Email deliverability for creator outreach

Email deliverability is the boring, invisible work that decides whether your creator outreach ever gets read. This guide is for brand owners, marketers, and agencies who want to run email sequences to creators and need the sending domain set up correctly before the first message goes out.

Hubfluence runs Email Sequences as the Gmail channel inside Outreach Sequences, but the deliverability foundation is the same no matter what tool you send from. Get the domain right first.

Why deliverability matters before you send a single email

You can write the best creator pitch in the world, and it does not matter if it lands in spam. Deliverability is whether the receiving mail server (Gmail, Outlook, Yahoo) accepts your message and puts it in the primary inbox instead of the spam folder or a hard bounce.

Cold creator outreach is a harder case than normal email. You are messaging people who have never emailed you, often at high volume, which is exactly the pattern spam filters are built to catch. If your domain is not authenticated and warmed up, the mailbox providers assume the worst.

Two things changed the rules recently. In 2024, both Google and Microsoft tightened their bulk-sender requirements. Any domain sending meaningful volume now needs SPF, DKIM, and DMARC in place, a visible unsubscribe path, and a spam-complaint rate under roughly 0.3 percent. This is no longer a best practice you can skip. It is the price of entry.

Step 1: send from your own domain, not a free inbox

The first rule is to send from a real business domain you control, like [email protected], not from a free @gmail.com or @outlook.com address.

• Free inbox addresses cannot be authenticated the way a domain can. You do not control the DNS for gmail.com, so you can never prove the mail is really from you.
• Domain reputation is an asset you build. Every properly authenticated send teaches the mailbox providers that your domain is trustworthy. A free inbox gives you nothing to build on.
• Consider a separate sending domain or subdomain for cold outreach. Many teams send cold email from a dedicated domain (like yourbrand-mail.com) or a subdomain (like go.yourbrand.com) so that if outreach reputation dips, it does not drag down the main domain your customers and invoices rely on.

If you are just starting, sending from your primary domain is fine at low volume. Once you scale outreach, isolate it.

Step 2: understand the three DNS records that authenticate you

SPF, DKIM, and DMARC are three TXT records you add to your domain's DNS settings. Together they prove to Gmail and Outlook that the email really came from you and was not forged. Think of them as the three signatures a mailbox provider checks before trusting your mail.

SPF (Sender Policy Framework)

SPF is a DNS record that lists which mail servers are allowed to send email for your domain. When Gmail receives your message, it checks the sending server against that list. If the server is not authorized, the message fails SPF.

You publish one SPF record as a TXT entry. It looks like this:

v=spf1 include:_spf.google.com ~all

The include part names the provider sending on your behalf (Google Workspace in this example). If you send through more than one service, each one gets added to the same single SPF record. You are allowed only one SPF record per domain, so merge them, never publish two.

DKIM (DomainKeys Identified Mail)

DKIM adds a cryptographic signature to every email you send. Your sending provider signs the message with a private key, and you publish the matching public key as a DNS record. The receiving server uses the public key to confirm the message was not altered in transit and really came from your domain.

DKIM is what stops someone from forging your address. You generate the key inside your email provider (Google Workspace or Microsoft 365), then paste the value it gives you into a TXT record in your DNS.

DMARC (Domain-based Message Authentication)

DMARC ties SPF and DKIM together and tells receiving servers what to do when a message fails both. It is a TXT record at _dmarc.yourdomain.com. A simple starting policy looks like this:

v=DMARC1; p=none; rua=mailto:[email protected]

The p= value is the policy: none means monitor only (collect reports but do not block), quarantine means send failures to spam, and reject means refuse them outright. Start at p=none so you can watch the reports without hurting real mail, then tighten to quarantine and eventually reject once you confirm your legitimate mail passes. The rua address is where the daily aggregate reports get sent.

Step 3: set it up in Google Workspace

If you send from a Google Workspace address, here is the order of operations.

1. Confirm your domain is verified in Google Admin. You cannot authenticate mail for a domain Google has not confirmed you own.
2. Add the SPF record. In your DNS host (GoDaddy, Cloudflare, Namecheap, wherever your domain lives), add a TXT record at the root with the value v=spf1 include:_spf.google.com ~all.
3. Turn on DKIM. In Google Admin, go to Apps, Google Workspace, Gmail, Authenticate email. Generate the DKIM key, copy the TXT record host and value, add it to your DNS, then come back and click Start Authentication.
4. Add the DMARC record. Create a TXT record at _dmarc.yourdomain.com with v=DMARC1; p=none; rua=mailto:[email protected] to start in monitoring mode.
5. Wait for DNS to propagate. Changes can take anywhere from a few minutes to 48 hours to go live. Do not panic if it is not instant.

Step 4: set it up in Microsoft 365 / Outlook

The concepts are identical for Microsoft 365, only the menus differ.

1. Add the SPF record as a TXT record at the root with v=spf1 include:spf.protection.outlook.com -all.
2. Enable DKIM in the Microsoft Defender portal under Email and collaboration, Policies and rules, Threat policies, DKIM. Select your domain and enable signing. Microsoft gives you two CNAME records to add to your DNS rather than a single TXT key.
3. Publish DMARC the same way as above: a TXT record at _dmarc.yourdomain.com starting with p=none.
4. Verify with any free authentication checker before you send at volume.

Step 5: warm up the domain before you scale

A brand-new domain (or a domain that has never sent much email) has no reputation. If you go from zero to a thousand cold emails on day one, mailbox providers read that spike as a spam attack and filter you hard.

Warming up means ramping volume slowly so the receiving servers learn your domain is a real sender.

• Start small. Send a modest number of emails the first few days, ideally to people who will open and reply, and increase the daily count gradually over two to four weeks.
• Prioritize early engagement. Opens, replies, and being moved out of spam are the strongest positive signals. Your first sends should go to your warmest, most likely-to-reply contacts.
• Keep volume steady once warmed. Wild swings in daily volume look suspicious. Consistency reads as legitimate.
• Do not buy a domain today and blast it tomorrow. The single most common deliverability mistake is skipping the warm-up. It is also the easiest to avoid.

How to avoid the spam folder

Authentication gets you in the door. Content and behavior keep you in the inbox.

• Write like a human, not a billboard. Spam filters and readers both distrust ALL CAPS subject lines, exclamation-point pileups, and phrases like "act now" or "free money." Keep it plain and specific.
• Watch your text-to-link ratio. A short email with one relevant link outperforms a message stuffed with links, tracking pixels, and giant images.
• Always include a real unsubscribe or opt-out path. Bulk-sender rules now require it, and it lowers spam complaints because annoyed recipients unsubscribe instead of hitting the spam button.
• Personalize the first line. Generic mass-mail templates get flagged and ignored. A specific reference to the creator's content reads as one-to-one mail, which filters treat more kindly.
• Keep your spam-complaint rate low. Google wants it under 0.3 percent. A few complaints per thousand sends is the danger zone, so make it easy to opt out and only email genuinely relevant creators.

How to fix and prevent bounces

A bounce is an email that could not be delivered. There are two kinds, and they matter differently.

• Hard bounces are permanent: the address does not exist or the domain is invalid. These hurt your reputation the most. Remove hard-bounced addresses immediately and never retry them.
• Soft bounces are temporary: a full mailbox, a server that is down, a message too large. These usually resolve on their own, but repeated soft bounces to the same address should be pruned too.

To keep bounces low:

• Only email verified, real addresses. Sending to a list full of dead addresses is the fastest way to wreck a new domain. If you are sourcing creator emails, use ones that are publicly listed and current.
• Keep your list clean. Remove hard bounces after every send and re-verify older lists before reusing them.
• Do not scrape and blast. A bloated list of unverified addresses drives bounces up and reputation down. A smaller, accurate list always outperforms a big, dirty one.

A bounce rate under about 2 percent is healthy. Climb past 5 percent and mailbox providers start throttling you.

Why this matters for TikTok Shop brands and agencies

Email is one of the highest-reply-rate channels for first-touch creator outreach, but only if it reaches the inbox. For a TikTok Shop brand trying to recruit affiliates at volume, a domain that is not authenticated means every hour spent writing pitches is wasted the moment Gmail routes them to spam. Deliverability is the multiplier on all of your outreach effort.

This is also why running outreach from your own authenticated domain beats blasting from a random third-party sender. Replies land in your real inbox, your domain reputation compounds over time, and you are not renting deliverability from a shared pool of unknown senders. The setup takes an afternoon and pays off on every send after.

For agencies managing outreach across several client brands, the same rules apply per domain. Each client's sending domain needs its own SPF, DKIM, DMARC, and warm-up. Treating deliverability as a per-client checklist is what separates an agency whose emails get read from one whose campaigns quietly die in spam.

Hubfluence Email Sequences send from your own connected Gmail so your domain reputation and replies stay yours, and they pair with TikTok DM Sequences for a higher blended reply rate. If you want a second pair of eyes on your domain setup and sequence before you scale, book a strategy call and our team will walk through it with you.