Will Cold Email Get Your Domain Banned? How Blocking Actually Works
Cold email can get a domain blocked, but not because it is cold. Mailbox providers filter or reject domains that draw spam complaints, bounce off invalid addresses, hit spam traps, or skip authentication. Google and Yahoo both publish a 0.3 percent complaint ceiling, and blocklists like Spamhaus list abusive domains. Targeted, authenticated, low-volume sending rarely triggers either.
"Banned" means four different things
Nobody issues a single ban on a domain for sending cold email. What people experience as a ban is one of four separate outcomes, and each has a different cause and a different fix.
- Spam folder placement. The mailbox provider accepts your mail but files it as spam. Nothing bounces, so this is the easiest one to miss: replies simply dry up.
- Rejection at the server. The provider refuses the message during delivery and returns an error code. Gmail, for example, may reject unauthenticated mail with a 5.7.26 error.
- A public blocklist entry. An organisation such as Spamhaus lists the domain, and every mail server that queries that list starts treating it as suspect.
- Account suspension. Your email provider, such as Google Workspace, suspends the sending account for breaking its usage policies.
Cold email can trigger all four. Whether it does depends almost entirely on how recipients react and how much you send, not on the fact that the mail is cold.
How a domain earns a bad reputation
Mailbox providers score senders on behaviour attached to the domain in the From address, the domains used for authentication, and the domains that appear in links. The inputs that hurt most are spam complaints (a recipient clicking Report spam), hard bounces from invalid addresses, hits on spam trap addresses that only appear on scraped or stale lists, and sudden jumps in volume from a domain with little history. Missing or failing SPF, DKIM and DMARC records make every other signal worse, because the provider cannot confirm the mail is really yours.
Reputation is cumulative and slow to repair. A week of careless sending to a bought list can undo months of clean history, while recovery happens only as new, wanted mail accumulates.
What Google and Yahoo actually require
The clearest public rules come from the two largest consumer mailbox providers. Google's email sender guidelines require every sender to authenticate with SPF or DKIM, keep valid forward and reverse DNS, use TLS, and keep the spam rate reported in Postmaster Tools below 0.3 percent. Google recommends staying under 0.1 percent and never reaching 0.3 percent.
Senders of more than 5,000 messages a day to Gmail accounts must also publish DMARC (a policy of none is allowed), align the From domain with SPF or DKIM, and offer one-click unsubscribe on marketing mail. Google's FAQ adds three details that matter for cold email teams: bulk sender status never expires once reached, volume is counted by primary domain so subdomains add together, and a bulk sender at or above 0.3 percent is ineligible for deliverability mitigation until the rate stays below 0.3 percent for seven consecutive days. Google says it began ramping up enforcement, including temporary and permanent rejections, in November 2025.
Yahoo's sender best practices set the same 0.3 percent complaint ceiling for bulk senders, and ask them for SPF and DKIM, a DMARC policy of at least none, one-click unsubscribe, and unsubscribes honoured within two days. Microsoft announced similar authentication requirements in April 2025 for domains sending more than 5,000 messages a day to Outlook.com consumer addresses.
Most B2B cold email goes to company domains hosted on Google Workspace or Microsoft 365 rather than to consumer inboxes, but the same filtering systems and the same reputation logic apply.
Public blocklists
Spamhaus publishes the Domain Blocklist (DBL), which it describes as a list of domain names with poor reputation. Mail servers check it against the HELO name and the Mail From domain during delivery, and against domains that appear in the headers and body after acceptance, including links. Two consequences follow. A listed domain hurts any message that mentions it, even one sent from a clean domain. And a subdomain is treated as listed when its parent domain is listed.
Spamhaus says most DBL listings expire on their own once the associated activity stops, that removal requests go only through its reputation checker at check.spamhaus.org, and that removal is free; anyone offering paid delisting is running a scam.
Account suspension by your email provider
Google's Gmail program policies tell users not to use Gmail to distribute spam or unsolicited commercial mail, or to send mail that violates the CAN-SPAM Act or other anti-spam laws. They also prohibit creating multiple accounts to get around a restriction. A provider can therefore suspend a mailbox even when the domain's public reputation looks fine. Read the acceptable use terms of whichever provider hosts your sending mailboxes before you plan volumes.
What a separate sending domain protects, and what it does not
Many teams send cold email from a second registered domain, such as a variant of the brand name, so that complaints land on that domain instead of the one carrying invoices and password resets. This works because reputation and blocklist entries attach to the registered domain.
Three limits are worth knowing. A subdomain of your main domain is not separation: Google counts it toward the primary domain's volume, and a DBL listing of the parent covers it. Links in the body still expose your main domain, so heavy complaints can drag the linked domain into trouble too. And rotating through fresh domains to keep sending mail that people report is exactly the circumvention behaviour provider policies prohibit. A separate domain limits damage from honest mistakes; it does not make unwanted mail acceptable.
Early warning signs
Watch for a falling reply rate with no change in copy, rising bounces with 5.x.x error codes that mention policy or authentication, test messages landing in spam across several providers, and a climbing spam rate in Google Postmaster Tools. Note that deliverability vendors, including Twilio, reported that Google retired the domain and IP reputation dashboards when Postmaster Tools moved to version 2 in September 2025, so the spam rate and authentication views are now the main signals Google shows you.
Automatic pauses catch problems faster than weekly reviews. Koryo, for example, pauses a mailbox or domain when its seven-day complaint rate passes 0.3 percent or its hard-bounce rate passes 5 percent after 20 sends; both thresholds are configurable product settings.
If it has already happened
Stop sending from the affected domain first. Then work out which of the four outcomes you are dealing with: check bounce codes, look the domain up at check.spamhaus.org, review the Postmaster Tools spam rate, and confirm the mailbox account is still active. Fix the cause (usually list quality, volume, or a missing unsubscribe path), then resume at low volume to recipients most likely to want the mail, raising volume gradually. Expect weeks rather than days.
Frequently asked questions
- Can one cold email campaign get my domain blacklisted?
- Yes, if it draws enough spam complaints or hits spam traps. A single campaign sent to a scraped or unverified list can push the complaint rate past the 0.3 percent ceiling Google and Yahoo publish, and spam trap hits can lead to a blocklist entry. Small, well-targeted sends to verified addresses rarely cause this on their own.
- Should I send cold email from a subdomain instead of a separate domain?
- A subdomain gives little protection. Google counts subdomain volume toward the primary domain, and Spamhaus treats a subdomain as listed when its parent domain is listed. A separately registered domain isolates reputation better, though links in the message body can still expose your main domain to the same filters.
- How long does it take a domain to recover after being blocked?
- It depends on the cause. Spamhaus says most domain listings expire automatically once the bad activity stops, and Google says bulk senders regain eligibility for mitigation after seven consecutive days below a 0.3 percent spam rate. Rebuilding inbox placement through gradual, wanted sending usually takes several more weeks after that.
- Does cold email count toward Google's 5,000 a day bulk sender threshold?
- Google counts all messages sent to personal Gmail accounts from your primary domain, including subdomains, within 24 hours, whether cold or not. Once a domain crosses 5,000 in a day, bulk sender status is permanent. Most small cold email programs stay well below that, but the authentication and complaint rules apply to every sender.