The 2026 cold email infrastructure checklist.

1. Know what you own

Start with your registrar account. Confirm the registrant, renewal date, renewal cost and recovery contact. Use strong authentication and keep domain access under your control.

Know where DNS is managed. Your registrar, DNS provider, website host and email provider may be different services. Changing one does not automatically move the others.

Export or copy the current DNS records before a migration. Website records and mail records do different jobs; replacing a website should not erase the records your inboxes rely on.

2. Authenticate your actual sender

• SPF: authorise the services that really send for your domain. Maintain one SPF policy for a given hostname, and respect the protocol’s lookup limit.
• DKIM: publish the selector and public key supplied by your email provider. Enable signing in the provider, then test a message.
• DMARC: check alignment with the visible From domain. Start with a deliberate monitoring policy if you need visibility, then choose enforcement after reviewing legitimate senders.

Copying a DNS template is not the same as verifying it. Read the full headers of a delivered test message and check your provider’s authentication status.

3. Check the receiving experience

Send to a test inbox you control. Does the display name identify your business? Does Reply work? Does the domain lead to the right website? Is the opt-out straightforward?

If you use tracking, understand the trade-off. Click tracking changes links and open tracking can be unreliable. Add only what you need and configure any custom tracking hostname according to the sending platform’s instructions.

Google has additional requirements for senders of more than 5,000 messages per day to personal Gmail accounts. These include SPF and DKIM, DMARC and, for applicable marketing and subscribed messages, one-click unsubscribe. Check the current rules for your traffic rather than assuming every requirement applies in the same way to every sender.

4. Set the monitoring loop

Assign someone to review bounces, deferrals, complaints, unsubscribes and replies. Have a clear process to suppress invalid addresses and opt-outs across your tools.

Google recommends keeping the user-reported spam rate below 0.1% and avoiding 0.3% or higher. These are provider guidelines, not predicted results for your campaigns. Use the relevant provider’s definitions and monitoring tools.

Finally, confirm that your audience, message and sending practices meet applicable rules and your provider’s policies. Authentication is the starting point, not permission to send anything to anyone.