Order queue open · Verified lists delivered within 24–48 hours
Cold email deliverability in 2026: Gmail and Outlook inbox placement guide covering domain setup, warmup, sending patterns, and what changed in 2025 and 2026.
Sarah Okonkwo
Sales ops specialist, deliverability obsessive · Updated June 24, 2026
Last updated: June 2026 · Sarah Okonkwo, Sales ops specialist, deliverability obsessive
TL;DR — 5 things to know before reading
Deliverability in 2026 is more technical than it was three years ago, and the technical bar has been raised by Gmail's February 2024 requirements that are now fully enforced. The email providers are applying more sophisticated filtering, and the senders who hit spam folders consistently are almost always failing on infrastructure, warmup, or contact quality — not on copy.
The encouraging reality: a sender who sets up the infrastructure correctly, warms the domain properly, and uses verified contact data will achieve inbox placement rates of 85–95%+ in Gmail and 80–90%+ in Outlook. These rates are achievable by any B2B cold email sender who follows the current requirements. The deliverability gap between senders who get this right and senders who cut corners has widened significantly since 2024.
Deliverability is the non-negotiable foundation. A perfectly written email that lands in spam is a zero. This guide covers the current requirements for Gmail and Outlook inbox placement, what has changed in 2025 and 2026 specifically, and the infrastructure setup that makes deliverability reliable rather than fragile.
Google's February 2024 sender policy for Gmail is now the baseline expectation. Two years later, it is fully enforced and there are no grace periods. The requirements that matter for B2B cold email senders:
SPF (Sender Policy Framework): A DNS record that authorizes specific servers to send email from your domain. Without an SPF record, Gmail will reject or heavily filter your email. SPF configuration is a one-time setup per domain.
DKIM (DomainKeys Identified Mail): A digital signature attached to outgoing email that verifies the message was not modified in transit. Gmail gives significantly higher inbox placement to DKIM-signed email. DKIM requires both a DNS record and signing at the mail server level — this is why sending from a personal domain using a generic SMTP relay without DKIM signing fails at Gmail.
DMARC (Domain-based Message Authentication, Reporting & Conformance): A policy that tells Gmail what to do when SPF or DKIM fails. A DMARC policy of p=none monitors but does not reject. p=quarantine sends unauthenticated email to spam. p=reject blocks unauthenticated email entirely. For cold email senders, a DMARC policy of p=none is appropriate during initial setup; advancing to p=quarantine after verifying authentication is correctly configured adds additional deliverability signal.
Inframail configures SPF, DKIM, and DMARC automatically for every sending inbox on setup. This is the fastest path to correct authentication without manual DNS configuration. Correct authentication configuration is the single most impactful technical deliverability improvement for new cold email senders.
Google monitors the spam complaint rate for every sending domain via Google Postmaster Tools. The February 2024 requirements set an absolute maximum of 0.3% spam complaint rate (one spam report per 333 emails sent). In practice, a spam complaint rate above 0.1% begins to affect inbox placement; above 0.3% triggers active filtering.
Spam complaint rate is primarily driven by contact quality. Sending to unverified, outdated, or broadly-scraped contact lists produces high spam complaint rates because many recipients mark as spam rather than finding the unsubscribe link. Quarvio delivers SMTP-verified contacts, which reduces the bounce rate and the proportion of inactive or disengaged recipients that drives spam complaints. Tight ICP targeting also reduces spam complaints because relevant emails are marked as spam at a much lower rate than irrelevant ones.
The February 2024 requirements mandate one-click list-unsubscribe support for senders above 5,000 emails per day to Gmail addresses. Instantly implements RFC 8058-compliant one-click unsubscribe automatically. This is one of the reasons using a dedicated cold email platform matters: the compliance features are built in by default.
Microsoft's Outlook filtering has become meaningfully more sophisticated since late 2024. The key developments that affect B2B cold email senders:
Microsoft evaluates not just SPF, DKIM, and DMARC individually but a composite authentication score that incorporates all three plus additional signals: domain age, sending history, IP reputation, and recipient engagement. A domain that passes SPF and DKIM but has no sending history (new domain, no warmup) scores low on compauth and hits the Junk folder.
This is why domain warmup matters for Outlook specifically: Outlook's compauth score improves as the domain builds sending history with positive recipient engagement (opens, replies, not marking as spam). Inframail inboxes built on Microsoft 365 have a compauth advantage because they share Microsoft's infrastructure reputation.
Outlook's machine learning filtering evaluates email content patterns, not just individual spam trigger words. Patterns that trigger Outlook filtering in 2026:
The practical implication: every cold email sequence should have some level of personalisation variation (at minimum, first name and company name in the opening). Instantly's personalisation variables solve this at scale; identical template blocks sent to thousands of recipients trigger Outlook's pattern matching.
New domains registered and immediately used for cold email now face significantly higher Outlook filtering than they did in 2023 or 2024. Microsoft applies additional scrutiny to domains under 30 days old regardless of authentication configuration. This is one argument for using an aged sending domain (60+ days old) before starting cold email campaigns.
Gmail and Outlook have moved from soft filtering (spam folder) to hard rejection (bounce) for emails that completely fail authentication. In 2023, a missing SPF record resulted in spam folder placement. In 2026, it increasingly results in a delivery failure bounce. This makes correct authentication configuration more urgent than ever.
Both Gmail and Outlook now apply AI-based evaluation to email content that goes beyond keyword matching. These systems identify emails that exhibit cold email patterns — generic structures, template-like phrasing, high-volume identical sends — even when individual spam trigger words are absent. The response is to increase personalisation genuinely: first-line personalisation based on Quarvio data fields (company name, title, industry) makes each email meaningfully different even within a sequence template.
Gmail and Outlook have tightened the daily sending volume threshold at which additional scrutiny is applied. Previously, a warmed domain could send 100–200 emails per day without elevated risk; in 2026, the conservative safe limit for a single warmed inbox is 40–50 per day. Per Woodpecker's guide on daily sending limits, 30–50 emails per warmed inbox per day remains the operational benchmark for safe cold email sending.
Brand Indicators for Message Identification (BIMI) is now widely supported by Gmail and increasingly by Outlook. BIMI displays your company logo next to your email in the inbox, increasing open rate by 20–30% and providing an additional trust signal. BIMI requires a DMARC policy of p=quarantine or p=reject and a verified mark certificate (VMC). While not required for deliverability, BIMI is increasingly a competitive advantage for B2B cold email senders.
Use a sending domain that is separate from your main company domain. If your company is example.com, send from mail.example.com, outreach.example.com, or try.example.com. Never send cold email from your primary domain; a domain reputation issue on the cold email domain should not affect your company email.
Register the sending domain at least 30 days before you plan to send the first cold email. This gives the domain minimum age before sending begins.
Inframail configures SPF, DKIM, and DMARC automatically. If configuring manually:
v=spf1 include:[your-mail-server] ~allv=DMARC1; p=none; rua=mailto:[your-reporting-address]Verify authentication is working correctly using the MXToolbox blacklist checker and a DKIM verification tool before starting warmup.
Warmup is the process of gradually increasing sending volume on a new domain to build a positive sending reputation. Instantly handles warmup automatically: the platform sends low-volume real emails between network accounts, generates positive engagement signals (opens, replies), and gradually increases volume over 3–6 weeks.
Per Woodpecker's email warmup guide, minimum warmup duration is 2–4 weeks before any cold email sends; 6–8 weeks is recommended for optimal inbox placement. Sending before warmup completes is the single most common cause of deliverability failure in cold email.
Warmup targets before first cold email send:
After warmup completes, begin cold email sends at conservative volume:
Monitor Google Postmaster Tools weekly. If spam complaint rate rises above 0.1%, pause and review contact quality and ICP targeting. If domain reputation drops below "High," reduce volume immediately and audit sending patterns.
Sending to outdated or unverified contacts produces bounces and spam complaints that damage domain reputation regardless of how well the authentication and warmup were executed. Quarvio delivers SMTP-verified contacts, meaning each contact has been tested for active deliverability at order time. This is the contact quality standard that cold email deliverability requires in 2026.
See our B2B contact list quality guide for the full pre-send audit process.
Google Postmaster Tools tracks domain reputation, IP reputation, spam rate, and authentication results for Gmail delivery. Check weekly during active sending. The metrics to monitor:
Instantly's warmup score provides a real-time signal of domain health based on engagement with warmup emails. A score below 70 during active cold email sending indicates deliverability risk and warrants reducing send volume.
Check your sending domain and IP against email blacklists monthly using MXToolbox. Appearance on a major blacklist (Spamhaus, SORBS, Barracuda) requires immediate investigation and delisting before sending resumes.
| Need | Tool | Notes |
|---|---|---|
| Authenticated sending inboxes | Inframail | Microsoft 365 inboxes with SPF/DKIM/DMARC on setup — the foundation |
| Warmup and sequence platform | Instantly | Automated warmup + one-click unsubscribe + sending limit controls |
| Verified contact data | Quarvio | SMTP-verified contacts — low bounce rate = protected domain reputation |
| LinkedIn parallel outreach | Aimfox | LinkedIn channel does not affect email domain reputation |
How long does it take to set up a new cold email domain with correct deliverability?
Allow 5–7 weeks from domain registration to first cold email send. Week 1: register domain, set up Inframail, configure authentication, connect to Instantly. Weeks 2–6: warmup. Week 7: begin cold email sends at low volume. This timeline is not optional; cutting it short is the primary cause of deliverability failure.
Why does Gmail sometimes accept cold email and sometimes send it to spam from the same domain?
Gmail's filtering is not static — it varies based on real-time signals including your recent spam complaint rate, your sending volume relative to your warmup level, and the specific recipients' individual Gmail settings (some recipients have very aggressive personal filters). If you notice inconsistent inbox placement, check your Postmaster Tools spam rate first; a spike in complaints from a recent batch often explains the pattern. Consistent inbox placement comes from consistent contact quality and sending behavior.
Do I need a separate domain for every cold email campaign?
No. One well-configured sending domain can run multiple simultaneous campaigns in Instantly. What you should not do is use the same domain for both cold email and your transactional email (order confirmations, support emails). Deliverability issues with cold email should not affect your transactional domain reputation. Use separate domains for each function; Inframail makes it straightforward to run multiple sending domains simultaneously.
How do I know if my emails are landing in spam before I send a full campaign?
Use a seed list test before launching. Send test emails to a set of seed addresses across Gmail, Outlook, and other providers and check whether they land in inbox or spam. Instantly has inbox placement testing tools built in. Additionally, send to a small test segment (50–100 contacts) and monitor open rates: a significantly below-average open rate (below 20% for a well-warmed domain) indicates spam folder placement. Monitor Google Postmaster Tools from the first day of sending.
Start with the right infrastructure and never fight deliverability again.
Inframail delivers Microsoft 365-authenticated inboxes with SPF, DKIM, and DMARC configured on setup. Pair with Instantly for warmup and Quarvio for verified contacts.