None of this costs money. All of it costs attention, and skipping any one of them makes the rest of the spend pointless.
- SPF, DKIM and DMARC, on every sending domain
- Gmail and Yahoo have required all three of bulk senders since 2024, and cold outreach is judged by the same machinery. One SPF record only, because two is a hard failure. Start DMARC at p=none with a reporting address, read the reports for a fortnight, then tighten.
- MX records, even on a domain that only sends
- Bounce notifications arrive as mail. Without an MX record you cannot receive the messages telling you an address is dead. A domain with no MX also looks disposable to the systems deciding whether to trust it.
- Three weeks of warming, per domain
- Reputation belongs to the domain, so a new mailbox on a warm domain inherits most of it and a new domain starts from nothing however many mailboxes sit on it. MastroSDR ramps every new mailbox from 10 a day over 21 days and will not let you skip it.
- A hard cap of 50 a day per mailbox
- Thirty to fifty an inbox a day circulates everywhere and nobody sources it, so this page does not repeat it as guidance. Two numbers here are genuinely published: Google, Yahoo and Microsoft each state a 0.3% spam complaint ceiling, and Google treats you as a bulk sender past five thousand a day (support.google.com/mail/answer/14229414). That 50 in the heading is our own choice rather than a citation, and MastroSDR enforces it in code rather than in a settings field, so no number anyone types raises it. More throughput comes from another mailbox on another domain, and there is no monthly cap above that on a paid plan.
- A verified list, and a bounce rate under two percent
- Over five percent and providers start throttling the address. MastroSDR checks every address can receive mail before spending a send on it, and a hard bounce goes on a do-not-contact list permanently rather than being retried.
- One-click unsubscribe and a postal address, in every message
- The List-Unsubscribe and List-Unsubscribe-Post headers of RFC 8058, which Gmail and Yahoo require, plus the physical address CAN-SPAM requires. An unsubscribe has to apply to mail already sitting in the queue, which is the most common way a system that is compliant on paper still generates complaints.
- Open tracking switched off
- A tracking pixel costs you deliverability and buys data that no longer means anything. Apple Mail Privacy Protection loads the pixel for around half of all recipients whether or not a person opened it. Any logic built on open rate is built on noise.
- Somewhere to see the spam rate
- Google Postmaster Tools is the only place a complaint rate exists: somebody pressing Report spam tells Google and tells you nothing. Verify each sending domain there. Keep the rate under 0.1%, because Google acts at 0.3% and problems start well below it.