Cold Email Automation Checklist

Most B2B SaaS teams lose 20–40% of their cold emails to spam folders or outright rejection, wasting thousands on leads that never reach an inbox. This playbook gives you a repeatable system to achieve >97% inbox placement by treating deliverability as an engineering discipline, not a guessing game.

The Problem

Founders and growth teams pour budget into cold email automation tools, yet see open rates below 10% and bounce rates above 5%. The root cause isn’t the tool—it’s the absence of a structured deliverability and approval process. Without one, every campaign is a gamble: you might hit inboxes today, but tomorrow your domain gets blacklisted because a single list had 30% invalid addresses or your SPF record was misconfigured.

The real pain is that deliverability failures compound silently. A high bounce rate signals to mailbox providers that you’re a spammer, degrading your sender reputation for weeks. Meanwhile, compliance risks (CAN-SPAM, GDPR, CASL) can lead to fines or account suspension. Growth teams often lack a clear approval workflow—who checks the list? Who validates authentication? Who signs off on content? The result: rushed campaigns that damage domain health and waste budget.

Core Framework

Key Principle 1: Deliverability Is a System, Not a Setting

Inbox placement depends on three interlocking factors: sender reputation, content quality, and list hygiene. Each factor has a weight that changes over time. For example, a brand-new domain with zero reputation must start with very low volume (10–20 emails/day) and gradually increase, while an established domain can send hundreds per day if its engagement rates stay above 15%. Treat deliverability as a closed-loop system: monitor → adjust → monitor again.

Key Principle 2: The Approval Checklist Prevents Catastrophic Mistakes

Every cold email campaign should pass a pre-flight checklist before the first send. This checklist covers technical setup (SPF, DKIM, DMARC, MX), list quality (bounce rate <3%, spam trap count zero), content compliance (unsubscribe link, physical address, no deceptive subject lines), and sending cadence (ramp-up plan, daily cap). The checklist acts as a gate—if any item fails, the campaign is blocked until fixed. This reduces the chance of a reputation-destroying mistake by an order of magnitude.

Step-by-Step Execution

1. Step 1: Set Up a Dedicated Sending Infrastructure

Use a separate subdomain (e.g., mail.yourdomain.com) for cold email, never your primary domain. Configure a static IP (or a pool of IPs) that is not shared with transactional email. Create a custom tracking domain to avoid link-based reputation leakage. Example DNS records: dns ; SPF record for mail.yourdomain.com v=spf1 include:_spf.google.com ~all ; DKIM record (generated by your email provider) default._domainkey.mail.yourdomain.com TXT "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb4..." ; DMARC record _dmarc.mail.yourdomain.com TXT "v=DMARC1; p=quarantine; rua=mailto:dmarc-reports@yourdomain.com"

1. Step 2: Authenticate Every Sending Domain

Implement SPF, DKIM, and DMARC with a policy of p=quarantine or p=reject after monitoring. Use a DMARC analyzer (e.g., dmarcian, Postmark’s free tool) to check alignment. Without DMARC, spoofers can use your domain, tanking your reputation. Target: 100% alignment on all three protocols.

1. Step 3: Warm Up the Domain and IP Gradually

Start with 10–20 emails per day to known, engaged recipients (e.g., your own team, existing customers who opted in). Increase volume by 10–20% every 2–3 days, monitoring bounce and complaint rates. Use a warm-up tool (e.g., Mailwarm, Warmbox) that sends to seed accounts and simulates positive engagement (opens, replies). Never skip warm-up—a cold start at 500 emails/day guarantees spam folder placement.

1. Step 4: Clean and Segment Your List Before Every Campaign

Run every list through an email verification service (e.g., ZeroBounce, NeverBounce) to remove invalid, disposable, and role-based addresses (e.g., info@, admin@). Remove any address that has not engaged in the last 90 days. Segment by industry, job title, or previous interaction to personalize content. Target: bounce rate <2% after cleaning.

1. Step 5: Optimize Email Content for Deliverability

Avoid spam trigger words (e.g., “free,” “guaranteed,” “act now”) in subject lines and body. Keep the HTML-to-text ratio under 60% HTML. Limit links to 2–3 per email, all pointing to your custom tracking domain. Use a plain-text version as the primary format—many cold email experts report 10–20% higher reply rates with plain text. Test your email with a spam checker (e.g., Mail-Tester, GlockApps) and aim for a score of 9/10 or higher.

1. Step 6: Implement a Sending Schedule and Throttling

Send only during business hours in the recipient’s time zone (e.g., Tuesday–Thursday, 8–11 AM local time). Cap daily volume per domain at 50–100 emails for the first month, then gradually increase to 200–300. Use a tool that randomizes send times within a window (e.g., 9–11 AM) to avoid pattern detection. Never send more than 1 email per recipient per week.

1. Step 7: Monitor Feedback Loops and Adjust

Set up feedback loops with major providers: Google Postmaster Tools (for Gmail), Microsoft SNDS (for Outlook/Hotmail), and Yahoo/Verizon’s FBL. Check daily for complaint rates >0.1% and bounce rates >3%. If complaint rate spikes, pause the campaign, remove the offending segment, and re-warm the domain. Use a dashboard (e.g., Google Data Studio) to track key metrics over time.

Common Mistakes

• ❌ Buying email lists – Purchased lists have 30–50% invalid addresses and high spam trap density. They guarantee immediate reputation damage and potential blacklisting. Always build lists organically or through opt-in lead magnets.
• ❌ Skipping DMARC – Without DMARC, your domain can be spoofed, and mailbox providers may treat all mail from your domain as suspicious. Implement DMARC with p=quarantine after monitoring for 2 weeks.
• ❌ Sending too fast – A sudden spike of 500 emails from a new domain triggers throttling and spam placement. Always ramp up volume over 2–4 weeks.
• ❌ Ignoring engagement signals – Sending to recipients who never open or reply hurts your sender score. Remove non-engagers after 60–90 days.
• ❌ No unsubscribe link – Violating CAN-SPAM by omitting an opt-out mechanism can lead to fines up to $43,792 per email. Always include a one-click unsubscribe and honor it within 10 business days.

Metrics to Track

Checklist

• Dedicated sending subdomain configured (e.g., mail.yourdomain.com)
• SPF, DKIM, and DMARC records published and verified (DMARC policy at least p=quarantine)
• Custom tracking domain set up (CNAME record)
• IP address warmed up (started at 10 emails/day, ramped over 2 weeks)
• List verified with a third-party email validation service (bounce rate <2%)
• Role-based and disposable addresses removed
• Non-engagers (no open in 90 days) removed or moved to a separate re-engagement list
• Subject line and body scanned for spam trigger words (score ≥9/10 on Mail-Tester)
• Unsubscribe link included and functional (one-click, no login required)
• Physical mailing address included (required by CAN-SPAM)
• Sending schedule set (business hours, max 50–100/day per domain)
• Feedback loops registered (Google Postmaster, Microsoft SNDS, Yahoo FBL)
• Campaign approved by a second team member (peer review)
• Fallback plan documented (what to do if complaint rate >0.1%)

Using NQZAI for This Playbook

NQZAI’s platform accelerates every step of this checklist. Its AI-powered email validation engine scans lists in real time, flagging invalid, disposable, and high-risk addresses before they hit your sending queue. The content scoring module analyzes subject lines and body copy against known spam patterns, giving you a deliverability score and suggesting rewrites. NQZAI’s automated warm-up feature gradually ramps up sending volume while monitoring bounce and complaint rates, adjusting the pace dynamically. Finally, the approval workflow enforces the checklist as a gate—no campaign can launch until every item is verified, with audit logs for compliance. Teams using NQZAI report a 40% reduction in bounce rates and a 25% increase in inbox placement within the first month.

How to Implement the Checklist in Your Team

1. Assign ownership – Designate one person as the “deliverability lead” responsible for maintaining DNS records, warm-up schedules, and feedback loop monitoring.
2. Integrate the checklist into your CRM or email tool – Use a project management tool (e.g., Notion, Asana) with a template that mirrors the checklist above. Each campaign must have a status field: “Draft,” “In Review,” “Approved,” “Sending,” “Completed.”
3. Set up automated verification – Connect your email automation tool (e.g., Outreach, SalesLoft, Lemlist) to an email validation API (e.g., ZeroBounce, NQZAI) so that every list is cleaned before import.
4. Create a pre-send test – Before the first send of any new campaign, send a test email to a seed list of 5–10 internal addresses and check inbox placement using a tool like GlockApps or MXToolbox.
5. Monitor daily – Every morning, review the previous day’s metrics: bounce rate, complaint rate, and delivery rate. If any metric exceeds the target, pause all campaigns from that domain and investigate.
6. Review monthly – Conduct a monthly audit of your sender reputation using Google Postmaster Tools and Microsoft SNDS. Check for blacklists (e.g., Spamhaus, Barracuda) and remove any issues.
7. Iterate on content – A/B test subject lines, body length, and personalization tokens every quarter. Keep a log of what works (e.g., “Subject lines with recipient’s company name have 15% higher open rate”).

Frequently Asked Questions

How long should the warm-up period last?

A safe warm-up takes 2–4 weeks. Start at 10–20 emails/day and increase by 10–20% every 2–3 days. If your bounce rate stays below 2% and complaint rate below 0.1%, you can accelerate. Never jump from 50 to 500 in one day.

What is a safe daily send volume for a new domain?

For the first month, limit to 50–100 emails per day per domain. After 30 days of good reputation (bounce <2%, complaint <0.1%, open >20%), you can increase to 200–300. Established domains with strong engagement can send 500–1000, but always monitor.

Should I use a separate domain for cold email?

Yes, always use a subdomain (e.g., mail.yourdomain.com) or a completely separate domain (e.g., yourcompany-outreach.com). This isolates your primary domain’s reputation from cold email risks. If the cold domain gets blacklisted, your main business email remains unaffected.

How do I handle GDPR compliance for cold email?

Under GDPR, you must have a lawful basis for processing personal data. For B2B cold email, the most common basis is “legitimate interest,” but you must still provide a clear opt-out mechanism and honor it immediately. Ensure your privacy policy explains how you collect and use contact data. For EU recipients, consider using a consent-based approach (e.g., LinkedIn InMail or a double opt-in form) to be fully compliant.

What should I do if my deliverability suddenly drops?

First, pause all campaigns from the affected domain. Check your bounce and complaint rates in your email provider’s dashboard. Look for a spike in complaints—if >0.1%, identify the segment that caused it and remove those addresses. Then, re-warm the domain by sending only to your most engaged contacts for 1–2 weeks. Finally, verify that your SPF, DKIM, and DMARC records are still valid and that your IP is not blacklisted (use MXToolbox Blacklist Check).

How often should I clean my email list?

Clean your list before every campaign. At a minimum, run a verification every 30 days for lists that are used frequently. Remove any address that has not opened or clicked in 90 days. For cold outreach, consider a 60-day engagement window—if a contact hasn’t replied after 3 touches, move them to a suppression list.

Sources

1. RFC 7208 – Sender Policy Framework (SPF)
2. RFC 7489 – Domain-based Message Authentication, Reporting, and Conformance (DMARC)
3. Google Postmaster Tools – Best Practices
4. Microsoft SNDS – Smart Network Data Services
5. FTC – CAN-SPAM Act: A Compliance Guide for Business
6. GDPR.eu – What constitutes valid consent?
7. Mailchimp – Email Deliverability Best Practices
8. Gartner – Magic Quadrant for Email Security (2023) (top-level domain only)
9. Spamhaus – The Spamhaus Project (blacklist lookup)
10. ZeroBounce – Email Validation Accuracy Study (top-level domain only)