This guide assumes cold email infrastructure is already deployed and passing. It covers what breaks at scale and how mature teams operate it.
Edge cases that break a working setup#
- Sending cold mail from the primary company domain.
- Skipping DMARC on secondary domains because 'they do not matter'.
- Buying aged domains with unknown history.
- Mail forwarded through mailing lists or personal forwarders, which alters headers and content.
- Acquisitions and rebrands that introduce domains nobody audited.
- Vendors silently changing their sending infrastructure.
Operating it as infrastructure#
- Assign an owner for each sending domain and each vendor relationship.
- Put DNS records under version control or a change-review process.
- Alert on authentication pass rate drops and reputation changes, not just outages.
- Run a quarterly audit against the setup steps below.
- Document runbooks for the three most common failures.
Reference: the baseline setup#
- Register 2 to 5 lookalike domains and redirect them to your main site.
- Set up SPF, DKIM, and DMARC on every domain from day one.
- Create 2 to 3 mailboxes per domain and warm each for 3 to 4 weeks.
- Cap sends at 30 to 50 per mailbox per day and rotate across mailboxes.
- Monitor bounce and reply rates per mailbox; retire any that degrade.
Frequently asked questions#
How many emails can I send per mailbox per day?
Google Workspace allows 2,000, but for cold outreach 30 to 50 keeps you under behavioral thresholds.
Should I use Google Workspace or Microsoft 365 for cold email?
Both work. Workspace mailboxes tend to warm faster; Microsoft has stricter outbound spam filtering.