Cold email remains one of the most effective outbound channels for B2B sales. Yet thousands of teams watch their carefully crafted campaigns land in spam folders—or worse, get blocked entirely—because they skipped the foundational work. If your emails aren’t reaching inboxes, your cold email infrastructure (SPF, DKIM, and DMARC) is likely the culprit.
The truth is that the cold email setup process takes work. Domain authentications can get technical, and it might take a lot of fine-tuning to know what works. But once you’ve built a solid framework, scaling becomes as simple as adding more domains and leads. You can automate lead generation, drip campaigns, and outreach on autopilot.
This guide provides a complete technical SOP for setting up cold email infrastructure. You’ll learn how to select and protect your domains, configure SPF, DKIM, and DMARC records correctly, and leverage Done-For-You services to streamline setup.
Why Cold Email Infrastructure Matters in 2026
The email deliverability landscape has shifted dramatically. Google’s and Microsoft’s machine learning models now analyze hundreds of signals before deciding whether to deliver an email to the inbox, mark it as spam, or block it entirely.
Proper cold email infrastructure directly impacts your sender reputation, which determines whether your emails reach the inbox. A poor reputation means your open rates collapse, your outreach campaigns underperform, and you risk getting your domain blacklisted—which can take months to recover from.
The teams winning at cold email in 2026 aren’t just writing better copy. They’re investing in proper infrastructure setup, and that’s the competitive advantage most teams are missing.
Option 1: Done-For-You (DFY) Setup—Fast Track Cold Email Infrastructure
Manual cold email setup requires many moving parts. You need an email tool, a CRM, a way to generate leads, business email setup, warmups, email copy, and A/B testing. For teams that want to streamline everything, DFY email setup services provide the most plug-and-play option.
With a Done-For-You (DFY) email setup, you can buy as many alternate domains as you want without going through all the domain authentications for DKIM, DMARC, SPF, and Forwarding manually. Services like Instantly’s DFY email setup handle authentication automatically.
Pre-Warmed Accounts: Skip the Warmup Wait
Some providers offer pre-warmed accounts that are ready to go the moment you finish your purchase—there’s no need to wait for weeks for them to warm up. These accounts typically sell out fast due to high demand.
After buying prewarmed accounts or getting a DFY email setup service, all that’s left is to add leads and create sequences for automated drip campaigns. This approach eliminates the technical overhead and gets you to outreach faster.
What DFY Services Include
- Automatic authentication setup: DKIM, DMARC, SPF, and forwarding configured without manual DNS work
- Domain purchase management: Handle buying and configuring alternate domains
- Pre-warmed email accounts: Skip the 2-3 week warmup period entirely
- Premium warmup pools: High-quality Google & Microsoft accounts exclusively
Option 2: Manual Cold Email Setup Process—Step-by-Step Guide
If you prefer complete control or have specific requirements, manual setup gives you full visibility into your infrastructure. Here’s everything you need to consider for the entire cold email setup process.
Step 1: Buying Alternate Domains
If you want to do cold email outreach, the last thing you want to do is use your company’s primary business domain. Even with everything perfect, there are still potentially harmful effects.
To avoid burning your primary domain, use alternate domains. You can buy them from sites like GoDaddy or NameCheap. To use the domains you purchased, you need to authenticate each one.
Domain selection best practices:
- Avoid exact brand matches: Don’t use yourcompany.com. Use variants like getyourcompany.com, yourcompanypro.com, or tryyourcompany.com
- Mix TLDs: Use a combination of .com, .co, and .io to appear more natural
- Purchase privately: Enable domain privacy to prevent competitors from seeing your registration info
Step 2: Domain Authentication
After buying your alternate domains, you must set up DMARC, DKIM, SPF, and forwarding. Authenticating domains lets you send and receive emails.
The setup process is slightly different for each domain provider. Once authentications are complete, you must configure the SMTP settings to use the domains with your email tool.
SPF Record Setup
SPF (Sender Policy Framework) tells receiving servers which mail servers are authorized to send email on your domain’s behalf. Without it, your emails fail authentication immediately.
Basic SPF syntax:
v=spf1 include:_spf.your-email-service.com ~all
Key points:
- Always include all sending services you use—missing services cause hard failures
- Use
~all(soft fail) during setup, then switch to-all(hard fail) once verified - SPF has a 10-lookup limit—don’t over-include services
DKIM Record Setup
DKIM (DomainKeys Identified Mail) adds a cryptographic signature to your emails that proves they weren’t tampered with in transit. Your email service generates the DKIM keys—you just need to add the DNS record.
Your email service provider will give you a DKIM record that looks something like this:
selector._domainkey.yourdomain.com IN TXT "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEF..."
DMARC Record Setup
DMARC (Domain-based Message Authentication, Reporting, and Conformance) tells receivers what to do when SPF or DKIM fails—and provides you with reports about who’s trying to spoof your domain.
Start with quarantine policy (never jump to reject):
v=DMARC1; p=quarantine; rua=mailto:dmarc-reports@yourdomain.com; ruf=mailto:forensic@yourdomain.com
Email Forwarding Configuration
Don’t forget to configure email forwarding so replies to your cold emails reach your inbox. This typically involves setting up forwarding rules in your email service or DNS records to route replies to your primary inbox.
Step 3: Domain Warmup
Authenticated domains can start sending emails. You could use them immediately for cold outreach. However, deliverability would be low due to a lack of sender reputation.
The best way to improve sender reputation is to do domain warmup, which occurs naturally as you send and receive emails. As mentioned earlier, some services offer pre-warmed accounts for immediate use.
But if pre-warmed accounts are sold out or you prefer manual control, you can still warm up your new domains for free with most email tools. Most providers recommend warming up emails for 2 to 3 weeks before running campaigns.
Domain warmup framework:
- Week 1: Send 10-20 emails per day to engaged recipients
- Week 2: Increase to 50-100 emails per day
- Week 3: Scale to 200-500 emails per day if metrics remain healthy
Step 4: Lead Generation and Prospecting
When domains are warmed up, you’re closer to sending your first cold email. Before that, you need to find leads—and lots of them!
Cold email is a numbers game. But that doesn’t mean you can trade off quality for quantity. You must figure out your ICPs and buyer personas to ensure quality leads.
After establishing guidelines for lead generation, you can use lead finder tools to find leads for cold outreach. LinkedIn prospecting also works if you’re starting and don’t have the budget for an extra tool just yet.
Manual vs. DFY: Which Approach Is Right for You?
Choose manual setup if:
- You have technical expertise and want full control
- You have specific compliance or security requirements
- You’re building long-term infrastructure and want to understand every component
- You have time to invest in learning DNS management
Choose DFY setup if:
- You want to start outreach immediately without technical overhead
- You don’t have in-house technical resources for DNS configuration
- You value speed over complete control
- You want access to pre-warmed accounts to skip the warmup period
Infrastructure Setup Checklist
Use this checklist to verify your setup:
- [ ] Purchased dedicated alternate domains (not brand domains)
- [ ] Enabled domain privacy on all domains
- [ ] Created SPF record including all sending services
- [ ] Generated and added DKIM keys from email service
- [ ] Created DMARC record with p=quarantine policy
- [ ] Set up DMARC reporting email addresses
- [ ] Configured email forwarding for replies
- [ ] Verified records using MXToolbox or similar
- [ ] Tested sending a sample email and checked authentication headers
Real-World Examples
HubSpot
HubSpot sends massive volumes of email but maintains excellent deliverability by using dedicated sending domains for different product lines. Their infrastructure team rotates domains based on reputation metrics and maintains strict warmup protocols for new campaigns.
Salesforce
Salesforce uses a multi-domain strategy with separate domains for marketing, sales, and service communications. Each domain has independent SPF/DKIM/DMARC configurations, and they monitor DMARC reports weekly to catch issues before they impact deliverability.
Notion
Notion’s outbound team uses brand-adjacent domains (getnotion.com, notionteam.com) that feel legitimate but protect their primary brand. They also implement strict warmup periods—new domains never launch without at least 2 weeks of gradual volume increase.
Common Mistakes to Avoid
Mistake #1: Skipping DMARC Setup
Many teams configure SPF and DKIM but skip DMARC because they don’t understand it. Without DMARC, you have no visibility into authentication failures and no way to enforce your authentication policy.
Mistake #2: Using Your Primary Business Domain
Sending cold email from your primary domain risks damaging your main brand’s email reputation—which affects customer communications, internal email, and recruiting. Always use dedicated alternate domains.
Mistake #3: Jumping to p=reject
Teams eager to secure their domains sometimes set DMARC to “reject” immediately. This causes legitimate emails to bounce if any configuration is wrong. Always start with quarantine, monitor reports for 2-4 weeks, then gradually move to reject.
Mistake #4: Ignoring Email Forwarding
Forgetting to configure email forwarding means you’ll never receive replies to your cold emails. Test your forwarding setup before launching campaigns to ensure replies reach your inbox.
Mistake #5: Not Testing Deliverability Before Launch
You could burn sending accounts and domains once campaigns are live and deliverability is low. Some email tools now offer inbox placement testing that lets you detect issues and fix deliverability concerns before going live.
Conclusion
Setting up proper cold email infrastructure isn’t optional—it’s the foundation that determines whether your outreach even reaches inboxes. Whether you choose manual setup or leverage DFY services and pre-warmed accounts, the teams that invest in proper infrastructure win.
Your action items:
- Decide between manual setup and DFY services based on your resources and timeline
- Implement the authentication protocol (SPF, DKIM, DMARC, forwarding)
- Follow the 2-3 week warmup protocol for new domains (or use pre-warmed accounts)
- Set up DMARC monitoring and review reports weekly
Deliverability is a system, not a setting. Build it right, and your cold email campaigns will outperform competitors who skip this critical work.
Ready to level up your GTM game? Explore UpSkillGTM’s resources for more actionable guides on revenue operations, sales infrastructure, and outbound strategy.
Frequently Asked Questions
What is cold email infrastructure?
Cold email infrastructure refers to the technical setup that enables reliable email delivery for outbound campaigns. This includes dedicated sending domains, DNS authentication records (SPF, DKIM, DMARC), email forwarding configuration, domain warmup protocols, and ongoing monitoring systems. Proper infrastructure protects your sender reputation and ensures your emails reach inboxes rather than spam folders.
Should I use manual setup or DFY services?
Manual setup gives you complete control and is ideal if you have technical expertise. DFY (Done-For-You) services streamline the process by handling authentication automatically and often provide pre-warmed accounts that skip the warmup period. Choose DFY if you want to start outreach immediately; choose manual if you want full visibility into your infrastructure.
How long does domain warmup take?
Domain warmup typically takes 2-3 weeks for new domains. During this period, you gradually increase sending volume from 10-20 emails per day up to your target volume. Some services offer pre-warmed accounts that are ready to use immediately, skipping the warmup period entirely.
What is email forwarding and why do I need it?
Email forwarding ensures that replies to your cold emails reach your inbox. When sending from alternate domains, you need to configure forwarding rules to route replies back to your primary email address. Without proper forwarding, you’ll never see prospect responses.
Can I buy pre-warmed email accounts?
Yes, some cold email platforms offer pre-warmed accounts that have already completed the warmup period. These accounts are typically more expensive and can sell out quickly, but they allow you to start outreach immediately without waiting 2-3 weeks for warmup.
