Why the setup alone is not enough
SPF, DKIM, DMARC, PTR and a valid certificate answer the question “is this message genuine?”. They do not answer “is this sender wanted?” — and that is what decides the inbox. The second question can only be answered through behaviour over time.
A new sender pushing ten thousand messages on day one looks like what a new sender pushing ten thousand messages on day one usually is. Warming up is the counter-evidence.
The ramp
As a reference point for a self-hosted server or a dedicated IP:
Two rules matter more than the exact figures:
- Even rather than bursty. Sending daily beats three times the volume twice a week. Regularity is itself a signal.
- Only step up when the numbers hold. If the complaint rate rises or soft rejections cluster, volume stays where it is until that settles.
Who you start with
The most effective part of warming up is the choice of the first recipients. Begin with those who reliably open and reply — active customers, internal addresses, recent sign-ups. Positive signals early weigh more than later ones, because the sample is small.
Conversely, old addresses not contacted in a long time belong at the end of the plan, not the start. A list from three years ago contains closed mailboxes, and every delivery to a closed mailbox is a negative signal — at some providers even a spam trap.
What sets the plan back
- A volume jump. From 500 to 20,000 in one day reliably produces
421rejections or wholesale filing into the spam folder. The build-up effectively restarts afterwards. - Bought or rented addresses. The fastest route onto a blacklist, and the only mistake in this list that patience cannot repair.
- Ignoring hard rejections. Continuing to send to addresses that permanently refused signals that you do not maintain your list. Those addresses have to go after the first
550. - Promotional and transactional mail on the same address. Complaints about one hit delivery of the other. Separate subdomains are the precaution.
What you measure with
Warming up without measurement is hope. Three sources are enough:
- DMARC reports — show whether authentication passes in alignment at every receiver.
- Your own bounce logs — soft rejections with
4.7.xare the earliest warning of a reputation problem, long before anyone notices anything. - Blacklists — a listing during warm-up means a cause is still open. The blacklist check tests the sending IP against 43 lists.
If the IP is already listed, warming up does not help — then it is about the cause first, and delisting.