The Deliverability Guide 2026
What actually keeps cold email out of the spam folder in 2026: the sequence itself, the signature nobody edits, and the warmup ratio most teams get wrong. Written for the people sending, not for deliverability geeks.
The filter is reading your sequence, not just your headers
Teams spend weeks on records and mailboxes and then send copy that trips every pattern a provider looks for. Authentication decides whether you are considered; the content of the sequence decides where you land. Both parts are yours to control, and the second one changes weekly.
Everything below applies whatever you send through. The infrastructure choice matters less than most vendors imply once the fundamentals are in place.
Send plain text, at least for the first touch
Filters treat rich HTML as a risk surface, because that is where phishing lives. A plain text email carries almost none of that weight and reaches more inboxes as a result.
The cost is that you lose open tracking. Reply rate is the metric that pays anyway, and it usually goes up. If you are unconvinced, build a plain text variant of your best sequence and run the two side by side for a fortnight.
Stop tracking opens
An open pixel is an invisible image on a third-party domain, which is exactly the shape of the thing filters were built to flag. Gmail now warns recipients about it directly, which turns a measurement problem into a trust problem.
Drop the pixel. Judge the campaign on replies and meetings, which are the numbers you were reporting on anyway.
Keep the first email clean of links and images
A first touch with no link is the safest email you can send. Where you do need one, route it through custom domain tracking so the URL resolves to your own domain rather than a shared redirect that other senders have already burnt.
For opting out, a sentence works as well as a link and carries none of the risk: tell them to reply with a word and you will stop. Once tracking is on your own domain you can reintroduce a calendar link, a demo clip or a screenshot without the same exposure.
Your signature is the most common single point of failure
Spintax varies your copy, but the signature repeats verbatim across every email you have ever sent. When a provider clusters complaints to find the common element, a phone number or a licence line is the easiest handle to grab, and the block lands on everything carrying it.
Strip it back to a name and a role. No phone number, no image, no licence text, no second domain. Anything you add is a fingerprint you are asking to be matched on.
Audit for trigger words, including the parts you never edit
Run every variant through a spam-word check before it goes live, then run the signature and the opt-out sentence through it too. Those are the lines nobody re-reads, and a single word in them applies to the whole send.
This is a five-minute job that routinely moves placement more than a week of infrastructure work.
Vary the copy properly, not just the greeting
Spintax that only rotates hey, hi and hello is not variation, it is decoration. The useful version rotates whole clauses and sentence structures so that no two emails share a long common string.
Aim for variation deep enough that a filter clustering your sends finds nothing reusable. The more of the email that moves, the less of it can be matched.
Run several campaigns at once
Parallel campaigns are a diagnostic, not just extra volume. When one sequence sits at 10% reply and another at 80% on comparable lists, you are not looking at a copy quality gap, you are watching a provider suppress specific phrasing.
Pause the underperformer rather than editing around the edges, and start a fresh angle. Without something to compare against, you cannot tell suppression from a bad week.
Refresh on a cycle, before the numbers drop
Copy decays. What cleared filters in March is a known pattern by May, and the drop arrives without warning. Rewriting every couple of weeks keeps you ahead of the clustering rather than reacting to it.
Treat it as scheduled maintenance with an owner and a date, the same as any other recurring operational task.
Add the unsubscribe header
Beyond the opt-out sentence and any link, the list-unsubscribe header is now expected by the major providers and required for GDPR-compliant sending. Every serious sending tool exposes it in campaign settings.
It will not lift placement on its own. Its absence will cost you, and it is a checkbox.
Get the warmup ratio right
Warmup is not a three-week phase you complete. It runs permanently, and the ratio between warm and cold volume is what dilutes the complaints you inevitably collect.
Ten warm against ten cold turns five complaints into 25% of your sending. Sixty warm against the same ten cold turns it into 7%. Same complaints, very different reputation, which is why warmup should never be switched off.
Own the reputation you are building
Keep outbound on domains separate from the business domain, and keep the count low enough that each one carries real engagement. A dedicated IP warms more slowly than a shared pool and gives you an outcome that belongs to you rather than to whoever else is sending through it.
Cap sends per mailbox rather than per campaign, verify addresses at send time rather than at enrichment time, and hold anything inconclusive. A held address costs one email; a bounce costs a fraction of the domain.
Measure placement, not proxies
With opens unreliable and bounce rate lagging, seed testing is the only forward-looking signal you have. Run seeds weekly, per domain, across the providers your buyers actually use.
Treat a placement drop as an incident with an owner, not a number in a monthly report.