Cold Email Deliverability Audit: Step-by-Step Checklist

Most cold email programs fail quietly. Open rates look acceptable for a week, then replies drop, then someone discovers half the list never saw the message. A cold email deliverability audit is how you catch that drift before it costs pipeline.

In my sales coaching work, I use a simple framework: select targets, create and deploy weapons, plan and execute the attack. The same order applies to deliverability. Your target is the inbox, your weapons are domains, mailboxes, authentication, and email copy, and your attack is the sending plan. When a rep tells me cold email stopped working, I rarely accept that at face value until we audit the layers underneath.

A cold email deliverability audit is a systematic check of your sending infrastructure, authentication, list hygiene, content, and sending behavior to find what is causing emails to land in spam or get blocked. Run it by verifying SPF, DKIM, and DMARC alignment; confirming secondary domains and mailboxes are correctly warmed; auditing your prospect list for risky or outdated addresses; reviewing copy for spam triggers and weak claims; and measuring inbox placement and reply signals. Fix the root causes before scaling volume.

What a cold email deliverability audit actually covers

A useful audit goes beyond a single symptom like 'we landed in spam.' It checks whether your infrastructure is properly authenticated, whether each domain and mailbox has enough sending history, whether your prospect list contains risky or outdated addresses, whether the copy triggers filters, and whether downstream signals such as replies, complaints, and bounces show a healthy sender. Lavender's benchmark work shows why the last part matters: the company pulled a sample of 231,818 cold emails analyzed as of February 4th 2026, excluding automated replies and bounced notifications, to compare performance across segments.

You can run a full audit in half a day if you have access to your DNS, sending tool, and email metrics. The goal is not perfection. The goal is to find the biggest constraint first and fix it before sending more volume.

Step 1: Map every sending domain, mailbox, and tool

Start with an inventory. List every domain that sends cold email, every mailbox on each domain, the sending tool or inbox provider, and the current daily volume per mailbox. I prefer a simple table with columns for domain, mailbox, tool, daily sends, and warmup status. Most teams are surprised by how many orphaned or overused mailboxes show up on this first pass.

If you use secondary domains, do not assume the primary domain's health transfers. Each domain has its own reputation, sending history, and DNS setup. Review the full setup using this guide to secondary domains for cold email. One common failure mode is copying the primary domain's records without testing the secondary domain, then wondering why placement fails.

Next, check daily send volume against the age and history of each mailbox. New domains and mailboxes need a gradual ramp. Sending too much, too fast is a fast way to get throttled or land in spam. Use a cold email domain warmup schedule to confirm each mailbox is ramping at a sustainable pace before you add volume.

Step 2: Verify SPF, DKIM, and DMARC for every domain

Authentication is the foundation of deliverability. For each sending domain, confirm three things:

SPF record exists and includes your sending tool, ESP, or sending IP.
DKIM record is published and the selector exactly matches what your sending tool expects.
DMARC policy is present and aligned with SPF or DKIM for the messages you send.

I frame this as the first weapons check. If authentication fails, your clean list and sharp copy still cannot rescue placement. A mismatch on a single secondary domain can drag down the whole program, so check each domain individually rather than spot-checking one.

Step 3: Audit list hygiene and targeting

Look at bounce rate, invalid addresses, catch-all domains, spam traps, and stale contact data. Remove obvious invalid and role-based addresses when there is no recent engagement. If your bounce rate is elevated, pause sending and clean the list before fixing copy or volume.

Targeting matters as much as list health. If the list does not match the offer, you will see weak replies and higher complaints, which then hurts sender reputation. Build the list from a clear ideal customer profile for outbound sales before you send another batch.

Step 4: Review copy for spam triggers and weak claims

Filters look for spam-like language, excessive punctuation, too many links, misleading subject lines, and heavy images. Audit the copy with human judgment and a spam check. Read subject lines out loud; if you would not say something in a brief voicemail, rewrite it. Remove urgency claims, excessive exclamation points, and multiple value propositions in one email.

Copy quality also changes reply behavior. Lavender's analysis of operations inboxes found only 13.1% of emails earned an A grade, and A-level emails lifted reply rate from 3.4% to 5.4%, a 58% lift. That does not mean you need a specific tool to score your email, but it shows how often weak copy hides inside what looks like a deliverability problem. For the psychological layer of inbox attention, review advanced email psychology for higher response rates so your copy matches reader behavior after deliverability is fixed.

Step 5: Measure placement and downstream signals

Use seed inbox tests and monitor bounce, complaint, reply, and spam folder rates. Open rates have become unreliable because of privacy protections, so prioritize hard signals that show whether messages actually reached the inbox and prompted action. Watch for a mismatch between high send volume and low reply volume, which often means placement is worse than the dashboard suggests.

If replies are low despite clean placement, the constraint is copy or offer. If bounces are high, the constraint is list quality. If complaints are high, the constraint is targeting or copy. Work the target-weapon-attack order: fix the layer that is actually broken instead of sending more mail into the same issue.

Step 6: Document findings and fix root causes first

Create a one-page audit log with columns for area, finding, impact, owner, and fix date. The repair order should be authentication first, then warmup, then list hygiene, then copy, then measurement. I have seen teams skip straight to rewriting copy when a missing DKIM record was the real issue, and the result was simply better copy delivered to spam.

Also know when to pause. If a major issue shows up, stop new sends, correct the root cause, and restart slowly. Deliverability repairs compound only when volume stays within the system's tolerance. If you want more context on how I think about outbound infrastructure and the frameworks behind these audits, the about page explains my background and approach.

Frequently asked questions

How often should I run a cold email deliverability audit?

Run a lightweight audit before every new campaign or domain, and a full audit monthly or quarterly. After any major change—such as adding mailboxes, switching sending tools, changing your ICP, or seeing a sudden reply-rate drop—run the full checklist again within the same week.

What is the first thing to check when cold emails land in spam?

Start with authentication and domain setup. Verify that SPF, DKIM, and DMARC records are present and aligned for every sending domain, then confirm each mailbox is on a proper warmup schedule. After that, review list hygiene and copy for spam triggers before increasing volume.

Do I need to audit every secondary domain separately?

Yes. Each secondary domain has its own DNS records, sending reputation, and warmup history. One domain can pass all checks while another fails or is still warming up, so treat every domain and mailbox as its own audit unit before relying on it for volume.