since DNS changes, list uploads, and send cadence all touch different owners.
— Chad
Get hands-on help running this playbook
If reading through authentication records, warm-up schedules, and validation workflows sounds like more than your team has bandwidth for right now, help is available to run this exact playbook with sales and marketing teams directly. Our workshops and speaking engagements walk teams through the 90-day pilot structure step by step, and our Be Extraordinary Groups give founders and sales leaders ongoing access to this kind of tactical guidance.
These sessions fit teams that have the infrastructure problem described above and want a structured path through it rather than a slow trial-and-error fix.
- Speaking and workshops for teams that want a focused session on deliverability and outreach fundamentals.
- Be Extraordinary Groups for leaders who want ongoing access to tactical sales and outreach guidance.
Visit our speaking and workshops page to see available formats and request details for your team.
FAQ
What is the rule of 7 in B2B?
The rule of 7 is a marketing principle suggesting a prospect typically needs around seven touches or exposures to a message before taking action. In B2B cold outreach, that translates into a multi-touch sequence spaced over days or weeks rather than a single email expecting an immediate reply.
Are B2B cold emails legal?
B2B cold emails are generally legal in most markets when they include accurate sender identification and an easy way to opt out, though specific rules vary by jurisdiction and by whether the recipient is an individual or a business contact. Regulations like GDPR add specific requirements for contacts based in the European Union, so check the rules that apply to where your recipients are located, and consult counsel for jurisdiction-specific questions.
What is the 30/30/50 rule for cold emails?
This is an informal guideline some practitioners use to describe where effort should go in a cold email campaign: roughly a third of success depends on list quality and targeting, a third on timing and deliverability, and the rest on message relevance. Definitions vary across sources, so treat it as a rough prioritization heuristic rather than a fixed formula.
What is a good CTR for B2B emails?
There is no single universal benchmark for B2B email click-through rate, since it varies widely by industry, list quality, and message type. Rather than chasing a specific CTR target, prioritize the deliverability fundamentals covered above, since a message that never reaches the inbox cannot be clicked regardless of how compelling it is.
Sources
- Email sender guidelines FAQ - Gmail Help
- RFC 7208: Sender Policy Framework (SPF) for Authorizing Use of Domains in Email, Version 1
- 8 best practices to improve your email deliverability — Twilio

