Warming is the second problem. Deliverability infrastructure is the first. Google and Yahoo began enforcing authentication requirements for bulk senders in February 2024, and Gmail now rejects non-compliant mail outright rather than quietly filtering it, with Microsoft following for Outlook.com, according to Autobound's deliverability roundup. If SPF, DKIM or DMARC alignment is broken, warm-up volume simply teaches mailbox providers to distrust you faster.
Do these steps in order, and do not start day one until all four pass:
- Register a secondary domain that resembles your main one. Woodpecker, which runs outbound from
getwoodpecker.comwhile its site iswoodpecker.co, recommends keeping the outreach domain name consistent with the brand so recipients are not confused, and warns that a domain younger than a month is treated as suspicious by filters by default in its warm-up guide. - Publish SPF and DKIM records on the subdomain, then a DMARC record that aligns. Test with a lookup tool and confirm SPF includes every sending service you use, and DKIM passes with the exact selector your provider signs with.
- Set DNS forwarding so the root of the new domain resolves to your real site, and set email forwarding so replies reach a monitored mailbox. Instantly's setup walkthrough allocates 15 to 20 minutes to MX, SPF, DKIM and DMARC configuration and another 5 to 10 minutes to forwarding and DNS testing in its cold email strategy guide.
- Send one test message to your own Gmail and Outlook addresses, then open the full raw headers. You want
Authentication-Resultsto showspf=pass,dkim=passanddmarc=pass. If you cannot read three passes, stop.
Resend's warm-up guidance makes the mechanism plain: inbox providers judge a sender on reputation built from engagement signals such as opens, clicks and spam complaints, and a brand new domain "needs to gain trust, so your emails can land in the inbox" in its warm-up walkthrough. That is why volume alone does not warm a domain. Volume sent to people who ignore or complain does the opposite.
One structural decision belongs here too: keep cold outreach on a separate subdomain from transactional or product mail. Resend recommends splitting transactional, marketing and product-generated email across subdomains so a delivery problem stays scoped to one subdomain rather than dragging down everything per the same walkthrough.
The four gates you check every morning
Everything below is a gate, not a suggestion. A gate passes or fails.
| Gate | Ceiling | Source of the number | Fail action |
|---|---|---|---|
| Hard bounce rate | Below 2% | Outfunnel cites 2% or less as a good benchmark and calls for action above it in its bounce rate guide | Stop that day's send; remove the bounced addresses |
| Spam complaint rate | Below 0.1% | Instantly's summary of the deliverability fix list puts complaints under 0.3% as the floor and bounces under 2% in its benchmark post | Pause 48 hours and rewrite the copy |
| Authentication alignment | Three passes | Autobound records that SPF, DKIM and DMARC alignment are the non-negotiable requirements in its guide | Do not send until fixed |
| Inbox placement | 90% or better in your seed test | Run a seed test before each new volume step, then read the placement tally | Treat as a spam landing |
Note the difference between 0.3% and 0.1%. The 0.3% figure is the ceiling at which mailbox providers start punishing you. During warm-up you should be stricter, because a new domain has no reputation buffer to absorb complaints. A 0.1% complaint rate on a 1,000 message day is 1 complaint; that is the number you are managing to.



