Cold Email Infrastructure: The Complete 2026 Setup Guide

March 31, 2026

Most cold emails land in spam. Not because the copy is bad, but because the infrastructure behind them is broken — or was never set up properly in the first place.

I've set up cold email systems for agencies, recruiters, and B2B companies that needed to send hundreds of outbound emails a day without getting blacklisted. The difference between a 2% reply rate and a 15% reply rate often has nothing to do with what you write. It's the plumbing underneath.

This guide covers exactly what goes into a cold email infrastructure setup — from buying domains to warming them up to actually sending at scale. Whether you want to do it yourself or want to understand what you're paying someone to build, this is the full picture.

Why You Can't Just Send Cold Emails From Your Main Domain

This is the first mistake people make. They fire up Instantly or Lemlist, connect their main business email, and start blasting. Two weeks later, their regular emails — invoices, proposals, client communication — are landing in spam too.

Your main domain has a reputation. Email providers (Gmail, Outlook, Yahoo) track how recipients interact with emails from your domain. If a chunk of people mark your cold emails as spam or never open them, that reputation tanks. And it drags everything else down with it.

Rule #1: Never send cold emails from your primary business domain.

You need secondary domains — dedicated sending domains that protect your main brand if something goes wrong.

The Full Infrastructure Stack

Here's what a proper cold email setup looks like:

Secondary domains (2-4 domains)
Professional email accounts on each domain (Google Workspace or Outlook)
DNS authentication (SPF, DKIM, DMARC)
Domain forwarding to your main site
Email warmup (2-4 weeks before sending)
Sending tool (Instantly, Smartlead, Lemlist, etc.)
Monitoring (deliverability checks, blacklist monitoring)

Let's break each one down.

Step 1: Buy Secondary Domains

You want domains that look like variations of your brand — close enough to be recognisable, different enough to protect your main domain.

If your main domain is

acmeconsulting.co.za

, good secondaries would be:

```
acme-consulting.co.za
```
```
getacme.co.za
```
```
acmehq.co.za
```
```
tryacme.co.za
```

Avoid anything spammy-looking. No random numbers, no hyphens stuffed everywhere, no

.xyz

.info

TLDs. Stick to

.co.za

.com

, or

.co

Cost: R100-R200 per domain per year. You want 2-4 domains to start.

Step 2: Set Up Email Accounts

Each domain needs proper email accounts — not forwarding aliases, real mailboxes. Gmail and Outlook are the two best options because email providers trust mail coming from their infrastructure.

Google Workspace is the go-to. At around $7/user/month (R130), you get a real Gmail inbox on your custom domain. Set up 2-3 accounts per domain:

```
darren@acme-consulting.co.za
```
```
hello@acme-consulting.co.za
```
```
team@acme-consulting.co.za
```

With 3 domains and 2-3 accounts each, you have 6-9 sending accounts. This is important for volume — you spread your sending across multiple accounts so no single one gets flagged.

Microsoft 365 works too, especially if your prospects are corporate (Outlook-to-Outlook has good deliverability). Around $6/user/month.

Cost: R130-R250 per mailbox per month.

Step 3: DNS Authentication (SPF, DKIM, DMARC)

This is the part most people skip or get wrong. These three DNS records tell email providers that you're allowed to send email from your domain and that the emails haven't been tampered with.

SPF (Sender Policy Framework)

An SPF record lists which servers are allowed to send email on behalf of your domain. Without it, anyone could send emails pretending to be you.

You add a TXT record to your domain's DNS:

v=spf1 include:_spf.google.com ~all

This says "only Google's servers can send mail for this domain." If you're using multiple services (Google Workspace + Instantly), you need to include both.

DKIM (DomainKeys Identified Mail)

DKIM adds a digital signature to every email you send. The receiving server checks this signature against a public key in your DNS to verify the email is legit and hasn't been modified.

Google Workspace generates the DKIM key for you — you just need to add it as a TXT record in your DNS. It looks like a long string of random characters.

DMARC (Domain-based Message Authentication)

DMARC ties SPF and DKIM together and tells email providers what to do if an email fails authentication. Start with a monitoring policy:

v=DMARC1; p=none; rua=mailto:dmarc@acme-consulting.co.za

This sends you reports about any authentication failures without blocking emails. Once you've confirmed everything works, you can tighten it to

p=quarantine

p=reject

Domain Forwarding

Set up a simple redirect so that if someone types your secondary domain into a browser, they land on your main website. This adds legitimacy — a domain with no website looks suspicious.

Getting all three right is critical. Miss one, and your deliverability drops. Get them wrong, and your emails go straight to spam. Most deliverability problems I see come down to misconfigured DNS records.

Step 4: Warm Up Your Accounts

Brand new email accounts have zero reputation. If you start sending 50 cold emails a day from a fresh account, you'll get flagged immediately.

Warmup is the process of gradually building your sending reputation by exchanging real emails with real inboxes. Warmup tools automate this — they send emails between a network of accounts, open them, reply to them, and mark them as important.

Warmup Schedule

Week 1-2: Warmup tool only. 20-40 emails per day, all automated.
Week 3: Start sending 5-10 real cold emails per day alongside warmup.
Week 4: Scale to 15-25 cold emails per day.
Week 5+: Gradually increase to your target volume (30-50 per account per day max).

Never exceed 50 cold emails per day per account. That's the safe ceiling for Google Workspace. Push past it consistently and you'll hit sending limits or get the account suspended.

Most warmup tools are built into sending platforms now. Instantly and Smartlead both include warmup in their plans.

Warmup period: 2-4 weeks minimum before real sending.

Step 5: Choose a Sending Tool

The three big players in 2026:

Instantly

Best for beginners and mid-volume senders
Built-in warmup, simple campaign builder
Unlimited email accounts on all plans
Starts at $30/month (R555)
Good deliverability monitoring

Smartlead

Better for agencies managing multiple clients
More advanced rotation and scheduling
Built-in warmup
Starts at $39/month (R720)
Slightly steeper learning curve

Lemlist

Best for personalisation (custom images, LinkedIn integration)
Built-in warmup
Starts at $39/month (R720)
Fewer email accounts on lower plans

For most businesses starting out, Instantly gives you the best balance of simplicity and features. If you're an agency or sending for multiple brands, Smartlead handles multi-client setups better.

Step 6: Monitor Deliverability

Setting up infrastructure isn't a once-and-done job. You need to watch it:

Check blacklists weekly — Use MXToolbox or the built-in checks in your sending tool. If a domain or IP lands on a blacklist, you need to fix it fast.
Track open rates — If open rates drop below 30-40%, something's wrong with deliverability, not just your copy.
Rotate accounts — If one account's reputation drops, pause it and let it recover through warmup-only mode.
Watch bounce rates — Keep hard bounces under 3%. Clean your lead lists before uploading.

The Total Cost Breakdown

Here's what the infrastructure costs for a typical setup with 3 secondary domains and 6-9 email accounts:

| Item | Monthly Cost | |------|-------------| | 3 domains (annual, amortised) | ~R50/month | | 6-9 Google Workspace accounts | R780 - R1,170 | | Sending tool (Instantly Growth) | R555 | | Total | R1,385 - R1,775/month |

Plus a once-off setup time of 4-8 hours if you're doing it yourself — buying domains, configuring DNS for each one, setting up email accounts, verifying SPF/DKIM/DMARC, connecting everything to your sending tool, and starting warmup.

That's the ongoing cost. The real investment is getting it right the first time so you don't burn through domains and have to start over.

Common Mistakes That Kill Deliverability

Sending too many emails too fast. The single most common mistake. Patience during warmup and respecting daily limits is everything.

Bad lead data. Sending to invalid email addresses spikes your bounce rate, which tanks your sender reputation. Always verify your lists with a tool like ZeroBounce or NeverBounce before uploading.

Same copy to everyone. Email providers detect templated mass emails. Personalise your first line, vary your subject lines, and use spintax (text variations) to make each email look unique.

Ignoring DNS. I've seen setups where someone paid for domains and email accounts but never configured SPF, DKIM, or DMARC. That's like building a car without an engine — it looks right but it's going nowhere.

Not having a website on your secondary domains. A domain with no web presence looks fake. Even a simple redirect to your main site helps.

Should You DIY or Get Help?

If you're technical, comfortable with DNS management, and patient enough for the warmup period, you can absolutely do this yourself. This guide gives you the blueprint.

But here's what I see in practice: most businesses get 80% of the way there and then hit a wall. A misconfigured DKIM record. A domain that gets blacklisted during warmup because the sending schedule was too aggressive. An SPF record that conflicts with another service on the domain. These are small mistakes that are hard to diagnose and can set you back weeks.

That's why I built InboxReady — a done-for-you cold email infrastructure service. I handle the domain purchases, DNS configuration, email account setup, warmup, and sending tool configuration. You get a fully warmed, ready-to-send system without burning through domains learning the hard way.

InboxReady packages start from $300 (R5,550) for a complete setup. That includes 2-3 secondary domains, email accounts, full DNS authentication, warmup, and your sending tool configured and ready to go. Higher-volume setups with more domains and accounts run up to $800.

If you want to see whether cold email would work for your business, or you've tried and your emails keep landing in spam, message me on WhatsApp and I'll give you an honest assessment.

Get in touch about InboxReady →