How do you avoid the spam folder in cold outreach?

Spam filters are trained on patterns — bulk sends, spammy phrasing, suspicious links, and mismatched sender reputation. The simplest way to stay out of the spam folder is to send email that looks nothing like spam: highly personalized, low volume, from a warmed-up domain, with a clear reason for reaching out. That's a technical discipline and a writing discipline at the same time.

Why filters flag your email before you even say a word

Modern spam filters make a judgment call before they ever parse your subject line. They look at your sending domain's age, DNS records (SPF, DKIM, DMARC), your IP's reputation, your sending volume relative to your domain's history, and whether your recipients have been engaging with email from your domain at all. A brand-new domain blasting 500 cold emails on day one will land in spam almost universally — not because the content is bad, but because the infrastructure signals scream 'mass mailer.'

Paul Graham's early technical work on Bayesian spam filtering — described in his 2002 essay 'A Plan for Spam' at paulgraham.com/spam.html — laid the groundwork for how modern filters think. His insight was that spam is recognizable by its content patterns, and that any word or token with a strong statistical association with spam accumulates negative signal fast. The implication for founders doing cold outreach is that certain words, URL patterns, and formatting choices train filters against you before a human ever reads your message.

Before you send a single cold email, set up SPF, DKIM, and DMARC on your domain — your email provider's documentation will walk you through this in under an hour. Use a subdomain for outreach (e.g., hello.yourcompany.com) so that deliverability problems there don't poison your main domain. Then warm the subdomain up: send a handful of real back-and-forth emails from it for two to four weeks before any cold campaign.

The content patterns that get you flagged

Spam filters assign probability weights to tokens — individual words, phrases, formatting choices, and URL structures. Graham's analysis of spam filtering identified that certain patterns carry so much negative weight that a single occurrence can tip a message toward the spam threshold. From a practical standpoint for founders, the danger zones are: excessive capitalization or exclamation marks, phrases like 'limited time offer' or 'click here,' HTML-heavy formatting with lots of images and styled buttons, and tracked redirect URLs (where your actual link goes through a third-party tracker before reaching the destination).

The redirect link problem is particularly important. A URL that goes through a tracking redirect is one of the highest-confidence spam signals a filter can see, because it's exactly what bulk mailers use to measure click rates. If you're using a sales engagement tool that auto-wraps every link in a tracker, you may be paying for a feature that actively hurts deliverability. Use plain-text links where possible, and if you need click tracking, use your own subdomain for redirects rather than a generic tracking domain shared with thousands of other senders.

Keep your cold emails short, in plain text, and formatted like something you'd actually type to a colleague. One link maximum. No unsubscribe footer from a marketing platform. No image-heavy HTML. The email should be indistinguishable from something a person wrote in an email client — because ideally, it was.

Volume, targeting, and the one-at-a-time discipline

Paul Graham's argument in 'Do Things That Don't Scale' (paulgraham.com/ds.html) is not specifically about cold email, but the underlying logic applies directly: recruiting users or customers one at a time, with genuine personal attention, produces better outcomes than broadcasting at scale. The same approach that makes cold outreach more human also makes it more deliverable.

Sending 20 highly targeted, individually researched cold emails per day will almost always outperform sending 500 templated ones — not just in response rate, but in deliverability. Low volume from a real domain with real engagement history looks nothing like spam infrastructure. High volume with low open rates and zero replies is exactly what filters expect from bulk spammers, and they respond accordingly by suppressing your domain's reputation over time.

For early-stage founders doing their own outreach, a practical ceiling is 30-50 new contacts per day from a warmed domain, with meaningful personalization in each message — a specific reference to something the recipient has written, built, or said publicly. This is slower than a mass campaign, but it's the approach that actually reaches inboxes and generates conversations. As a filter on your targeting: if you can't write one genuinely specific sentence about why you're emailing this person, you shouldn't be emailing them.

Sender reputation is cumulative — protect it early

Your domain's sending reputation is a long-running score that ISPs and spam networks update continuously based on engagement signals: open rates, reply rates, spam complaints, and hard bounces. A single bad campaign — sending to a purchased list, emailing unverified addresses, or triggering a spam complaint wave — can damage a domain's reputation for months and sometimes permanently.

Verify every email address before sending. Tools that validate addresses before you hit send eliminate hard bounces, which are one of the clearest signals to ISPs that you're not managing a real sender relationship. Keep your complaint rate below 0.1% — Google and Yahoo both publish this threshold explicitly. If you're using a tool that lets recipients mark your email as spam and feeds that back to you, monitor it religiously.

Reply rate is your best proxy metric for deliverability health. If you're sending well-targeted, personalized emails and getting a reply rate under 1-2%, it's worth checking whether your emails are even reaching inboxes. Send a few test emails to seed accounts you control across Gmail, Outlook, and Apple Mail before each campaign. Tools like Mail-Tester or GlockApps give you a deliverability score and flag specific infrastructure problems before you send to real prospects.

“If we can write software that recognizes their messages, there is no way they can get around that.”

— Paul Graham, source

The one thing to do

Set up SPF, DKIM, and DMARC on a dedicated outreach subdomain, warm it for three weeks, then send 20-30 short plain-text emails per day to verified addresses — each with one genuinely specific sentence about the recipient.

Frequently asked questions

How long does it take to warm up a new sending domain?

Plan for two to four weeks of low-volume, real back-and-forth email before starting any cold outreach campaign. Start with 5-10 sends per day and increase gradually. Skipping this step is the single most common reason cold emails land in spam immediately.

Should I use a sales engagement platform or send manually?

For early-stage founders sending under 50 emails a day, manual sends from Gmail or Outlook often outperform platforms because they avoid shared tracking infrastructure and look more authentic to filters. Platforms are worth it when volume and follow-up sequencing justify the tradeoff, but configure them to use your own tracking subdomain rather than the platform's shared one.

What's the most damaging thing a founder can do to their email deliverability?

Sending to a purchased or unverified list from their primary company domain. Hard bounces and spam complaints from cold lists damage your domain's reputation, and that damage affects all email you send — including to your own customers and investors.

Does plain text really outperform HTML email for cold outreach?

Generally yes, for cold outreach specifically. HTML formatting, images, and styled buttons are associated with mass marketing email, and filters treat them as evidence of bulk sending intent. A plain-text email that reads like a real message from a real person clears more filters and often gets better response rates.

Sources

More playbook answers · Growth Prophet home