Back to blog

What Most Teams Get Wrong About Cold Email Infrastructure

Xavier Caffrey
Xavier CaffreyJune 5, 2026 · 12 min read

I spent six months at Salesforce watching our outbound team rewrite the same cold email template over and over. Different subject lines. New personalization tokens. Shorter intros. Longer intros. The reply rate stayed stuck at **0.8%**.

Then one of our sales engineers looked at our email sending infrastructure and found that 68% of our emails were going straight to spam. We weren't losing because of bad copy. We were losing because our emails never reached the inbox.

That was 2019. In 2026, the gap between teams who understand cold email infrastructure and teams who don't has gotten even wider. I now run a GTM engineering agency, and I see this same mistake constantly: teams spend 90% of their time on messaging and 10% on infrastructure. It should be the opposite, at least until your deliverability is sorted.


The Real Reason Your Reply Rates Suck

Let me show you some numbers from our client work at oneaway. We audited 47 companies running cold email campaigns in Q1 2026. The average self-reported reply rate was 1.2%. When we checked their actual inbox placement rate, it averaged 43%.

Do the math. If you're only reaching the inbox 43% of the time, you'd need perfect messaging to hit even a 2% reply rate overall. Most teams are optimizing the wrong variable.

The data from across the industry backs this up. Average cold email reply rates dropped from 8.5% in 2019 to 3.43% in 2026, according to multiple sources tracking outbound performance. But the top 10% of campaigns still hit 10.7% or higher. The difference isn't better copywriting. It's better infrastructure.


Mistake #1: Sending From Your Primary Domain

This is the most common infrastructure mistake I see, and it's the most dangerous. Teams send cold outreach from their primary company domain—the same domain they use for customer communications, password resets, and transactional emails.

At AWS, we made this mistake early. We were sending cold emails from @aws-cloud-services.com (not the real subdomain, but you get it). One bad campaign, one spam trap hit, and suddenly our deliverability tanked across all email types. Customer onboarding emails started hitting spam. Invoice notifications disappeared.

Here's what actually happens when you send cold email from your primary domain:

  • Your domain reputation gets tied to cold email performance — Every bounce, spam complaint, and low engagement signal damages the domain you use for everything else
  • You have no safety buffer — One mistake can crater your entire email operation, including transactional and customer success emails
  • You can't scale — Most cold email programs need to send from multiple domains to maintain deliverability at scale
  • Recovery takes months — If your primary domain gets flagged, you can't just switch to a new one without confusing customers and breaking trust

What to Do Instead: Domain Strategy

We recommend clients purchase 3-5 sending domains that are variations of their primary brand. If your company is acmecorp.com, you might register:

Each domain should be semantically related to your brand but clearly separate from your primary domain. Buy them from a registrar like Namecheap or GoDaddy, and never connect them to your main website or customer communications.

  • acme-corp.com
  • tryacme.com
  • acmehq.com
  • getacme.com
  • acme.co

Mistake #2: Skipping Proper DNS Authentication

I can't tell you how many audits we've done where teams have no DKIM record, a broken SPF setup, or DMARC set to "none." This is like sending mail without a return address and wondering why the post office treats it as suspicious.

Email sending infrastructure in 2026 requires three DNS authentication protocols: SPF, DKIM, and DMARC. These aren't optional nice-to-haves anymore. Gmail and Yahoo both tightened requirements in 2024, and in 2026 they're strictly enforced.

A client came to us last year sending 5,000 emails per week with no DMARC policy. Their inbox placement was 31%. We implemented proper DNS authentication and nothing else changed—same copy, same list, same sending volume. Inbox placement jumped to 78% within three weeks.

The DNS Authentication Stack

Here's what proper SPF DKIM DMARC setup actually looks like, without the technical jargon:

  • SPF (Sender Policy Framework) — This tells receiving servers which IP addresses are allowed to send email from your domain. Your SPF record should include your email service provider and nothing else. Keep it under 10 DNS lookups or it breaks
  • DKIM (DomainKeys Identified Mail) — This adds a cryptographic signature to your emails that proves they actually came from your domain and weren't tampered with in transit. Every sending domain needs its own DKIM key
  • DMARC (Domain-based Message Authentication) — This tells receiving servers what to do if an email fails SPF or DKIM checks. Start with p=none to monitor, then move to p=quarantine or p=reject once you're confident your legitimate mail passes
ProtocolPurposeSetup DifficultyImpact on Deliverability
SPFAuthorizes sending IPsEasyHigh - required by major providers
DKIMCryptographic signatureMediumHigh - proves message authenticity
DMARCPolicy for auth failuresMediumCritical - signals legitimate sender

Mistake #3: Rushing The Warmup Period

This one burns teams constantly. They set up new sending domains, configure DNS properly, then immediately blast 500 emails per day from a brand new inbox. Inbox placement rate: 12%.

Email providers like Gmail, Outlook, and Yahoo treat new sending addresses like new drivers. You don't get the full speed limit right away. You need to build trust gradually through a process called domain warmup.

At Salesforce, we learned this the hard way. I watched our ops team spin up 10 new sending inboxes and immediately load them into our cadences at full volume. Within a week, all 10 were flagged. We had to scrap them and start over, losing a month of potential outreach.

The Warmup Protocol That Actually Works

We use a 4-week warmup ramp for all new sending domains. Here's the exact schedule we follow:

  1. Week 1: 5-10 emails per day — Send to engaged contacts who are likely to open and reply. Internal team members, existing customers, warm connections
  2. Week 2: 15-25 emails per day — Start mixing in cold contacts, but keep the ratio at 70% warm, 30% cold. Monitor open rates and spam complaints
  3. Week 3: 30-40 emails per day — Increase cold outreach to 50% of volume. Watch for any deliverability drops and adjust if needed
  4. Week 4: 45-50 emails per day — Full cold outreach volume. This is your steady-state sending limit per inbox

Warmup Automation

You can automate warmup using tools like Instantly, Lemwarm, Mailreach, or Warmbox. These services send emails between a network of inboxes and simulate normal email behavior (opens, replies, moving messages out of spam).

We run automated warmup for 30 days minimum before adding an inbox to active campaigns. Even then, we start at 50% of the tool's recommended volume and scale up gradually.

One nuance most guides miss: warmup never really stops. We keep automated warmup running in the background even on active sending inboxes, usually at 5-10 warmup emails per day. This maintains positive engagement signals even if your cold campaigns have a bad week.

Mistake #4: Treating All Sending Tools The Same

Not all email sending infrastructure is created equal. I see teams trying to run cold email through Google Workspace or Microsoft 365 and wondering why their deliverability is terrible.

Here's the truth: Google Workspace and Outlook are designed for human-to-human communication, not automated outreach. They have strict sending limits (usually 500-2,000 emails per day), aggressive spam filters, and they'll flag your account if your usage pattern looks like bulk sending.

We tested this extensively. Same copy, same list, same domain setup. Sending through Google Workspace: 41% inbox placement. Sending through a dedicated email infrastructure provider: 76% inbox placement.

Choosing The Right Infrastructure

For cold email at scale, you need infrastructure built specifically for it. We use a mix of tools depending on client volume and budget:

  • Instantly, Smartlead, or Lemlist — All-in-one platforms with built-in inbox rotation, warmup, and sending infrastructure. Best for teams sending 1,000-10,000+ emails per month. Pricing typically $50-200/month
  • SendGrid or Mailgun with dedicated IPs — More technical setup but full control. Best for teams sending 50,000+ emails per month with engineering resources. Requires dedicated IP warmup
  • Custom SMTP setup with inbox rotation — Maximum control and deliverability potential. Best for enterprise teams with serious volume. Requires significant technical expertise

Dedicated IP vs Shared: When It Matters

Here's a question we get constantly: should you use a dedicated IP for email sending or stick with shared infrastructure?

The answer depends entirely on volume. If you're sending less than 50,000 emails per month, shared infrastructure is almost always better. You benefit from the provider's established reputation, and you don't have to warm up a cold IP from scratch.

Above 50,000 emails per month, a dedicated IP gives you full control over your sender reputation. But you need to warm it properly (8-12 weeks minimum) and maintain consistent volume. We've seen teams get a dedicated IP, send inconsistently, and actually hurt their deliverability compared to shared.

Infrastructure TypeBest ForMonthly VolumeWarmup RequiredTypical Cost
Shared IP (All-in-one platform)Most B2B teams1K-50K emails4 weeks$50-200
Dedicated IP (ESP)High-volume teams50K-500K emails8-12 weeks$200-1,000
Custom SMTP clusterEnterprise programs500K+ emails12+ weeks$1,000-5,000+

Mistake #5: Ignoring Inbox Rotation

Even with perfect DNS setup and proper warmup, sending too much volume from a single inbox will crater your deliverability. I learned this at AWS when we had one top-performing SDR sending 200+ emails per day from a single address. His reply rate dropped from 6.2% to 1.8% over three months.

The issue: email providers track sender reputation at the individual email address level, not just the domain level. Send too much from one inbox, and that specific address gets flagged, even if your domain is clean.

This is where inbox rotation tools become critical. Instead of sending all your volume from john@acme-corp.com, you spread it across john@acme-corp.com, john@tryacme.com, j.smith@acmehq.com, and 3-5 other addresses.

How Inbox Rotation Actually Works

Our standard setup for a client running meaningful cold email volume (5,000+ sends per month):

  • 3-5 sending domains — Variations of the primary brand domain, as discussed earlier
  • 2-3 inboxes per domain — Different names for the same person (john.smith@, jsmith@, j.smith@) or multiple team members
  • Maximum 50 emails per inbox per day — This is the safe limit we've found through testing thousands of campaigns
  • Round-robin sending — Your email tool automatically rotates between inboxes to distribute volume evenly

Real Example: 10,000 Emails Per Month Setup

One of our SaaS clients sends about 10,000 cold emails per month. Here's their exact infrastructure:

This setup gives them excellent deliverability (73% inbox placement as of last check) and isolates risk. If one inbox gets flagged, it doesn't take down the entire program.

  • 5 sending domains — All variations of their primary brand
  • 3 inboxes per domain = 15 total sending addresses
  • ~33 emails per inbox per day — Well under the 50/day safety limit
  • All inboxes in continuous automated warmup — 10 warmup emails per inbox per day running in background

Mistake #6: Not Monitoring Deliverability

This might be the most expensive mistake on the list. Teams set up their cold email infrastructure, start sending, and then just… hope for the best. They have no idea whether their emails are hitting the inbox or dying in spam.

I see this constantly in audits. I'll ask, "What's your current inbox placement rate?" The answer is usually either a guess ("Pretty good, I think") or based on open rates (which are not a reliable proxy for deliverability).

At oneaway, we check deliverability metrics weekly for active campaigns and daily when testing new infrastructure or copy. Here's what we actually monitor:

The Monitoring Stack

These are the specific tools and metrics we use:

  • GlockApps or MailGenius — Seed list testing that shows exactly where your emails land (inbox, spam, promotions) across different providers. We run this weekly. Cost: $49-99/month
  • Postmaster Tools (Google) and SNDS (Microsoft) — Free reputation monitoring directly from the major providers. Shows spam complaint rates, domain reputation, and any delivery issues
  • DMARC monitoring (DMARCian or Postmark) — Tracks authentication pass rates and catches any spoofing attempts. Critical for domain security. Cost: $20-100/month
  • Native platform metrics — Your sending tool's built-in stats on bounces, spam complaints, and unsubscribes. We set alerts for any metric that spikes above normal

Red Flag Metrics

These numbers mean you need to stop and fix something immediately:

  • Bounce rate above 5% — Your list quality is terrible or your targeting is wrong. Pause and clean your data
  • Spam complaint rate above 0.1% — Your messaging is off or you're hitting the wrong audience. Rewrite or retarget
  • Inbox placement below 60% — Infrastructure issue. Check DNS, warmup status, and sending volume per inbox
  • Reply rate below 1% — Either deliverability or messaging is broken. Test deliverability first before rewriting copy

What Proper Cold Email Infrastructure Actually Looks Like in 2026

Let me pull all of this together with a real example from our agency work. This is the infrastructure setup we built for a B2B SaaS client launching their first cold email program:

This setup took about three weeks to implement fully (mostly waiting for warmup). The total cost was $347/month including domains, sending platform, warmup tools, and monitoring.

Results after six months: 71% inbox placement rate, 4.2% reply rate, 22 booked meetings per month from 8,500 sends. Their previous attempt using Google Workspace and no proper infrastructure: 0.8% reply rate, unknown deliverability, 3 meetings over three months.

  • Domains — Purchased 4 sending domains similar to their brand (cost: $48/year total)
  • DNS Authentication — Set up SPF, DKIM, and DMARC on all 4 domains with p=quarantine policy
  • Inboxes — Created 3 inboxes per domain (12 total) using Instantly's inbox service ($97/month)
  • Warmup — 4-week automated warmup using Instantly's built-in warmup feature (included in platform cost)
  • Sending Platform — Instantly for sending, inbox rotation, and campaign management ($97/month)
  • Monitoring — GlockApps for weekly deliverability tests ($79/month), Google Postmaster Tools (free), DMARCian for authentication monitoring ($25/month)
  • Volume — 40 emails per inbox per day = 480 emails per day = ~9,600 per month at full scale

The Infrastructure Investment Mindset

Here's how I think about the investment in proper email sending infrastructure: if cold email is a meaningful channel for your business (and for most B2B companies, it should be), spending $300-500 per month on infrastructure is a rounding error compared to the pipeline impact.

One extra meeting per month from better deliverability pays for the entire infrastructure stack. Our clients typically see 15-40 extra meetings per month just from fixing infrastructure, with zero changes to targeting or messaging.

The teams that struggle are the ones trying to do cold email on the cheap: sending from Google Workspace, skipping warmup, using one domain, and hoping for the best. It doesn't work in 2026. The inbox gatekeepers are too sophisticated.

Frequently Asked Questions


Key Takeaways


Frequently Asked Questions

Can I send cold email from my primary company domain?

No, and this is the most dangerous mistake teams make. Sending cold email from your primary domain (the one you use for customer communications, password resets, etc.) puts your entire email reputation at risk. One bad campaign can crater deliverability for critical business communications. Always use separate sending domains that are variations of your brand. If your company is acme.com, send cold email from try-acme.com, acme-hq.com, or similar variations.

How long does proper domain warmup actually take?

Minimum 4 weeks for standard shared infrastructure, 8-12 weeks for dedicated IPs. We use a specific ramp schedule: Week 1 at 5-10 emails/day, Week 2 at 15-25/day, Week 3 at 30-40/day, Week 4 at 45-50/day. Rushing this process is one of the most common ways teams destroy their deliverability. Use automated warmup tools like Instantly, Lemwarm, or Mailreach, and keep warmup running in the background even after you start active campaigns.

What's the difference between SPF, DKIM, and DMARC?

SPF authorizes which IP addresses can send email from your domain. DKIM adds a cryptographic signature that proves the email came from you and wasn't tampered with. DMARC tells receiving servers what to do if an email fails SPF or DKIM checks. All three are required for good deliverability in 2026. Set up SPF and DKIM first, then implement DMARC starting with p=none (monitoring mode) before moving to p=quarantine or p=reject.

How many emails can I safely send per inbox per day?

50 emails per inbox per day is the safe limit we've found through extensive testing. Above that, you risk individual inbox reputation damage even if your domain is healthy. This is why inbox rotation is critical for any meaningful volume. If you need to send 500 emails per day, you need 10 inboxes minimum, spread across 3-5 different sending domains. Most all-in-one platforms like Instantly and Smartlead handle this rotation automatically.

Do I need a dedicated IP for cold email?

Only if you're sending 50,000+ emails per month and have the resources to properly warm and maintain it. Below that volume, shared infrastructure from a reputable cold email platform almost always performs better. Dedicated IPs require 8-12 weeks of careful warmup, consistent volume to maintain reputation, and technical expertise to manage. Most B2B teams are better off with shared infrastructure and multiple sending domains.

How do I know if my emails are actually reaching the inbox?

Use seed list testing tools like GlockApps or MailGenius weekly. These services send test emails to real inboxes across major providers and show you exactly where your emails land (inbox, spam, promotions tab). Don't rely on open rates—they're heavily affected by privacy features and aren't a reliable proxy for deliverability. Also monitor Google Postmaster Tools and Microsoft SNDS for free reputation data directly from the providers.

What should I do if my deliverability suddenly drops?

First, stop sending immediately to prevent further damage. Then check: (1) Recent bounce rate—above 5% indicates list quality issues, (2) Spam complaint rate—above 0.1% means messaging or targeting is off, (3) DNS authentication—verify SPF, DKIM, and DMARC records are still properly configured, (4) Sending volume—check if any individual inbox exceeded 50 emails/day. Run a seed list test to see current inbox placement. Usually the issue is either a bad list, broken DNS records, or volume spike from a single inbox.


Key Takeaways

  • Deliverability matters more than copy—68% of cold emails never reach the inbox, making infrastructure the highest-leverage thing to fix before obsessing over subject lines
  • Never send cold email from your primary domain—use 3-5 separate sending domains that are variations of your brand to isolate risk and enable scaling
  • Proper SPF DKIM DMARC setup is non-negotiable—all three DNS authentication protocols are required for good deliverability in 2026, with DMARC at p=quarantine or p=reject
  • Warmup takes 4+ weeks minimum—rushing domain and inbox warmup is the fastest way to destroy deliverability; use automated tools and start at 5-10 emails/day
  • 50 emails per inbox per day is the safe limit—above that volume, use inbox rotation across multiple addresses and domains to maintain sender reputation
  • Monitor deliverability weekly with seed testing—tools like GlockApps show actual inbox placement; don't rely on open rates or guesswork to assess deliverability
  • Proper infrastructure costs $300-500/month—this includes domains, sending platform, warmup tools, and monitoring; one extra meeting per month pays for the entire stack


Stop Losing Deals to Bad Email Infrastructure

Your copy isn't the problem—your infrastructure probably is. At oneaway, we build and optimize cold email infrastructure that actually reaches the inbox. If you're tired of low reply rates and mystery deliverability, let's audit your setup and fix what's broken. We'll show you exactly where your emails are landing and what needs to change.

Check if we're a fit