Blog  ·  Pillar post  ·  11-min read

Why your cold emails are landing in promotions.

By Keith Rainville · Published May 4, 2026 · ~2,420 words

You spent two hours writing the perfect cold email. Nailed the opener. Made it specific. Low-pressure ask. Personal research. The kind of email that, if it landed in the inbox, would probably get a reply.

But it didn't land in the inbox. It landed in promotions. Or spam. Or bounced entirely. And you never heard back.

You're not alone. In 2026, the single biggest complaint I hear from founders running cold email is that their deliverability tanked. They built a list, set up a sequence, and watched 40-60% of their outbound land in promotions or spam instead of the inbox.

The gut reaction is always the same: "My copy must suck" or "My list is bad" or "Nobody's interested in what I'm selling."

Usually, none of that is true. The problem is deliverability infrastructure, not positioning or targeting. And deliverability problems are fixable. This guide walks through the five reasons cold emails land in promotions, how to diagnose which one is yours, and what to fix first.

The hidden killer — your pitch never reached the inbox

I've spent the last two decades building cold email campaigns that work. I've watched reply rates swing from sub-1% to 8-12% just by fixing one infrastructure variable. Not the copy. Not the list. Not the sequence timing. The infrastructure.

This is what most founders get wrong: they assume deliverability is the platform's job. If you're using Instantly or lemlist or Outreach, they assume "they handle delivery, I'll handle the pitch." But platforms don't guarantee inbox placement. They send the email. Whether it lands in the inbox, promotions, spam, or bounces is determined by your domain, your authentication, your list quality, and your copy.

The frustrating part is most founders never get diagnosed feedback. They send the campaign. See a 2% reply rate. Blame the list or the copy. Rebuild the sequence. Send again. See the same result. Repeat for six months. Meanwhile, their domain reputation gets worse with every send because the underlying problem was never fixed.

I audited 40 cold email campaigns last quarter where the founder thought the problem was targeting. Turned out all 40 had basic SPF/DKIM failures or were sending from unwarmed domains. Same founders who fixed those issues saw 4-5x improvement in reply rate without changing a word of copy.

The 5 places cold email actually goes

Before diagnosing the fix, let's be clear about the destination options. When you hit send on a cold email, it lands in one of five places:

  • The inbox. What you want. 60-80% of well-executed cold email lands here.
  • Promotions tab (Gmail). Visible but deprioritized. 2-3% of these ever get opened. This is where 40% of audited emails end up.
  • Junk/Spam. Visible but explicitly labeled spam. Users almost never click into junk. Death for reply rate.
  • Hard bounce. The mailbox doesn't exist, the domain blocks mail, or the server rejected it outright. Address is dead.
  • Soft bounce or throttle. Server accepted it, but mailbox was full or sender got rate-limited. Some try again later. Most don't.

Most founders focus on 1 and 3: "Is the email good?" and "Is the list clean?" Those matter. But 2, 4, and 5 are almost always the real problem. Even the best email to a perfect list goes to spam if your domain reputation is trashed.

Reason 1: Sender domain reputation is king

Gmail and Outlook score every sender domain on a reputation scale. This score lives server-side — you can't see it, but it determines inbox placement on day one. It's the single most important variable.

The score is built from five signals:

  • Authentication (SPF, DKIM, DMARC): Is the mail server authorized to send from this domain?
  • Sending volume: Are you ramping gradually (good) or exploding from zero to 10,000 on day one (bad)?
  • Bounce rate: What % of your sends bounce? Sub-3% is good. Above 5% signals spam.
  • Complaint rate: Are recipients marking you spam? Even 0.1% complaints tank reputation.
  • List quality signals: Are you hitting catch-alls, role-based emails (info@, sales@), or recently-scraped addresses?

The problem: reputation score starts negative for brand-new domains. Gmail assumes every new sender is a potential spammer until proven otherwise. To build reputation, you need 3-6 weeks of gradual, clean sending. Nobody wants to wait, so they skip it. Then they blast 10,000 emails from a reputation-zero domain to a list with 20% bounces, and watch 80% land in promotions.

I had a client send 5,000 cold emails from a brand-new domain without warmup. 3,200 bounced on day one. Domain reputation tanked instantly. Every subsequent email routed to promotions or spam. Recovery took 4 months of warm, low-volume sending. We could have avoided it with 3 weeks of warmup beforehand.

The fix: Warmup sequences. Most people think "warmup" means sending emails to your own inbox to trick Gmail — that's old and doesn't work. Real warmup in 2026 means using Instantly or lemlist to gradually ramp sending volume with warm contacts before scaling to cold lists. 3-6 weeks, starting with 50 emails/day, ramping to 300-500. You're proving to Gmail: "This sender sends to real people who engage."

Reason 2: SPF, DKIM, DMARC broken or missing

SPF, DKIM, and DMARC are authentication protocols that tell Gmail and Outlook: "Yes, this email really came from [email protected] and wasn't forged." They're not optional in 2026.

Here's what each does:

  • SPF: Lists authorized mail servers for your domain. If your email comes from a server not on the list, Gmail flags it as suspicious.
  • DKIM: Cryptographically signs each email so it can't be forged in transit. Gmail checks the signature on arrival.
  • DMARC: Sets the policy: if SPF and DKIM fail, what should Gmail do? Quarantine to spam? Reject? Report?

In 2026, Gmail and Yahoo enforce DMARC for all bulk senders. If your DMARC policy says "reject" and your DKIM fails, the email gets rejected before it even arrives. It bounces server-side. The recipient never sees it.

Common mistakes: SPF is configured but points to the wrong mail server (you switched tools and forgot to update SPF). DKIM is generating a signature for selector1 but you never published it to DNS. DMARC policy is set to "reject" but you haven't tested authentication first — every email bounces.

The fix: Test before you scale. Use MXToolbox to validate SPF, DKIM, and DMARC. Send a test email to Gmail and check the full headers for a valid DKIM signature. If DKIM fails, your authentication is broken. Fix it before sending anything at scale.

Reason 3: Your list is dirty (bounces tank reputation)

A dirty list is one of the most cascading problems. Every bounced email signals to Gmail that you're a low-quality sender. Bounce 1,000 emails and your domain reputation starts tanking. Bounce 5,000 and your domain is now labeled a spam source for months.

Dirty lists come from four sources:

  • Catch-all domains. You email [email protected], it bounces back, but the MX handler accepts all addresses as "might exist." These are uncertain and risky.
  • Role-based accounts. info@, sales@, support@, noreply@. Real decision-makers rarely check these. High bounce-to-engagement ratio.
  • Stale addresses. Contact left the company three months ago. Address still exists sometimes but they're not checking it.
  • Scraped or unverified lists. You bought a list of 50,000 "CEO names" for $99. Data is weeks old and unverified. 30-40% don't exist.

One bad send to a dirty list does permanent damage. If you hit 5,000 addresses and 1,500 bounce, you've told Gmail your domain is a spam source. Even perfect emails afterward will route to promotions for 4-6 months.

The fix: Build clean from the start. Run your list through a verifier that does SMTP handshake checks — not just syntax validation. Target: under 3% bounce rate. Anything above 5% is a red flag.

Reason 4: Shared tracking domains are blacklist magnets

Tracking is useful — you want to know who opened and who clicked. But shared tracking domains are blacklist magnets. If 10,000 other cold emailers use the same tracking pixel domain and 50 of them are spammers, that shared domain gets blacklisted. Your emails route through the blacklist. Gmail sees it and routes your email to spam even before the recipient opens it.

Common problem: You're using lemlist or Instantly, and they provide a default tracking domain like t.lemlist.com. That's a shared domain used by thousands. If lemlist's infrastructure gets spam complaints from other users, your emails suffer collateral damage.

The fix: Use a custom tracking domain. Set up a subdomain like track.mycompany.com and point it at your email service's tracking infrastructure. This isolates your reputation. Most platforms support custom domains — it's usually a 10-minute DNS setup.

Reason 5: Your copy triggers Gmail's content filters

Even with good domain reputation, clean authentication, and a verified list, your email can still land in promotions if your copy triggers Gmail's content-based spam filters. Gmail uses machine learning to flag emails that match spam patterns.

The most common 2026 spam triggers:

  • Lazy personalization. "Hi {first_name}" — the merge tag didn't merge. Screams automation.
  • Emoji bombs. Rocket emoji, fire emoji, checkmarks. Gmail penalizes them now.
  • All-caps words. "THIS IS URGENT" or "MAKE MONEY FAST" — classic spam pattern.
  • Discount language. "Limited time offer," "only $X," "exclusive deal." Promotions tab material.
  • Urgency patterns. "Act now," "don't wait," "expires tonight." Screams sales pitch, not outreach.
  • Salesy closings. "Looking forward to your response!" — too pushy. Genuine outreach is casual.
  • Link-heavy emails. More than 2-3 links raises suspicion.
  • Unsubscribe links. Gmail expects bulk mail to have unsubscribe. Cold email with unsubscribe looks bulk and lands in promotions.

Spammers optimize for engagement hooks. Legitimate outreach doesn't need them. If your email reads like a sales pitch, Gmail's filters promote it to the promotions tab.

The fix: Write emails that don't need sales language. Open with genuine insight. Keep it conversational. Two sentences. One detail that shows research. No emojis, no urgency, no sales speak. Gmail won't flag it because it reads like one professional reaching out to another.

The diagnostic checklist (in order)

You've got five problems. Only one is yours. Work top-to-bottom. Fix #1 before moving to #2.

  1. Check your authentication. Go to MXToolbox, enter your sending domain, run MX Lookup, SPF check, DKIM check, and DMARC check. If any fail, fix them before sending anything else. This takes 10 minutes and catches 80% of deliverability issues.
  2. Test domain warmup status. Send 5 test emails to Gmail from your sending domain. Check if they land in inbox or promotions. If all 5 go to promotions and authentication passed, you have a warmup problem. Pause bulk sending and start a 3-6 week warmup using Instantly or lemlist.
  3. Review list bounce rate. Run your cold list through a verifier one more time. Send to 100 addresses and monitor bounces. What % actually bounce? If above 5%, list is dirty. Re-verify with stricter checks or get a new list.
  4. Check tracking domain configuration. Are you using a default tracking domain (t.lemlist.com)? Switch to custom domain setup like track.yourdomain.com. Takes 15 minutes and typically lifts promotions-tab delivery by 10-15%.
  5. Audit your email copy. Search your template for: emoji, all-caps phrases, urgency language, discount language, salesy closings. Remove them. Retest with 10 emails to your Gmail test address. If inbox delivery improves, problem was copy.

What to do Monday morning

If you're in promotions hell and watching reply rates tank, here's the month-by-month fix timeline:

Week 1: Diagnose and fix authentication. MXToolbox, fix SPF/DKIM/DMARC. Takes one day. Usually the root cause. After you fix DNS, wait 30 minutes for propagation and send a test email to yourself.

Week 2-3: Warmup if needed. If you're sending from a domain less than 3 months old that's never sent cold email, start a warmup sequence now. Use Instantly or lemlist. If you're sending from a domain that's been sending transactional email for years, warmup isn't the issue — the problem is likely broken authentication or list quality.

Week 4: Verify and test your cold list. Use our list-building service or EmailClik's verifier to confirm sub-3% bounce rate. Run a 50-email test send to your Gmail test address. Monitor inbox placement.

Week 5: Fix remaining issues. If test emails landed in inbox, scale to your full list. If they landed in promotions, set up a custom tracking domain (15 minutes) or audit and rewrite copy to remove spam triggers. Test again. Once test emails consistently land in inbox, scale.

The cost of getting this wrong is months of bad deliverability. If you hit send with broken authentication or a dirty list or an unwarmed domain, you're tanking domain reputation for six months. Every email digs the hole deeper. Better to spend a week diagnosing and fixing infrastructure than to send a blast that nukes your domain. One week of diagnosis beats six months of recovery.

About the author: Keith Rainville is the founder of KJR Digital Marketing, EmailClik (10-tool unlimited lead-gen suite), and Unlimited Leads. 20+ years diagnosing cold email deliverability at scale. Based in Spring Hill, Florida. More about Keith →

Done-for-you

Fix it this week, not next month.

We handle the authentication, warmup, list verification, and deliverability testing. You focus on your pitch. Cold email infrastructure built and optimized in 7 days.

Keep going.