How to Set Up Cold Email Infrastructure That Doesn't Land in Spam in 2026

Cold email infrastructure is the technical foundation that determines whether your emails reach the inbox or disappear into spam. In 2026, Google and Microsoft have significantly tightened their spam detection — and the most common reason campaigns fail isn't bad copy. It's poor infrastructure setup.

This guide covers every technical step from domain acquisition to warm-up to sending tool configuration, with exact settings, costs, and timelines. If you're starting from scratch or rebuilding after a deliverability problem, follow this guide in order.

Step 1: Domain Strategy — Never Send From Your Primary Domain

The first rule of cold email infrastructure is that you never use your primary business domain for outreach. A spam complaint or blocklist hit on your outreach domain would affect the same domain your team uses for client communication, contracts, and support — a catastrophic risk.

Instead, purchase secondary domains that are clearly related to your brand but separate. If your business is at acmeagency.com, your sending domains might be tryacme.com, acmegrowth.com, or getacme.com. Aim to buy 3-5 domains to start. At two inboxes per domain and 30-40 emails per inbox per day, that gives you enough volume to run meaningful campaigns while staying within safe sending ranges.

Use .com TLDs — they carry the most inherent trust with inbox providers.
Buy from reputable registrars — Namecheap, Cloudflare, or Google Domains. Avoid bulk domain sellers with reputation issues.
Budget $10-15 per domain per year and add a simple one-page website to each domain to increase credibility.
Age the domains before sending. Domains less than 30 days old are heavily scrutinized. Buy domains before you need them.

Step 2: Email Provider Selection

Your email provider is where your mailboxes actually live. Two options dominate in 2026 for cold outreach: Google Workspace and Microsoft 365. Each has tradeoffs.

Google Workspace ($6/mailbox/month): Higher inbox placement for Gmail recipients, which make up the majority of B2B and SMB email addresses. Easier to manage, familiar interface, and the warmup ecosystem is well-developed for Google accounts. The downside is that Google has the most aggressive spam detection and the most stringent enforcement for sending policy violations.

Microsoft 365 ($6/mailbox/month): Better for reaching Outlook-heavy organizations (financial services, legal, enterprise). Less aggressive spam detection than Google in some configurations, but harder to warm up and more prone to account suspension without warning when volumes spike.

Recommendation: Start with Google Workspace for most B2B and SMB campaigns. If your ICP uses corporate Outlook accounts, mix in Microsoft 365 mailboxes. For detailed cost analysis across scale, see our cold email infrastructure setup guide.

Step 3: DNS Record Configuration

DNS records are the authentication layer that tells inbox providers your domain is legitimate. Missing or misconfigured records are the most common technical cause of spam folder placement. You must configure three records for every sending domain.

SPF Record

SPF (Sender Policy Framework) declares which servers are authorized to send email from your domain. Add a TXT record at your domain registrar with a value similar to:

v=spf1 include:_spf.google.com ~all (for Google Workspace)

Replace _spf.google.com with your provider's SPF include string. The ~all at the end means a "soft fail" for unauthorized senders — use -all for stricter enforcement once you're confident in your setup.

DKIM Record

DKIM (DomainKeys Identified Mail) adds a cryptographic signature to your outgoing emails so receiving servers can verify they weren't altered in transit. In Google Workspace, navigate to Admin Console → Apps → Google Workspace → Gmail → Authenticate Email to generate your DKIM key. Then add the provided TXT record to your domain DNS.

DMARC Record

DMARC (Domain-based Message Authentication) tells receiving servers what to do with emails that fail SPF or DKIM checks. Start with a monitoring policy and tighten it over time:

v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com

Once you've confirmed legitimate mail passes authentication, upgrade to p=quarantine or p=reject. Always set a rua (reporting URI) to receive DMARC reports so you can monitor authentication failures. For the complete DNS setup checklist, see our cold email deliverability checklist for 2026.

Step 4: Mailbox Setup and Warm-Up

A freshly created mailbox with no sending history looks suspicious to inbox providers. Before sending a single cold email, every new mailbox needs to go through a warm-up period — a gradual increase in sending volume over 3-6 weeks that builds a reputation for the mailbox.

The fastest and most reliable way to warm up in 2026 is to use a dedicated warm-up tool like Instantly, Lemwarm, or Mailreach. These tools automatically send and receive emails between a network of warm-up accounts, generating positive engagement signals (opens, replies, moving from spam to inbox) that build mailbox reputation passively while you prepare your campaigns.

Warm-up duration: Minimum 3 weeks for new mailboxes. 4-6 weeks for domains under 60 days old.
Warm-up volume: Start at 5-10 emails/day per mailbox, increasing by 5 every 3-4 days.
Never cold send simultaneously: Keep warm-up running even after you start sending campaigns. The warm-up traffic helps maintain your reputation between campaign sends.
Monitor spam placement rate: Most warm-up tools show you what percentage of warm-up emails land in spam. If it's above 10%, investigate before starting campaigns.

Step 5: Sending Tool Selection and Configuration

Your sending tool is the platform that manages your campaigns, sequences, personalization, and sending schedules. The top options in 2026 for outreach at scale include Instantly, Smartlead, and Lemlist. Here's how they compare for cold outreach:

Instantly: Best for volume campaigns with strong inbox rotation and built-in warm-up. Excellent for running 5-20 inboxes simultaneously with good deliverability management.
Smartlead: Superior inbox rotation features and better controls for advanced sequences. Preferred by agencies managing multiple clients' campaigns.
Lemlist: Best personalization features including dynamic images and video thumbnails. Higher per-campaign cost but strong for relationship-oriented outreach.

Regardless of which tool you choose, configure these settings in every campaign:

Send window: 8am-5pm in the recipient's timezone. Never send overnight.
Daily sending cap per inbox: 30-40 emails maximum. Never more.
Random delay between sends: 3-7 minutes between each email. Eliminates the machine-gun pattern that triggers spam filters.
Unsubscribe handling: Auto-suppress unsubscribes from all future campaigns immediately.
Bounce management: Any domain with a bounce rate above 3% should be paused for list cleaning before resuming.

Step 6: List Hygiene and Verification

Sending to invalid email addresses increases your bounce rate, which damages your sender reputation. Before importing any list into your sending tool, run it through an email verification service. NeverBounce, ZeroBounce, and Millionverifier are the three most widely used in 2026.

A clean list should have fewer than 2% unverifiable or risky addresses. Remove all hard bounces, spam traps, and role-based addresses (info@, support@, sales@) before sending. These addresses are not decision-maker contacts and they disproportionately damage deliverability.

Step 7: Ongoing Deliverability Monitoring

Setting up infrastructure correctly is not a one-time task. Deliverability drifts over time as sending patterns change, mailbox age increases, and inbox provider algorithms update. Monitor these signals continuously:

Google Postmaster Tools: Free Google tool that shows your domain reputation and spam rate for Gmail. If your spam rate exceeds 0.3%, Gmail will throttle your sending automatically.
Glockapps or Mail-tester: Run a deliverability test to all major inbox providers before every new campaign launch. Shows you inbox vs. spam placement across Gmail, Outlook, Yahoo, and others.
Open rate as a proxy metric: If your open rates drop significantly without a change in subject lines, your deliverability may have degraded. Investigate before scaling sends.
Bounce rate per campaign: Track this separately per campaign, per domain, and per sending tool. A spike in bounces often indicates list quality issues or domain reputation problems.

Want to learn how to build and sell AI automations? Join our free community. Join the free AI Agency Sprint community.