Cold Email Deliverability 2026: What Changed, What to Do

Cold email deliverability in 2026 is set by rules that Gmail, Yahoo and Microsoft have been tightening since February 2024: authenticated domains, low complaint rates, easy opt-outs, and rejection instead of the spam folder for senders who don't comply. Gmail stepped up enforcement in November 2025, Outlook.com started rejecting unauthenticated high-volume mail on May 5, 2025, and DMARC got a new standard in May 2026. Below is each change with its date and source, then the setup and tests we recommend for cold senders.

We make Outreach2day, cold email infrastructure on standard SMTP/IMAP mailboxes. For deliverability basics that apply to any email program, see email deliverability best practices. This post covers what changed and what a cold sender should do about it.

What Changed: Dated Rules That Affect Cold Email

Only changes confirmed on the provider's own page are listed. Each is linked in Sources.

Two Scope Rules Cold Senders Get Wrong

• Google's rules cover personal Gmail only. Google's sender guidelines FAQ says the guidelines "don't apply to messages sent to Google Workspace accounts." Most B2B cold email goes to Workspace addresses. Spam filtering still applies to them, and Postmaster Tools shows no data for them.

• The 5,000 count is per primary domain and permanent. Google counts "all messages sent from the same primary domain," and senders who reach it once "are permanently considered bulk senders." Microsoft counts domains "sending over 5,000 emails per day." At our recommended 5 mailboxes × 25 cold emails, one domain sends 125 a day, far below both thresholds. Set up authentication as if you were a bulk sender anyway: Google's basic requirements apply to all senders, and the rest costs a few DNS records.

One-click unsubscribe is required by Google for "Marketing messages and subscribed messages" from senders of more than 5,000 a day. Whether that covers your cold email depends on volume and audience: see one-click unsubscribe for cold email.

The 2026 Cold Email Deliverability Checklist

1. Authenticate every sending domain. Publish SPF and DKIM and a DMARC record with at least p=none, with the From: domain aligned to SPF or DKIM. This is the minimum for Gmail and Yahoo bulk senders and for Outlook.com. Details: SPF, DKIM and DMARC for cold email.

2. Keep cold email off your main domain. Microsoft's outbound spam guidance warns that bulk sending from "addresses in your primary email domain" can "affect the delivery of regular email from senders in the domain." Microsoft suggests a subdomain for bulk email; for cold email we recommend separate domains, because Google counts "all messages sent from the same primary domain," subdomains included.

3. Put up to 5 mailboxes on each domain. This is our recommendation. It keeps each domain's daily volume and complaints small, so one bad campaign doesn't take down all your sending.

4. Warm up each mailbox for 14 days before cold email. Send warm-up only for at least 14 days, start cold email at a low volume from day 14, reach full volume around day 21, and keep warm-up running while you send.

5. Send up to 25 cold emails per mailbox a day. Warm-up doesn't count toward it. Spread sends through the day: Google asks senders to "Send email at a consistent rate." To send more, add mailboxes. See cold emails per mailbox per day.

6. Leave links out of cold copy. Our recommendation: no URLs, no bare domains in the signature and no tracking links in cold emails. Gmail rate-limits "email containing one of your URL domains" when it sees an unusual rate of it, and a link adds another domain whose reputation is judged.

7. Clean the list before you send. Verify addresses and remove invalid ones. Microsoft lists "List Hygiene & Bounce Management" among its recommendations for high-volume senders, and Gmail blocks sending from a personal account when many of its emails bounce.

8. Keep complaints under Google's thresholds. Google asks senders to keep the spam rate "below 0.10%" and to "avoid ever reaching a spam rate of 0.30% or higher." Add a plain-text opt-out line to every email and remove anyone who asks within 48 hours, the window in Google's FAQ (Yahoo says 2 days). See spam complaint rate thresholds.

9. Space follow-ups. Optional, and our default: the first follow-up 2 days after the first email, the next 3 days later, then 5 and 5. Don't stack several emails to the same person in a few days.

How to Test Cold Email Deliverability

No single number tells you where your mail lands. Combine four signals:

Placement Tests

Send the campaign email and a neutral control email from the same mailbox to seed inboxes at Google and Outlook in the same minute. If the control lands and the campaign email doesn't, the problem is the copy. If both land in spam, it's the domain, mailbox or IP. Run tests per provider and repeat them: one test is a sample, not a verdict. See how reliable inbox placement tests are.

Postmaster Tools v2

Google's Postmaster Tools dashboards show spam rate, authentication, delivery errors and compliance status per domain. Three limits for cold email:

• Data covers "messages sent to personal Gmail accounts" only.

• On days when your volume is low, the dashboards "might not include all data."

• The Domain and IP Reputation dashboards are being retired (deprecation page). The delivery errors dashboard, with reasons such as low IP or domain reputation, is the closest replacement: see Postmaster Tools reputation.

Bounce and Deferral Codes

Read the text of every bounce. Gmail's 421 4.7.28 names the IP, domain or URL domain it is rate-limiting. Outlook's 550 5.7.515 means failed authentication. For other Outlook codes and fixes, see why Outlook blocks cold email. For provider sending caps, see Google Workspace and Gmail sending limits.

Warm-Up and Reply Metrics

Watch warm-up inbox and spam rate per mailbox, split by recipient provider, and replies per mailbox and per domain. A mailbox whose warm-up spam rate rises after a volume increase is telling you to slow down before your campaigns show it.

Each Outreach2day mailbox shows its warm-up inbox, spam and bounce rate, sends by recipient provider, replies sorted by type, and Google and Outlook placement tests. We don't guarantee inbox placement: it depends on your list, your copy and the recipient's provider.

FAQ

What changed in cold email deliverability in 2026?

In 2026 the DMARC standard moved to RFC 9989 and Microsoft reduced external sending quotas for new Microsoft 365 tenants from September 14, 2026. Google has also said the Domain and IP Reputation dashboards will not be part of Postmaster Tools v2. The larger changes, Gmail's stepped-up enforcement from November 2025 and Outlook.com's rules from May 2025, remain in force.

Do Gmail's bulk sender rules apply to cold email?

They apply to mail sent to personal Gmail accounts. Senders of about 5,000 or more messages a day to Gmail from one primary domain are bulk senders. Google says the guidelines don't apply to messages sent to Google Workspace accounts.

What spam complaint rate is too high for cold email?

Google asks senders to stay below 0.1% and never reach 0.3%. Yahoo also uses 0.3%. Both count only complaints on mail delivered to the inbox, so aim as close to zero as you can.

How do I test cold email deliverability?

Run placement tests to Google and Outlook seed inboxes with a neutral control email, read your bounce codes, and watch warm-up spam rate per mailbox. Postmaster Tools adds data only for mail to personal Gmail at sufficient volume.

Does DMARC need p=reject for cold email?

No. Gmail, Yahoo and Outlook.com require at least p=none. RFC 9989 says domains used for general-purpose email should not publish p=reject.

Sources

Checked September 2026:

• Google: Email sender guidelines: requirements for all senders and for more than 5,000 messages a day, "Starting in 2024"; spam rate below 0.3% and recommended below 0.10%; one-click unsubscribe for marketing and subscribed messages; consistent sending rate.

• Google: Email sender guidelines FAQ: enforcement from November 2025 with temporary and permanent rejections; bulk sender status by primary domain and permanent; ineligible for mitigation above 0.3% from June 2024; June 1, 2024 one-click deadline; guidelines don't apply to Workspace recipients.

• Yahoo Sender Hub: Sender best practices: enforcement from February 2024 through the first half of the year; SPF, DKIM, DMARC at least p=none, one-click unsubscribe, 2-day unsubscribe window, spam rate below 0.3%.

• Microsoft Defender for Office 365 blog: Outlook's new requirements for high-volume senders: domains over 5,000 emails a day; SPF, DKIM, DMARC p=none aligned; rejection with 550 5.7.515 from May 5, 2025; list hygiene and bounce management; Outlook.com consumer domains.

• Exchange Team Blog: Introducing Exchange Online Tenant Outbound Email Limits: TERRL announced February 24, 2025; new-tenant quotas of 10% and 25% rolling out from September 14, 2026.

• Microsoft Learn: Outbound spam protection: bulk sending from the primary domain can affect regular email from that domain.

• RFC 9989: DMARC: May 2026, Standards Track, obsoletes RFC 7489 and RFC 9091; pct removed, np and t added; general-purpose email domains should not deploy p=reject.

• Gmail Help: Learn about the deprecation of the old Postmaster Tools interface: v2 launched in 2024; Domain and IP Reputation dashboards to be retired; v1 API to be retired; legacy interface deprecation postponed.

• Gmail Help: Postmaster Tools dashboards: dashboards available, data for personal Gmail accounts only, may be incomplete on low-volume days; spam rate counts messages delivered to the inbox; delivery error reasons include low IP and domain reputation; compliance status for senders to personal Gmail.

• Google Workspace Admin Help: Gmail SMTP errors and codes: 421 4.7.28 rate limiting of email containing a URL domain.

• Gmail Help: Limits for sending & getting mail: sending blocked when many emails bounce.

Outreach2day includes automatic SPF, DKIM and DMARC setup, warm-up, a sending engine and per-mailbox placement tests at $2.50 per mailbox a month.

Create an account→