Cold Email in 2026: What Sales Teams Need Before They Hit Send

ByBNW Staff

Picture a sales team that loads a fresh list of leads into its outreach tool. The first campaign goes out from the company’s main domain. A week later, replies are thin, and customers start saying that invoices are landing in spam.

That outcome is avoidable, but the rules are stricter than they used to be. Gmail, Yahoo and Microsoft all set rules for senders now. Google says that from November 2025, Gmail is “ramping up its enforcement on non-compliant traffic.” Mail that fails its rules can face “temporary and permanent rejections.”

Most of what a sales team needs is set up once and then left alone. This is what to have in place before the next campaign.

The inbox rules cover sales email too

Gmail’s rules apply to everyone who sends to Gmail accounts, not only to newsletters. Since February 2024, every sender needs SPF or DKIM authentication and a spam rate below 0.3%.

Stricter rules apply to senders who send close to 5,000 messages a day to personal Gmail accounts. They need SPF, DKIM and DMARC. Google counts all mail from the same primary domain toward that figure, and once a sender reaches it, the bulk sender label is permanent.

Microsoft applies similar rules to domains that send more than 5,000 emails a day to Outlook.com. Since May 5, 2025, mail from those domains that fails the checks has been rejected with the error “550; 5.7.515.” Yahoo sets comparable standards and says it “will not specify a volume threshold.”

Complaints are the other test. Google asks senders to keep the spam rate below 0.10% and never let it reach 0.30%. That is a tight margin for mail the recipient never asked for.

Keep cold email away from your main domain

A company’s main domain carries its invoices, support replies and password resets. Google notes that “over time, user spam reports can lower your domain’s reputation.” If cold email draws complaints from that domain, everyday business mail can suffer with it.

That is why outreach platforms tell sales teams to send from separate domains. Smartlead’s guidance is to “protect the primary domain’s reputation.” Instantly says secondary domains “protect your primary domain.” Google’s own guidelines point the same way on a smaller scale: “Messages of the same category should have the same From: email address.”

Each new domain needs a few real mailboxes on Google Workspace or Microsoft 365, because replies have to land somewhere. Teams can buy the licences directly and set up the DNS records themselves, or use a reseller. PureMail, for example, provides Google Workspace and Microsoft 365 inboxes on a company’s own domains and handles the authentication records.

Keep the volume per inbox low. Google Workspace allows 2,000 messages a day per user, but that is a ceiling for all mail, not a target for cold email. Woodpecker recommends 25 to 35 emails per mailbox per day, and Smartlead says 50 or fewer. Spreading a campaign across more inboxes is safer than sending a lot from one.

Give new domains time

A new domain has no sending history. Google’s advice is to increase volume slowly. It warns senders to “avoid introducing sudden volume spikes if you do not have a history of sending large volumes.”

Outreach platforms build this in as a warm-up period, and their timelines differ. Instantly asks for at least two weeks before an account joins a campaign. Woodpecker says a new mailbox on an existing domain needs three to four weeks. lemlist’s default plan ramps up for about 40 days before the first campaign.

In practice, the domains and inboxes for a January campaign should be ready in early December, not the week before.

A clean lead list matters more than a clever subject line

Lead data ages quickly. The median US worker had been with their current employer for 4.1 years in January 2026, according to the Bureau of Labor Statistics. Each job change can leave behind a work address that no longer exists.

Sending to those addresses produces bounces, and the inbox providers notice. Microsoft tells senders to “remove invalid addresses regularly to reduce spam complaints, bounces, and wasted messages.” Yahoo asks senders to “remove invalid recipients from your list promptly.”

The fix is to check a list before it goes into a sequence, not after the bounces arrive. Giggal’s email list cleaning service, for example, removes invalid, disposable, role-based and duplicate addresses from a file without emailing anyone on it. Lists that are a few months old need this most.

The legal basics still apply

In the US, the CAN-SPAM Act covers sales email. The FTC’s guide says “the law makes no exception for business-to-business email.”

Every message needs a valid physical postal address and a clear way to opt out. Opt-out requests must be honored within 10 business days. Each email that breaks the law can draw a penalty of up to $53,088. Other countries have their own rules, so check where your recipients are before a campaign goes out.

Watch the results, not just the opens

Once campaigns are running, a few numbers show trouble early. Google Postmaster Tools shows a domain’s spam rate and whether it meets Gmail’s sender requirements. Check both every week while a campaign runs.

Bounces are the second signal. If the bounce rate climbs, pause and check the list before sending more. A sudden drop in replies is worth a look too. Before rewriting the pitch, check whether the mail is still reaching the inbox.

Before the next campaign

  • Send from separate domains, not the company’s main one.
  • Set up SPF, DKIM and DMARC on every sending domain.
  • Warm up new inboxes for at least two weeks.
  • Keep each inbox to a few dozen emails a day.
  • Clean the lead list right before it goes into a sequence.
  • Include a postal address and an easy way to opt out.
  • Check the spam rate in Google Postmaster Tools every week.

None of this takes long once it is in place. It also protects the domain that the rest of the business depends on.