Sales email is the hardest category of email to deliver, and the reason is structural. Your recipient does not know you, did not ask for the message, and will not engage with most of them. Gmail and Microsoft read that pattern and filter accordingly. Transactional email from a brand people bought from gets in. Cold outbound from a domain with no history gets filtered, sometimes rejected outright. The teams that win at outbound are not writing better copy first. They are building sending infrastructure that the filters have no reason to distrust.
This guide is the full setup, in the order to do it: the domain structure, the authentication records, the warm-up, the volume and list rules, and the monitoring that tells you when something breaks.
The single most important decision. Your brand domain (acme.com) carries your reputation with every human who reads your email. Outbound sending carries a reputation with the filters, and those two reputations should not be mixed. If your outbound gets your domain on a blocklist, your invoices, your password resets and your support email go down with it.
The standard setup is a secondary domain (getacme.com or acme-mail.com) that only sends outbound. Keep the brand domain for everything else. The secondary domain is disposable: if it burns, you stop sending from it, let it cool down, and move to the next one. Your brand reputation never takes the hit. Cold email domains covers the full setup, including which TLDs to buy, how many to keep in reserve, and how to point the sending tool at the new domain.
Three records, all of them required:
p=none with reporting to an address you actually read, confirm in the reports that only your tool is sending, then move to p=quarantine and finally p=reject. Gmail's 2026 requirements for bulk senders expect a policy at quarantine or reject. How to set up DMARC walks the steps, and DMARC report monitoring covers reading the weekly XML without drowning in it.Before you send a single email, verify all three with a real lookup. The free DMARC checker checks SPF, DKIM, DMARC, MX and TLS for any domain in seconds, and the full checklist has the acceptance criteria for each record.
A new domain that sends 100 emails on day one and 1,000 on day ten looks like a spam operation, because that is the pattern spam operations use. Warm-up is the process of ramping volume slowly over four to eight weeks so the sending IP and domain build a history of being received, opened and replied to. Most sending tools have built-in warm-up that does this automatically with engagement farming. If you are doing it manually: start at 10 to 20 emails a day per mailbox, increase 10 to 20 percent per week, and watch bounce and complaint rates every day. The moment bounce rate climbs above 2 percent, stop ramping and clean the list. Cold email warm-up has the week-by-week schedule.
Four numbers matter more than any other:
Cold email bounce rate covers what "good" actually looks like at each stage of the ramp.
Outbound deliverability does not fail loudly. It fails in a week where open rates drop 30 percent and nobody connects it to the DNS change that happened the day before, or the provider policy update, or the IP that got listed. The monitoring setup that catches these early:
Email deliverability monitoring covers what to check and how often, and the monitoring API is for teams that want to build their own dashboard.
The free audit runs the full check on your sending domain: SPF, DKIM, DMARC, MX, TLS and IP reputation, with the exact record to add or fix. No account needed.
Run the free auditRunning this for multiple client domains or a whole agency? Inboxproof Agency monitors every domain in your portfolio and alerts you the moment one breaks. See pricing →