How to Write Cold Emails That Avoid Spam Filters

Cold emails get flagged as spam when weak technical setup (no SPF, DKIM, or DMARC, an unverified domain) combines with content that reads like a mass blast: bait subject lines, spam trigger words, heavy formatting, and no clear way to opt out. To keep cold emails out of spam folders, fix your domain authentication first, then write every email like a one-to-one message from a real person: plain text, no urgency language, one link at most, and personalization that goes past a first-name merge field.

Key takeaways

• Spam filters score both technical signals (domain authentication, sender reputation) and content signals (wording, formatting, links). Fixing only one rarely solves the problem, according to Sopro.
• Words like free, guaranteed, act now, no obligation, and click here still drag down deliverability in cold outreach.
• Hunter.io recommends unstructured, plain-text-style emails with no images and minimal formatting.
• Every cold email needs a real unsubscribe or opt-out link, per Hunter.io and Sopro, or recipients report you as spam instead of quietly unsubscribing.
• Vendisys recommends one link at most in a cold email, and zero links is fine for a first touch.

What does it actually mean for an email to "get flagged as spam"?

Getting flagged as spam means an email provider's filter, not the person you emailed, decided your message looked unwanted and routed it to the spam or promotions folder before it ever reached the inbox. A spam filter is an automated system that scores incoming email on domain authentication, sender reputation, and content patterns, then routes anything above a risk threshold away from the inbox.

That scoring happens in two separate lanes. One lane looks at your domain and server setup. The other lane reads your actual words, links, and formatting. Both lanes have to pass, or the email gets buried.

Why do cold emails get flagged more than regular business email?

Cold emails get flagged more often because they statistically look different from a normal one-to-one message: same content sent to dozens or hundreds of people, from a domain with limited sending history, often loaded with tracking links. Mailstand points out that things like all-caps text and excessive punctuation are exactly the kind of pattern-matching signals that trigger filters, because they show up constantly in genuine spam and rarely in a message you'd write to a colleague.

A reply from your friend doesn't have a tracking pixel, five bullet points, and a big blue button. A cold email that does looks like a campaign, and filters are built to catch campaigns.

What technical setup do you need before you write a single word?

You need a properly warmed-up domain with SPF, DKIM, and DMARC configured correctly before content quality even matters. Sopro is direct about this: don't send cold email from your main company domain, use a dedicated domain that's been warmed up gradually, with those DNS records in place.

Here's the setup sequence worth following:

1. Buy a secondary domain that mirrors your main one (not your primary company domain).
2. Set up SPF, DKIM, and DMARC records for that domain.
3. Warm it up for one to two weeks by sending small, increasing volumes to real inboxes before running any outreach campaign.
4. Before every big send, test the draft by mailing it to seed inboxes at Gmail and Outlook and confirm it lands in the primary tab, not promotions or spam, a check Vendisys recommends doing on every campaign.

Skipping this step is the single most common reason a well-written cold email still ends up buried. This kind of infrastructure and testing is exactly the system we build and manage for clients, so the writing side of cold outreach actually has a chance to work.

How do you write a subject line that won't trip spam filters?

Write a subject line you'd be comfortable saying out loud to the person's face, with no caps lock and no exclamation points. Vendisys frames it as a simple test: read the subject line out loud, and ask if it sounds like a person or a banner ad.

Gmass warns specifically against deceptive subject lines, the kind designed to trick someone into opening without telling them what's actually inside. It might boost your open rate short-term, but it also drives spam complaints, which hurt your sender reputation long after that one email is gone.

Martal recommends the same thing from a different angle: write something clear and honest instead of clickbait, because misleading subjects breed distrust even when they do get opened.

Which words and phrases are cold email spam triggers?

Words tied to money, urgency, and hype are the most common spam triggers in cold email copy. A widely cited list of offenders includes:

• Free, guaranteed, earn money, risk-free, best price
• Act now, limited time offer, no obligation
• Click here, congratulations
• Excessive exclamation points or ALL CAPS anywhere in the subject or body

These show up constantly in the kind of mass spam filters were built to catch, which is why using even one or two can tank deliverability on an otherwise fine email. The fix isn't memorizing a blocklist, it's writing the way you'd actually talk to someone you respect. If a sentence would feel out of place in a text to a colleague, cut it.

The safest cold email doesn't try to sound persuasive. It tries to sound like it came from a specific person who did their homework on one specific recipient.

How should you format the body of a cold email?

Keep it unstructured, plain, and short, the same way you'd write to someone you already know. Hunter.io is specific on this: use unstructured text, avoid images, skip unnecessary formatting, and keep the length appropriate to a cold outreach context, which usually means well under 150 words.

A few formatting rules worth following on every send:

• Skip images, logos, and banners entirely on a first-touch email.
• Keep links to one, or zero on a first message, per Vendisys.
• Proofread every send, and confirm merge fields render correctly, because a broken {{first_name}} tag is an instant tell that this is a mass send, not a personal note.
• Avoid excessive punctuation and bolding, which Mailstand flags as a common spam-filter trigger.

How personalized does a cold email actually need to be?

A cold email needs enough specific detail about the recipient that it couldn't have been sent to anyone else in their industry. Hunter.io's guidance is blunt: the more personalized your message, the better it performs, both for getting a reply and for staying out of spam.

Martal describes the target as writing like a professional talking to another professional, one to one, not like a brand talking to a list. That means referencing something true about their business, their role, or a recent change at their company, not just swapping in a first name and company name into an otherwise generic template.

Worked example. Say you're running outreach to 500 clinic administrators about appointment scheduling software. A generic version might read: "Hi {{first_name}}, are you tired of missed appointments costing you money? Our AI-powered platform guarantees a 30% reduction, act now for a free trial!" That email hits at least four trigger patterns: a rhetorical bait question, the word guaranteed, an urgency phrase, and the word free.

A rewritten version: "Hi Dana, saw that Riverside Clinic added a second location this year. Curious how you're currently handling no-show follow-up across two sites, since that's usually where scheduling tools start breaking down. Happy to share what's worked for a couple of similar clinics if useful." No links, no bold, no urgency words, and it reads like something a person actually typed. That's the same structure we used in an outreach campaign for healthcare prescriber data, where reply quality mattered more than raw volume.

How often can you follow up without getting reported as spam?

You can follow up, but Hunter.io recommends doing it respectfully and not too often, usually spaced several days apart with a genuinely new angle each time, not just "just bumping this up." Repeating the exact same email over and over is one of the fastest ways to get reported.

Always include a real unsubscribe or opt-out option. Hunter.io and Sopro both point to the same underlying logic: if someone doesn't want your emails and has no easy way to leave the list, they'll hit "report spam" instead of "unsubscribe," and that report hurts your domain's reputation for every future send, not just that one recipient.

The 5-second spam check

Before you hit send on a cold campaign, run every email through this quick check:

Signal	Red flag version	Safe version
Subject line	ALL CAPS, exclamation points, "You won't believe..."	Short, specific, sounds like a person
Body copy	Free, guaranteed, act now, click here	Plain language, no urgency words
Links	3+ links, tracking-heavy URLs	0-1 link, especially on first touch
Formatting	Images, banners, bold, colored text	Plain text, no images
Personalization	{{first_name}} only	A real, specific detail about the recipient
Opt-out	None, or buried in tiny text	Clear unsubscribe link every time
Domain	Main company domain, no auth records	Dedicated warmed-up domain with SPF/DKIM/DMARC

If an email fails three or more of these, it's not ready to send. Fix the technical column first, then the content column, and test on seed inboxes before it goes to a real list.

Common mistakes that get cold emails marked as spam

• Sending from a brand-new domain with zero warm-up. Filters treat unfamiliar domains with high suspicion in the first few weeks, no matter how good the copy is.
• Using the same subject line across an entire list. Identical subject lines sent to many recipients at once is a pattern filters specifically watch for.
• Skipping the opt-out link to "keep it clean." This backfires, since it removes the easy exit and pushes recipients toward reporting spam instead.
• Writing copy that sounds like an ad because it's trying too hard to sell. Persuasive language and hype words are exactly what filters are trained to catch.
• Ignoring merge field errors. A broken token like "Hi {first_name}," left unfixed is a dead giveaway of a mass send, and it embarrasses the sender too.

This is the kind of ongoing setup, testing, and copy discipline that keeps outreach out of spam long after the first campaign, which is exactly the service we design and manage for clients.

FAQ: Cold Email Spam Filters

See below.

Automation Atlas designs, sets up, and manages cold outreach systems for businesses, including domain authentication, deliverability testing, and email copy that's built to stay out of spam and actually get replies. If your cold outreach is landing in spam or going nowhere, get in touch and we'll look at what's breaking.