What changed in email deliverability in 2024?

On February 1, 2024, Google and Yahoo enforced mandatory DMARC, DKIM and SPF for senders over 5,000 messages per day, plus a 0.3 percent spam-complaint ceiling and a one-click unsubscribe requirement. Non-compliant senders lost 60 to 70 percent of deliverability inside a quarter.

How long should I warm up a new inbox?

Minimum 30 days. Start at 5 sends per day, ramp by 5 every other day to a maximum of 30 to 50 cold sends per day. Mix in 3 to 5 warm conversations per day during warm-up.

BIMI is optional but boosts brand visibility in Gmail and Yahoo by displaying your verified logo. It requires DMARC at p=quarantine or p=reject and a VMC certificate (about 1500 dollars per year). Worthwhile for established brands.

Email Deliverability in 2026 — DMARC, DKIM, BIMI, Warm-Up

What changed in February 2024

On February 1, 2024, Google and Yahoo simultaneously enforced new sender requirements:

Authentication mandatory — DMARC, DKIM, SPF aligned for >5,000 daily sends
Spam complaint ceiling — 0.3% hard cap, 0.1% recommended
One-click unsubscribe — RFC 8058 List-Unsubscribe header required
Honour unsubscribes in <2 days — Inbox-level enforcement

Senders without these in place saw deliverability drop from 87% to under 30% inside Q1 2024. See Google's announcement and Yahoo's best practices.

DNS authentication: SPF, DKIM, DMARC

SPF (Sender Policy Framework)

Lists which IPs/services are allowed to send mail for your domain. Set to hard fail (-all), not soft fail.

v=spf1 include:_spf.google.com include:mailgun.org -all

DKIM (DomainKeys Identified Mail)

Cryptographically signs outgoing mail. Use 2048-bit keys (not 1024). Rotate annually. Each sending service (Gmail, Mailgun, SendGrid, XP One) gets its own DKIM selector.

DMARC (Domain-based Message Authentication, Reporting & Conformance)

Tells receivers what to do when SPF/DKIM fail. Three policy levels:

p=none — Monitor only (start here)
p=quarantine — Send to spam if fail (after 30 days monitoring)
p=reject — Reject if fail (target state for 2026)

v=DMARC1; p=quarantine; rua=mailto:[email protected]; pct=100; adkim=s; aspf=s

Use adkim=s and aspf=s for strict alignment — required for BIMI later.

BIMI: brand verification

Brand Indicators for Message Identification displays your verified logo next to your emails in Gmail, Yahoo, Apple Mail and Fastmail. Requirements:

DMARC at p=quarantine or p=reject with 100% enforcement
SVG logo (Tiny PS profile) hosted on your domain
VMC (Verified Mark Certificate) from DigiCert or Entrust — $1,200–1,800/year

BIMI is optional but worth it for established brands. Open rates lift 5–10% on average per BIMI Group data.

Custom tracking domain

Never use your sending provider's default tracking domain (e.g., track.lemlist.com). Shared tracking domains accumulate spam history from all users. Set up a CNAME like links.yourcompany.com pointing to your provider's tracking service.

This single change typically lifts deliverability by 15–25% for accounts coming from shared infrastructure.

30-day warm-up schedule

Day	Cold sends/day	Warm interactions/day	Notes
1–3	0	5 (manual)	Send to friends, get replies
4–7	5	10	Internal team, real conversations
8–14	10–15	10	Add Mailwarm/Lemwarm
15–21	20–25	10	Begin small targeted campaign
22–30	30–40	5	Ramp to full volume
30+	30–50	3+	Steady state

Inbox warm-up tools: Mailwarm, Warmup Inbox, Lemwarm, MailReach. All work on the same principle — automated reply network simulating human conversations to build sender reputation.

Ramp schedule + max volumes

Inbox age	Max cold sends/day	Recommended
0–30 days	0–25	Follow warm-up schedule
30–90 days	30–40	Steady state
90–180 days	40–50	Max safe volume
180+ days	50	Hard ceiling 2026

50/inbox/day is the post-2024 ceiling regardless of age. Above this, complaint rates and spam-folder placement spike. To send 500/day requires 10+ inboxes across 2–3 domains.

The two metrics that matter: complaint rate (<0.1%) and reply rate (>2%). Everything else is a vanity number.

Monitoring + tools

Google Postmaster Tools — Free. Shows your Gmail reputation, complaint rate, spam-folder placement
Microsoft SNDS — Free. Microsoft equivalent
GlockApps / MailReach inbox tests — Paid. Seed-list inbox placement reports
DMARC reports (rua) — Free. Daily XML reports from inbox providers
XP One Operator agent — Built-in. Auto-rotates inboxes, monitors deliverability per-account

For the broader 2026 context, see our pillar Cold Outreach 2026: The Complete Guide.

FAQ

Can I send from my main domain?

No. Use a separate sending domain like get.yourcompany.com or mail.yourcompany.com. Protects your primary domain reputation.

How many inboxes per domain?

3–5 max. More than that and spam filters cluster the domain. To scale, add more domains, not more inboxes per domain.

What's the fastest fix if deliverability tanks?

1) Pause cold sends. 2) Send only warm conversations for 7 days. 3) Verify DMARC, DKIM, SPF. 4) Restart at 5/day, ramp slowly.

Key takeaways

Feb 2024 enforcement made DMARC, DKIM, SPF non-negotiable
Max safe volume: 30–50 cold sends/inbox/day
30-day warm-up required for every new inbox
Custom tracking domain is the highest-ROI single fix
BIMI lifts opens 5–10% but costs $1,200+/year
Monitor: complaint rate <0.1%, reply rate >2%