The thresholds that matter
Mailbox providers publish a few numbers, and sending platforms publish a few more. Know which is which.
| Metric | Figure | Source |
|---|---|---|
| User-reported spam rate, Gmail | Stay below 0.1 percent; prevent 0.3 percent or higher | Google sender guidelines FAQ |
| Spam rate, Yahoo | Bulk senders below 0.3 percent, calculated on mail delivered to the inbox | Yahoo sender best practices |
| Bounce rate | Typical sender 1.54 percent; 2 percent marked as a danger line; a quarter of senders at 3.21 percent or higher | Smartlead, 850 million emails, January to June 2026 |
| Unsubscribe handling | Within 48 hours at Google, 2 days at Yahoo, 10 business days under CAN-SPAM | Google FAQ, Yahoo FAQ, FTC |
Google adds that senders above 0.3 percent are ineligible for mitigation, and become eligible again once their spam rate stays below 0.3 percent for 7 consecutive days. The rate is calculated daily. Google's guidelines also list temporary and permanent rejection codes (4.7.x and 5.7.x) for failures such as broken SPF, DKIM or DMARC alignment.
A limit on what Postmaster Tools can show you: its data only covers messages sent to personal Gmail accounts, and Google says data may be missing when the day's volume is too low. A B2B list made mostly of company domains may give you little or nothing there. Treat it as one signal next to bounces, reply rates and your own test sends.
List hygiene and bounce handling
Most of the damage a cold program does to itself comes through the list. Verify every address before it enters a sequence, and re-verify old data before reuse. Microsoft's advice for Outlook senders is to remove invalid addresses regularly to reduce spam complaints, bounces and wasted messages, and its FAQ suggests cleaning lists monthly or quarterly. Yahoo asks senders to monitor hard bounces, soft bounces and inactive recipients and remove invalid ones promptly.
Our working rules:
- Suppress a hard bounce from every campaign and every mailbox the same day, including mailboxes that never saw the bounce.
- Pause any mailbox whose bounce rate passes 2 percent and find out why before restarting it.
- Treat catch-all and unverifiable addresses as a separate, lower-priority segment instead of mixing them into your main sends.
- Remove anyone who replies asking to stop, and honor opt-outs faster than the rules require.
- Do not buy lists. Yahoo's best practices say not to.
List quality is also a targeting question. A contact with no reason to care about your offer is the person most likely to click Report spam. That is why we score accounts before sending. The CRM cleanup playbook covers deduplication and re-verification, and our list building and CRM cleanup work treats verification as part of the build. In one marketing agency engagement the result was 10K+ leads a month with 80 percent better data accuracy (case study).
Volume and domain separation
Pace is a deliverability signal. Smartlead calls a jump from zero to 50 emails a mailbox in the first week a spam-triggering pattern, keeps each domain under about 500 cold emails a day and says two domains at 400 a day are safer than one at 800 (checked 18 October 2026). Only mailboxes with a clean bounce history should run at the full 50. The infrastructure guide turns those figures into a sizing table.
Keep cold mail away from the domain your team uses for customer conversations. Yahoo tells senders to separate bulk marketing mail from transactional mail by IP address or DKIM domain, because each has its own reputation. Google's guidance has a related trap: messages from the same primary domain count together toward its bulk sender line, and bulk sender status never expires. A cold program on your main domain can therefore tie your invoices and support replies to its record.
Content and link choices
Google's message-format rules are a useful checklist for cold copy. Each message should have one From address and a valid Message-ID. HTML should follow standards and must not use HTML or CSS to hide content. Web links in the body should be visible and easy to understand.
From that, a few defaults for first-touch emails:
- Write plain text or very light HTML. Skip images and attachments.
- Use no link in the first email, or a single plain one. Avoid link shorteners and tracked redirect links.
- Keep the subject line honest. CAN-SPAM forbids deceptive subject lines and false header information.
- Include a valid physical postal address and a clear way to opt out. The FTC says these apply to business-to-business email.
- Vary wording across mailboxes and send days so thousands of identical messages do not arrive in one pattern.
On unsubscribe headers: Google requires one-click unsubscribe for marketing and subscribed messages from bulk senders, and Yahoo requires it for promotional and marketing messages. RFC 8058 defines it. The message carries a List-Unsubscribe header with one HTTPS link and a List-Unsubscribe-Post header with the value List-Unsubscribe=One-Click, both covered by the DKIM signature, and the link must not redirect. Whether a one-to-one cold email counts as marketing is a judgment for you and your counsel. Adding the headers where your sending tool supports them costs little.
Relevance is the cheapest complaint control. A short message that names a real reason for writing gets fewer spam reports than a clever one sent to the wrong person, and our guide to writing cold emails that book meetings shows how we structure it.
A monitoring routine
| Signal | Where to read it | Action |
|---|---|---|
| Spam rate | Google Postmaster Tools, daily | Above 0.1 percent: cut volume and review the list. Near 0.3 percent: stop that domain |
| Compliance status and delivery errors | Postmaster Tools | Fix authentication or format failures before sending more |
| Bounce rate per mailbox | Your sending platform | Pause above 2 percent |
| Complaints at Yahoo | Yahoo Complaint Feedback Loop | Yahoo asks for an active feedback loop for all DKIM domains |
| Authentication results | DMARC aggregate reports (rua), message headers | Fix any source failing SPF or DKIM |
| Microsoft 365 alerts | Defender portal | Alerts such as "User restricted from sending email" mean a mailbox hit a limit |
| Reply rate per mailbox | Your sending platform | A sudden drop with no copy change suggests spam placement |
Run the check before launch and after any DNS change. Send a test to a Gmail or Workspace address you control, open the original and read Authentication-Results. The infrastructure setup guide gives the records. For software that automates monitoring and warm-up, see our ranked list of email warm-up and deliverability tools.
Track meetings alongside these numbers, because a program can look healthy on deliverability and still book nothing. The outbound metrics playbook covers the full set.
What to do when a domain burns
A burned domain shows up as bounces above 2 percent, 4.7.x or 5.7.x rejection codes, a Postmaster spam rate approaching 0.3 percent, or replies that dry up with no copy change. For Outlook, mail from a non-compliant high-volume domain goes to Junk first, per Microsoft's announcement.
- Pause the affected mailboxes, not the whole program. Check whether the problem is the domain or one mailbox.
- Read the DNS first. A changed SPF record, an expired DKIM key or a new sending tool without an SPF include breaks authentication and looks like a reputation problem.
- Look at the batches sent just before the drop. Unverified addresses and a mismatched segment are the first things to rule out.
- Fix the cause before you change volume. Sending more from a damaged domain to recover only adds evidence against it.
- Move volume to spare, already warmed domains. Keep a reserve for this; Rapid Lanyard's program ran 39 domains.
- Bring the damaged domain back slowly, at low volume to your best-verified contacts, or retire it.
The one recovery fact from a mailbox provider is Google's: eligibility for mitigation returns after the spam rate stays below 0.3 percent for 7 consecutive days. No provider publishes how long a damaged domain takes to regain trust, so we give you no number. The full cold email playbook shows how deliverability fits the rest of the system. Our AI-feedback SaaS engagement ran on multi-inbox infrastructure, sent 1,000+ emails a day and booked 40+ meetings a month (case study).
Questions
What spam complaint rate is safe for cold email?
Google says to keep the user-reported spam rate below 0.1 percent and prevent it from reaching 0.3 percent. Yahoo asks bulk senders to stay below 0.3 percent, calculated on mail delivered to the inbox (both checked 18 October 2026).
What bounce rate is too high?
No mailbox provider publishes a bounce limit. Smartlead's data from 850 million emails puts the typical bounce rate at 1.54 percent and marks 2 percent as a danger line, and we pause a mailbox above it.
Do cold emails need a one-click unsubscribe?
Google asks for it on marketing and subscribed messages from bulk senders and Yahoo on promotional and marketing messages. CAN-SPAM requires a working opt-out in commercial email, including B2B. Whether a one-to-one message counts as marketing is a question for your counsel.
How do I know my cold emails are going to spam?
Watch for a sudden reply-rate drop with no copy change, rising bounces, rejection codes and Postmaster Tools spam rate. Send test messages to Gmail and Outlook accounts you control, since Postmaster data covers personal Gmail accounts only.
Sources
- Google: Email sender guidelines
- Google: Email sender guidelines FAQ
- Google: Postmaster Tools help
- Google for Developers: Postmaster Tools API
- Yahoo Sender Hub: Sender best practices
- Yahoo Sender Hub: FAQs
- Microsoft Tech Community: Outlook's new requirements for high-volume senders
- Microsoft Learn: Configure outbound spam policies
- IETF: RFC 8058, One-click unsubscribe
- FTC: CAN-SPAM Act, a compliance guide for business
- Smartlead: The State of Cold Email 2026
Worked examples are illustrations unless a case study is linked. How we write and check these pages.