Many B2B teams noticed the same thing over the past year: the cold email programme that used to book meetings went quiet. Nothing in the copy had changed. What changed is the inbox. Google, Yahoo and Microsoft now enforce sender rules that used to be recommendations, and mail that breaks them is rejected instead of quietly filtered. This guide explains what the rules require, what realistic results look like in 2026, why deliverability is mostly a targeting question, and how to build a multichannel outbound sequence that does not depend on one fragile channel.
It is written for technology and SaaS companies selling into the GCC and Europe, and it reflects how The Funnellab runs SDR-as-a-Service every day: email, LinkedIn and phone together, in the buyer’s language.
Three dates explain most of what happened to cold email.
February 2024. Google and Yahoo began enforcing requirements for bulk senders, defined by Google as roughly 5,000 or more messages a day to Gmail addresses. Senders must authenticate their mail, offer one-click unsubscribe on promotional messages and keep spam complaints below 0.3%.
5 May 2025. Microsoft applied similar requirements to domains sending more than 5,000 messages a day to Outlook, Hotmail and Live addresses. Mail from high-volume senders without proper authentication is now rejected outright.
Late 2025 onward. According to SmartReach’s State of Cold Email 2026 report, Gmail moved from filtering non-compliant bulk mail to rejecting it at the point of delivery. The penalty for a poor set-up is no longer the spam folder. It is a bounce.
In practice, the rules come down to four things:
• SPF and DKIM: two technical records that prove a message really comes from your domain.
• DMARC: a published policy that tells receiving servers what to do when a message fails those checks, with your visible sender domain aligned to the authenticated one.
• Easy unsubscribe: a working way to opt out, honoured within days.
• Low complaints: fewer than three in every thousand recipients marking you as spam.
The 5,000-a-day threshold sounds far away for a small outbound team. Treat it as irrelevant. Providers judge reputation at every volume, and the direction is clearly towards the same standards for everyone.
Two sets of numbers help set expectations.
Reply rates. Instantly’s 2026 benchmark, drawn from its platform data, puts the average cold email reply rate at 3.43%. The top quarter of campaigns reach 5.5% and the top tenth 10.7%. A realistic target for a well-run B2B programme is therefore 3 to 6%, and anyone promising 20% as a standard should be asked how they count.
Inbox placement. Validity’s 2026 deliverability benchmark reports global inbox placement of 87.2% for 2025, with a wide spread by provider: 89.8% at Gmail and 77.4% at Microsoft. That figure covers all commercial email, not only cold outreach, which fares worse. If your buyers sit in large enterprises and public bodies, where Microsoft mailboxes are common, assume that a meaningful share of your email never reaches a person.
Open rates are missing from this list on purpose. Privacy features and security scanners open messages automatically, so opens no longer tell you whether a human read anything. Replies, positive replies and meetings are the honest numbers.
Most advice on deliverability is technical: more domains, more inboxes, warm-up tools, rotation. That treats the symptom. The complaint threshold is the real constraint, and complaints come from people who received something irrelevant.
The arithmetic is unforgiving. Send 1,000 emails to a loosely defined list and four annoyed recipients put you over 0.3%. Send 200 emails to people with a clear reason to hear from you and the same four complaints almost never happen. The path to better deliverability runs through smaller, sharper lists.
That is why we start every programme with the ideal customer profile and with buying signals, as described in our guide to signal-based selling. A message that arrives after a relevant event and addresses a real problem earns a reply or, at worst, a polite no. Neither damages your domain.
Targeting comes first, but the foundations still have to be right. This is the checklist we would expect any outbound programme to pass.
1. Protect your main domain. Run cold outreach from a separate, clearly related domain so that a reputation problem never affects invoices, support or customer email.
2. Authenticate everything. SPF, DKIM and DMARC with alignment on every sending domain, tested before the first campaign.
3. Warm up gradually. A new domain should start with a handful of emails a day and build over four to six weeks at a steady rhythm.
4. Verify addresses. Check every address before sending. A bounce rate above 2% tells providers that you do not know who you are writing to.
5. Keep volume per inbox moderate. Dozens a day, not hundreds. Predictable volume looks like a person. Sudden spikes look like a machine.
6. Write like a person. Plain text, one link at most, no attachments, no tracking pixels where you can avoid them.
7. Monitor and honour opt-outs. Watch complaint and bounce data in the providers’ postmaster tools and remove anyone who asks, immediately and for good.
Even a perfect email set-up has a ceiling. Roughly 96 in 100 cold emails get no answer, and some never arrive. The answer is not more email. It is to stop relying on a single channel. Each channel covers a weakness of the others.
Email scales and gives the buyer something to forward internally, but it is filtered and easy to ignore.
Phone has the lowest reach and the highest trust. A two-minute live conversation tells you more than twenty emails, and no spam filter stands in the way. Our cold calling playbook covers openers, gatekeepers and objections.
LinkedIn adds context. A profile visit, a connection request and a short message let the buyer see who you are before you call.
WhatsApp is a normal business channel in the Gulf, but only once a buyer has shared a number or agreed to continue there. Used as a cold channel, it is intrusive.
Events turn weeks of outreach into one handshake, and outreach before a show fills the calendar.
Industry benchmarks consistently report that adding a second channel lifts response well above email alone. Our own experience points the same way: the meeting is usually booked on the phone, but the email and the LinkedIn message are the reason the call is answered.
This is a simple structure for one decision-maker at a well-chosen account. Adjust the days to the buyer’s working week.
• Day 1: LinkedIn profile visit and connection request without a pitch.
• Day 2: first email, four or five sentences, built on a specific reason and ending with one question.
• Day 3: first call. If there is no answer, no voicemail yet.
• Day 5: second call at a different time of day, with a short voicemail that refers to the email.
• Day 7: LinkedIn message with something useful, such as a short insight or a relevant example.
• Day 9: second email in the same thread, with a new angle instead of “just following up”.
• Day 12: third call, plus a call to a second contact at the same account.
• Day 15: a short closing email that leaves the door open and says you will not write again unless something changes.
Eight touches, three channels, two emails that count against your sending reputation. If the account matters and a new signal appears, start again in a few months with a new reason.
The right channel mix depends on where the buyer sits. The following is an overview, not legal advice; check with counsel before you design a programme.
Germany. Under UWG §7, advertising email without prior consent is generally not permitted, including in B2B, while a B2B phone call requires at least presumed consent. In practice, well-founded calls and LinkedIn carry more weight in DACH, and email follows once there has been contact.
France and Spain. French guidance allows B2B prospecting email without prior consent when the message relates to the recipient’s professional role and includes information and an opt-out. Spain’s LSSI is more restrictive about unsolicited commercial email. GDPR applies in both.
Saudi Arabia and the Gulf. Saudi Arabia’s PDPL and the UAE’s PDPL govern personal data. Beyond the law, the culture favours voice and relationships: a respectful call in Arabic often achieves what five emails cannot. Remember that the Saudi working week runs from Sunday to Thursday.
Track a small set of numbers every week: bounce rate, complaint rate, reply rate, positive reply rate, conversations held by phone, meetings booked and meetings attended. Look at them by channel and by market, because a sequence that works in the UAE may fail in Germany for reasons that have nothing to do with the message. We look at the full scorecard in our article on SDR KPIs.
Every month, one of our programmes generates at minimum 4,000 emails, 3,000 LinkedIn interactions and 1,000 cold calls, spread across carefully chosen accounts and several inboxes so that no single channel or domain is overloaded. An AI layer identifies buying signals. Human Pipeline Engineers, drawn from the top 2% of SDR talent, do the research and hold the conversations in Arabic, English, German, French and Spanish.
Objections are shared with the client every week and messaging is refined on that basis. Besides booked meetings, clients often see what we call The Funnellab Effect: prospects who were contacted later arrive inbound through the client’s own website, because the market has started to recognise the name.
We work on a monthly retainer plus a fee per attended SQL meeting, starting with a three-month proof of concept. If you are comparing models, our overview of SaaS sales outsourcing explains the options.
Is cold email still worth it in 2026? Yes, as one part of a multichannel sequence. Undifferentiated high-volume cold email no longer works because providers reject or filter it, but low-volume email to well-chosen contacts, combined with calls and LinkedIn, still starts conversations.
What is a good cold email reply rate in 2026? A realistic reply rate for a well-run B2B campaign is 3 to 6%. Instantly’s 2026 benchmark reports an average of 3.43%, with the top tenth of campaigns above 10%.
What do Google, Yahoo and Microsoft require from senders? They require authenticated mail using SPF, DKIM and DMARC, an easy way to unsubscribe from promotional messages and a spam-complaint rate below 0.3%. Google and Yahoo have enforced this since February 2024 and Microsoft since 5 May 2025 for high-volume senders.
What is multichannel outbound? Multichannel outbound is a sequence that combines email, phone, LinkedIn and sometimes events or WhatsApp to reach the same decision-maker. Each channel supports the others, so the programme does not depend on email deliverability alone.
If your outbound has gone quiet, we are happy to look at your targeting, your channels and your markets with you. Read our FAQ, explore more articles on the blog, or contact The Funnellab to discuss a three-month proof of concept.