Why your cold emails go to spam (and how to fix it)

Going to spam is not bad luck. It is almost always one of five very fixable things. Below is the diagnostic checklist we run on every new client we audit, in the order of frequency.

The five problems, in order

Problem 1 — DMARC is not configured

This is the single most common cause of cold emails landing in spam in 2026. Major receivers (Google, Yahoo) increasingly demand DMARC alignment. Without it, you are flagged.

Fix: configure DMARC with at least p=none and a rua reporting address. Use dmarcian or EasyDMARC to validate.

Problem 2 — Sending from the primary domain

If you send cold from yourdomain.com and one mailbox gets flagged, every @yourdomain.com email goes down — including transactional, support, and billing.

Fix: register a secondary domain (e.g. get-yourdomain.com) and send cold exclusively from that domain. Forward replies to the primary.

Problem 3 — Skipped warm-up

New domains that send 50+ emails on day 1 are flagged as suspicious. Warm-up signals to receivers that the domain is a real, used inbox before scaling.

Fix: warm up for 2–4 weeks before any real campaign. Use Instantly or Smartlead's built-in warm-up. Start at 10–20/day, increase 10% daily.

Problem 4 — Too much volume per mailbox

Gmail and Outlook flag mailboxes that send more than ~40 cold emails per day. Most cold email tools default to 80+, which is wrong.

Fix: cap each mailbox at 30–40 sends/day. If you need more volume, add mailboxes — never push more per mailbox.

Problem 5 — Spammy copy

Modern filters are smart, but some patterns still trigger:

• "Guarantee", "free", "limited time", "click here", "act now"
• All caps in subject line
• Heavy HTML formatting
• Image-to-text ratio above 40%
• Multiple links per message
• URL shorteners (bit.ly, tinyurl)

Fix: write plain text. One link maximum. No bold colors. No images.

A diagnostic flow

When a client says "we are landing in spam", run this in order:

1. Run a GlockApps inbox placement test from the actual sending mailbox.
2. Check DMARC, SPF, DKIM with a DNS validator.
3. Pull bounce rate over the last 30 days. If above 3%, list verification is broken.
4. Check the spam folder of a test inbox you have access to. Read the actual messages.
5. Audit copy for the five spam triggers above.

90% of cases are resolved at step 1, 2, or 3.

What to do in the next 24 hours

1. Run a DMARC check on every sending domain.
2. Verify every mailbox is at 40 sends or below per day.
3. Run a free GlockApps test from one of your mailboxes.

Three steps. Three hours of work. Most of your "deliverability problems" will be fixed.