The pre-send checklist that protects your sender reputation

Why a pre-send checklist is the only thing standing between your campaign and a blacklist

A sender reputation is not a marketing metric. It is a real-time score assigned by mailbox providers (Gmail, Microsoft, Yahoo, etc.) that determines whether your email lands in the inbox, the spam folder, or never arrives at all. The difference between a 95 and a 75 reputation score can be a 20% drop in open rates and a bounce rate that triggers a blacklist filter.

What breaks this process is assuming that “sending an email” is the same as “being ready to send an email.” It is not. A campaign can look fine in your CRM but collapse under the weight of one overlooked issue: an invalid address, a spam-trap recipient, an empty SPF record, or a list that has not been cleaned in months. The failures are invisible until they happen, and by then the damage is already done.

This checklist is designed to expose those failures before they cost you. It is not a list of best practices. It is a list of mandatory checks that protect your domain, your IP, and your sender score from permanent damage. Follow it in order, and you will avoid the most common reasons campaigns get blacklisted, throttled, or silently dropped.

Step 1: Warm up your IP and domain before the first campaign

Warming up is not optional. A cold IP with no sending history is automatically flagged as suspicious by Gmail, Microsoft, and others. They expect gradual volume increases, consistent engagement, and a clean list. If you skip this step, the first batch of emails you send will be subjected to aggressive filtering.

Start by sending small batches, no more than 50, 100 emails per day, to your most engaged subscribers. Use a consistent sending pattern (same time of day, same day of the week) and monitor the open, reply, and spam complaint rates. Anything above 0.1% spam complaints in the first 30 days will trigger a review and possible throttling.

If you do not have an engaged list, create one. Import your most recent customers or high-intent leads and send them a single welcome email. This establishes the IP as legitimate. Use a multi-step cold email sequence to maintain consistent engagement without overwhelming the IP.

Failure mode: Sending 10,000 emails on day one to a cold list will result in 5, 10% bounces and a 0.3, 0.5% spam complaint rate. That is enough to drop your IP reputation by 20, 30 points and get you throttled for 7, 14 days.

Tools to use: Sequences & CRM for gradual volume control and tracking, Verification API to validate addresses before they enter the funnel.

Step 2: Clean the list until every email is deliverable

Deliverability is binary: an email either reaches the inbox or it does not. There is no “almost” category. Before you send anything, every address on the list must be verified as deliverable, non-disposable, and non-spam-trap.

Start with syntax checks. Remove typos, role addresses (info@, contact@, support@), and addresses with invalid TLDs. Then run a full verification pass. Use an API-based verifier to check each address in real time against the mailbox provider’s live SMTP response. This catches hard bounces, role accounts, and disposable emails before they enter your sequence.

Disposable emails are the silent killers of sender reputation. They inflate your list size but never result in engagement. When you send to a disposable address, the mailbox provider sees it as a failed delivery and lowers your reputation score. Over time, this compounds into a blacklist entry.

Also check for spam traps. A spam trap is an address that exists only to catch senders who scrape websites or buy lists. Sending to one will get your IP blacklisted within hours. The only way to avoid them is to verify every address against a real-time API that uses trap detection.

Failure mode: A list with 15% invalid or disposable emails will result in a 10, 15% bounce rate on the first send. That will drop your sender score by 15, 20 points and trigger a review by Gmail Postmaster Tools.

Tools to use: Email Finder to validate addresses before import, Verification API to block trap and disposable emails during real-time checks.

Step 3: Verify that every domain in your list has valid MX and SPF records

SPF, DKIM, and DMARC are not optional configurations. They are gatekeepers. If your domain lacks a valid SPF record, every email you send will be rejected or routed to spam. If your DKIM signature is missing or broken, the mailbox provider will strip it and mark the email as suspicious.

Start with SPF. Use a tool like Free SPF/DKIM/DMARC Validator to check your domain’s DNS records. Your SPF record must include all sending services (CRM, ESP, transactional email provider) and must not exceed 10 DNS lookups. If it does, the record will fail SPF alignment and your emails will be rejected.

Next, ensure DKIM is set up correctly. DKIM adds a digital signature to every email, proving it came from your domain. Without it, mailbox providers will treat your emails as unsigned, which lowers their trust score. Use your ESP’s DKIM setup guide or a third-party tool to generate the public/private key pair and add the TXT record to your DNS.

Finally, set up DMARC with a policy of “p=none” initially. This lets you monitor how your emails are being authenticated without enforcing rejection. Once you see a 100% pass rate for 30 days, switch to “p=quarantine” and then “p=reject.” This gradual rollout prevents legitimate emails from being dropped during misconfigurations.

Failure mode: Missing SPF will result in 100% of emails being rejected by Microsoft domains (Outlook, Hotmail) and a 50% drop in deliverability to Gmail. Broken DKIM will cause 30, 50% of emails to be routed to spam, regardless of content.

Resources: SPF, DKIM, and DMARC Explained for People Who Just Want Their Email to Land

Step 4: Remove duplicate and role addresses that inflate list size but never engage

Duplicates are the easiest way to inflate a list size without adding value. If you send the same email twice to the same address, the second send will be marked as a duplicate and may trigger a spam filter. Worse, role addresses (sales@, admin@, ceo@) never result in replies or conversions, so they lower your engagement metrics.

Deduplicate your list by email address and by name. Use a deduplication tool in your CRM or ESP to remove exact matches. Then run a role-address check. Remove any address that matches a list of known role accounts (common patterns: info@, support@, jobs@, careers@). Keep a separate segment for these addresses and do not include them in your main campaigns.

If you must contact role addresses, use a separate IP and domain that are dedicated to transactional email only. Never mix transactional and marketing traffic on the same IP.

Failure mode: A list with 20% duplicates and role addresses will result in a 15% drop in open rates and a 5% increase in spam complaints, because the same recipient sees the same email multiple times and marks it as spam.

Tools to use: Enrichment to flag role addresses and duplicates before sending.

Step 5: Check your sender domain and reply-to domain against blacklists

Blacklists are real-time databases of IP addresses and domains known for sending spam. If your IP or domain appears on one, every email you send will be rejected or routed to spam, regardless of content. The most common blacklists are Spamhaus, SURBL, and Barracuda. Use a blacklist lookup tool to check your IP and domain before you send.

Blacklists update every few minutes. If you are on one, removal can take 24, 72 hours. During that time, your deliverability will be zero. The only way to prevent this is to check your IP and domain before every campaign and after any large send.

Also check your reply-to domain. If your reply-to domain is different from your sender domain and is not properly authenticated (SPF/DKIM/DMARC), it will be treated as a forgery and rejected. Use the same blacklist tool to check both domains.

Failure mode: Being listed on Spamhaus ZEN will result in 90, 95% of your emails being rejected by Gmail, Microsoft, and Yahoo. Removal can take up to 72 hours, during which you cannot send any emails from that IP or domain.

Tools to use: Verification API for real-time blacklist checks, Free Email Deliverability Checker for quick blacklist lookups.

Resources: MXToolbox Blacklist Checker

Step 6: Validate that every email address belongs to a real person at the target company

A list of “verified” emails is not the same as a list of real people. Email verification tools can confirm syntax and SMTP deliverability, but they cannot confirm that the email belongs to the person you think it does. If you send to john.doe@company.com but that address is forwarded to a shared inbox or a competitor, you will never get a reply, and the mailbox provider will see it as a failed engagement.

Use a tool that cross-references the email with the person’s job title, LinkedIn profile, and company data. Look for consistency: the job title in the email signature should match the job title in the LinkedIn profile, and the company name should match the company domain. If any of these do not match, the email is likely incorrect or forwarded.

Also check for email patterns that indicate shared inboxes. Addresses like noreply@, no-reply@, or support@ are obvious, but some companies use variations like feedback@, hello@, or contact@ for shared inboxes. Avoid these unless you are sending transactional content only.

Failure mode: Sending to 5% of incorrect or forwarded emails will result in a 3, 5% bounce rate and a 2, 3% spam complaint rate, because the recipient never receives the email and marks it as spam when they eventually see it in their shared inbox.

Tools to use: Extension to verify emails directly from LinkedIn and other social profiles, Enrichment to validate job titles and company data against public sources.

Step 7: Segment your list to avoid high-risk recipients and improve engagement

Segmentation is not a marketing tactic. It is a deliverability tactic. Sending the same email to a cold lead and a warm lead will result in lower engagement for the cold lead and a higher spam complaint rate. Mailbox providers use engagement metrics (opens, replies, marks as spam) to determine inbox placement, so segmenting your list by intent and engagement is critical.

Start with intent signals. Separate high-intent leads (downloaded a whitepaper, attended a webinar) from low-intent leads (visited the pricing page once). Send high-intent leads a more aggressive sequence with shorter intervals, and low-intent leads a nurture sequence with longer intervals.

Next, segment by company size and industry. Sending a SaaS cold email to a manufacturing company will result in lower engagement and higher spam complaints, because the content is irrelevant. Use firmographic data to segment by industry, company size, and job title.

Finally, segment by email domain. Gmail, Microsoft, and Yahoo users have different engagement patterns. Gmail users are more likely to open emails, while Microsoft users are more likely to mark them as spam. Adjust your sending volume and timing based on the domain mix in your list.

Failure mode: Sending a generic cold email to 10,000 recipients will result in a 5, 10% open rate, a 1, 2% reply rate, and a 0.3, 0.5% spam complaint rate. Segmenting the same list into 5 segments based on intent and company size can increase the open rate to 20, 25% and the reply rate to 5, 7%, while reducing spam complaints to 0.1%.

Tools to use: Enrichment to segment by firmographics and intent signals, Sequences & CRM to automate the segmentation and adjust sending patterns.

Step 8: Test subject lines and preview text against spam filters before sending

Spam filters do not care about your subject line creativity. They care about spammy patterns: excessive punctuation (!!!), all-caps words, trigger words (free, urgent, guarantee), and misleading preview text. If your subject line triggers a spam filter, the email will be routed to spam even if the content is legitimate.

Use a pre-send spam-check tool to analyze your subject line and preview text. These tools simulate the spam filter of major providers and give you a spam score. If the score is above 5, rewrite the subject line. Common fixes include removing punctuation, avoiding all-caps, and replacing trigger words with synonyms.

Also test the preview text. Many senders use the first line of the email as preview text, but if that line contains a spammy phrase, it will trigger a filter. Use a tool to generate preview text that is both engaging and spam-filter-safe.

Failure mode: A subject line with three exclamation points and the word “free” will trigger a spam score of 7, 8, resulting in 50, 70% of emails being routed to spam, regardless of content.

Tools to use: Free Cold Email Subject Line Generator to test subject lines before sending.

Step 9: Validate the sending infrastructure (IP, domain, ESP) for consistency

Consistency is the key to sender reputation. If your IP address changes between sends, or your domain changes, or your ESP changes, mailbox providers will see it as a red flag. They expect a stable sending pattern: same IP, same domain, same ESP, same volume patterns.

Check your IP reputation using Gmail Postmaster Tools or Microsoft SNDS. If your IP is on a shared host, ask your ESP for a dedicated IP. Shared IPs can be contaminated by other senders’ poor practices, which will lower your reputation even if your list is clean.

Next, check your domain reputation. Use Google’s Postmaster Tools to see your domain’s spam rate, feedback loop data, and authentication status. If your domain reputation is low, switch to a new domain and warm it up before migrating your list.

Finally, check your ESP’s sending limits and throttling policies. Some ESPs impose daily sending limits that are lower than your list size. If you exceed the limit, your emails will be throttled or rejected. Use an ESP that allows you to set custom sending limits and provides real-time throttling alerts.

Failure mode: Switching ESPs mid-campaign will result in a 30, 50% drop in deliverability for 24, 48 hours, as mailbox providers re-evaluate your sending pattern and reputation.

Resources: Gmail Postmaster Tools, Microsoft SNDS

Step 10: Schedule the send for the recipient’s time zone and inbox peak hours

Sending time is not a productivity hack. It is a deliverability hack. Mailbox providers prioritize emails that arrive when the recipient is most likely to engage. If you send at 3 a.m. in the recipient’s time zone, the email will sit in the inbox unopened, lowering your engagement metrics and triggering spam filters.

Use a tool to schedule sends based on the recipient’s time zone. If you do not have time zone data, use the recipient’s company headquarters location as a proxy. Schedule sends between 8 a.m. and 10 a.m. local time for B2B recipients, and between 6 p.m. and 8 p.m. for B2C recipients.

Also consider inbox peak hours. Gmail’s peak hours are 9 a.m., 12 p.m. and 2 p.m., 4 p.m. Eastern Time. Microsoft’s peak hours are 8 a.m., 10 a.m. and 1 p.m., 3 p.m. Pacific Time. Schedule your sends to align with these peaks to maximize open rates and engagement.

Failure mode: Sending at 2 a.m. in the recipient’s time zone will result in a 50% drop in open rates and a 10% increase in spam complaints, because the email sits unopened and is eventually marked as spam.

Tools to use: Sequences & CRM for time-zone-based scheduling, Enrichment to enrich time zone data from firmographics.

Step 11: Add unsubscribe links and physical address in every email

CAN-SPAM and GDPR require every commercial email to include an unsubscribe link and a physical mailing address. If you omit either, you are in violation of the law and subject to fines up to $50,120 per email in the U.S. and €20 million or 4% of global revenue under GDPR.

Place the unsubscribe link in the header or footer, and make it clear and conspicuous. Use language like “Click here to unsubscribe” or “Unsubscribe from future emails.” Do not hide it in small text or behind a click-through.

Also include a physical address. If you do not have a physical office, use a registered agent address or a P.O. box. Do not use a virtual office address or a co-working space address, as these are often flagged as fake.

Failure mode: Omitting the unsubscribe link will result in a 100% legal violation fine if caught by the FTC or ICO, and a 20, 30% increase in spam complaints as recipients mark your emails as spam to unsubscribe.

Resources: FTC CAN-SPAM Act Compliance Guide, GDPR Unsubscribe Requirements

Step 12: Run a small test send to your seed list and monitor for 24 hours

A seed list is a small group of email addresses you control, set up on different providers (Gmail, Outlook, Yahoo, ProtonMail). Send a small batch of emails to the seed list and monitor the inbox placement, spam folder placement, and open rates for 24 hours. If any email is routed to spam, investigate the subject line, sender name, and content for spam triggers.

Also check the email headers for authentication failures. Look for “dkim=pass,” “spf=pass,” and “dmarc=pass.” If any of these fail, fix the authentication before proceeding with the full campaign.

If the test send is clean, send a slightly larger batch (2, 3x the seed list size) to a subset of your main list. Monitor this batch for 24 hours, then scale up gradually if engagement is high and bounces are low.

Failure mode: Skipping the seed list test will result in a 10, 20% bounce rate on the first large send, as spam filters catch issues that the seed list would have exposed.

Tools to use: Create a seed list manually or use Sequences & CRM to automate the test send and monitoring.

Step 13: Document every metric and set a kill switch before the full send

Before you hit send on the full campaign, document the expected metrics: open rate, reply rate, spam complaint rate, bounce rate. Set a kill switch: if any metric drops below the threshold (e.g., open rate <15%, bounce rate >5%, spam complaint rate >0.1%), pause the campaign and investigate.

Use a CRM or ESP that provides real-time dashboards for these metrics. If you see a sudden drop in open rates, check for blacklist issues or authentication failures. If you see a spike in spam complaints, check for misleading subject lines or irrelevant content.

Also document the sender reputation metrics: IP reputation, domain reputation, and spam rate. Use Gmail Postmaster Tools or Microsoft SNDS to track these in real time. If any metric drops below 80, pause the campaign and investigate.

Failure mode: Not setting a kill switch will result in a full campaign sending to 100% of the list even if the first 1,000 emails are routed to spam, lowering your sender reputation permanently.

Tools to use: Sequences & CRM for real-time dashboards and kill-switch automation, Verification API for bounce and spam complaint tracking.

What to do if your sender reputation drops mid-campaign

If your reputation score drops during a campaign, do not wait to see if it recovers. Act immediately. The first step is to identify the cause: blacklist, authentication failure, high bounce rate, or spam complaints.

Blacklist: Use a blacklist lookup tool to confirm. If you are on a blacklist, stop all sends from that IP and domain immediately. File a delisting request and wait for confirmation before resuming. During the delisting process, switch to a backup IP and domain if possible.

Authentication failure: Check SPF, DKIM, and DMARC records. If any are failing, pause the campaign and fix the records before resuming. Use a tool like Free SPF/DKIM/DMARC Validator to verify the fix.

High bounce rate: Check your list for invalid addresses. Use an email verification API to clean the list and remove hard bounces. Resume sending only after the bounce rate is below 2%.

Spam complaints: Check your subject lines, sender name, and preview text for spam triggers. Rewrite any lines that trigger a spam score above 5. Also check your segmentation: if you are sending to low-intent leads, move them to a nurture sequence and reduce the sending frequency.

If the reputation drop is severe (below 70), consider pausing the campaign entirely and warming up a new IP and domain. This is drastic, but necessary if the damage is irreversible.

Failure mode: Ignoring a reputation drop will result in permanent blacklisting, throttling for 30+ days, and a 50, 70% drop in deliverability for future campaigns.

The one-page pre-send checklist you can copy and paste

Print this out or save it as a template. Run through it before every campaign. Check each box only after the step is complete and verified.

1. IP and domain warm-up: Sent 50, 100 emails/day for 7 days with 0 spam complaints.
2. List cleaning: Removed syntax errors, duplicates, role addresses, and disposable emails. Bounce rate <2%.
3. Authentication: SPF, DKIM, DMARC validated and passing. DKIM alignment 100%.
4. Blacklist check: IP and domain not listed on Spamhaus, SURBL, or Barracuda.
5. Email validation: Every email cross-referenced with LinkedIn/job title/company data. No forwarded or shared inboxes.
6. Segmentation: List split by intent, company size, and email domain. High-intent leads prioritized.
7. Spam filter test: Subject lines and preview text scored <5 on spam tests.
8. Infrastructure check: Dedicated IP, stable domain, ESP limits not exceeded.
9. Scheduling: Sends timed for recipient time zone and inbox peak hours.
10. Legal compliance: Unsubscribe link and physical address included in every email.
11. Seed list test: Test send to seed list with 100% inbox placement and 0 spam folder placement.
12. Metrics documented: Open rate >20%, reply rate >5%, bounce rate <2%, spam complaint rate <0.1%.
13. Kill switch set: Campaign pauses if any metric drops below threshold.

If any step is not checked, do not send the campaign.

Common mistakes that undo all your pre-send work

• Buying a list: Every purchased list contains spam traps, role accounts, and invalid emails. The first send will blacklist your IP within hours.
• Skipping warm-up: Sending 10,000 emails on day one to a cold list will drop your reputation by 20, 30 points and trigger throttling for 7, 14 days.
• Ignoring duplicates: A list with 20% duplicates will result in a 15% drop in open rates and a 5% increase in spam complaints.
• Forgetting SPF/DKIM: Missing SPF will result in 100% rejection by Microsoft and a 50% drop in deliverability to Gmail.
• Not checking blacklists: Being listed on Spamhaus will result in 90, 95% rejection by major providers until delisted (up to 72 hours).
• Sending at wrong time: Sending at 2 a.m. recipient time will result in a 50% drop in open rates and a 10% increase in spam complaints.
• Omitting legal links: Omitting unsubscribe or physical address will result in FTC fines up to $50,120 per email in the U.S. and GDPR fines up to €20 million.

What cannot be known before you send, and how to mitigate the risk

Some risks cannot be eliminated, only mitigated. The biggest unknowns are:

• Recipient’s inbox rules: The recipient may have set up aggressive inbox rules that auto-delete or auto-mark as spam based on keywords. There is no way to know this in advance.
• Mailbox provider algorithm changes: Gmail and Microsoft update their spam filters every few weeks. A campaign that passes today may fail tomorrow.
• Shared IP contamination: If your ESP uses shared IPs, another sender’s poor practices can lower your reputation even if your list is clean.
• Forwarding loops: The recipient may forward their email to a shared inbox or a competitor, which will lower your engagement metrics.

Mitigation strategies:

• Use a dedicated IP and monitor its reputation daily using Gmail Postmaster Tools or Microsoft SNDS.
• Set up a feedback loop with your ESP to receive spam complaints in real time. Pause the campaign if complaints exceed 0.1%.
• Use a seed list with multiple providers to catch inbox placement issues before the full send.
• Avoid purchased lists or scraped emails, which have the highest risk of spam traps and role accounts.

How to recover if your sender reputation is already damaged

If your domain or IP is already blacklisted or has a reputation below 70, recovery is possible but not instant. The process takes 30, 60 days and requires strict adherence to the pre-send checklist.

Step 1: Identify the cause. Use Gmail Postmaster Tools or Microsoft SNDS to see your spam rate, feedback loop data, and authentication status. If the cause is blacklist, file a delisting request and wait for confirmation. If the cause is high spam complaints, fix your subject lines and segmentation.

Step 2: Switch to a new domain and IP. Do not reuse the old domain or IP until the reputation recovers. Warm up the new domain and IP with a small, engaged list for 14, 30 days.

Step 3: Clean your list. Remove all invalid, disposable, and role addresses. Verify every email with a real-time API to catch traps and duplicates. Aim for a bounce rate below 2% and a spam complaint rate below 0.1%.

Step 4: Rebuild engagement. Send small batches (50, 100 emails/day) to your most engaged subscribers. Use a multi-step sequence to maintain consistency. Monitor open, reply, and spam complaint rates daily.

Step 5: Document everything. Keep records of every send, bounce, and spam complaint. Use this data to prove your improved practices if you are audited by the FTC or a mailbox provider.

Failure mode: Reusing a blacklisted domain or IP will result in permanent blacklisting and loss of deliverability for future campaigns.

When to outsource the checklist (and when to do it yourself)

This checklist is mandatory, but the execution can be outsourced if you lack the tools or expertise. Use an outsourced service only if:

• You do not have access to an email verification API or a seed list tool.
• Your ESP does not provide real-time authentication checks or blacklist monitoring.
• You are running more than 50,000 emails/month and cannot dedicate internal resources to daily monitoring.

If you outsource, ensure the service provides:

• Real-time verification and trap detection.
• Authentication setup and monitoring.
• Blacklist lookups and delisting requests.
• Spam filter testing and inbox placement reports.
• Dedicated IP and domain recommendations.

Do not outsource if:

• You are sending fewer than 10,000 emails/month (the ROI is not worth it).
• Your list is highly segmented or niche (outsourced services may not have the firmographic data you need).
• You are in a regulated industry (finance, healthcare) and need full control over data processing.

Tools to consider if you outsource: Verification API for real-time checks, Enrichment for firmographic data, Sequences & CRM for monitoring and kill switches.

Final step: Schedule the pre-send checklist as a recurring calendar event

Sender reputation is not a one-time task. It degrades over time due to list decay, blacklist additions, and algorithm changes. Schedule the pre-send checklist as a recurring event in your calendar, at least once per month for active campaigns, and before every new campaign.

Automate as much as possible. Use your CRM or ESP to flag duplicates, role addresses, and invalid syntax on import. Set up real-time alerts for blacklist additions, authentication failures, and spam complaints. Use a tool like Verification API to validate emails at the point of entry, not just before sending.

If you automate the checklist, you will catch issues before they damage your reputation. If you do not, you will send campaigns that fail silently, and the damage will only become visible when your open rates drop and your replies dry up.

Start with the checklist today. Do not send another campaign until every step is checked and verified.

Next step: Compare your current list against the checklist. If you need to clean or verify emails, try Email Finder for real-time validation or Verification API for batch cleaning. When you are ready to scale, review pricing for dedicated IPs and advanced features.