Playbook · Cold email setup

Set up cold email from zero

The right order: validate your messaging with 50 manual emails first, then build the infrastructure. This is the playbook that gets you from zero to a sending stack that actually lands.

Who this is for
Founders sending their first cold outbound. Anyone who's been told 'just set up SPF and DKIM' and isn't sure what that means — or who's tempted to skip messaging validation and jump straight to infrastructure.
Time to ship
~25 days end to end: 1 week to validate messaging, 3 days of setup, 14-21 days of warmup, then go live.

What you’ll do

You'll send 50 cold emails by hand to validate your messaging works. Then buy 5-10 lookalike domains, set up Google Workspace mailboxes, add SPF/DKIM/DMARC, warm them for 14-21 days, and run a 4-touch sequence. The funnel benchmarks (bounce, open, reply, spam) tell you whether it's working — and which knob to turn if it isn't.

The steps

  1. 01
    Send 50 manual emails from your personal inbox first
    Week 1 · 5-8 hours

    Before you buy a single domain, validate that your messaging actually gets replies. Pick 30-50 prospects who fit your ICP. Write each email by hand from your founder@yourcompany.com address. If you get a 5-10% reply rate, your messaging works and you can scale. If you don't, fix the messaging — no amount of infrastructure rescues a bad pitch.

    • This is the most-skipped step. Founders love to spend a week buying domains; they hate writing 50 personalized emails. Resist.
    • Track replies, not opens. Opens at this stage are noisy; replies are the real signal.
    • If your reply rate is below 3%, the problem is the offer, the ICP, or the copy — not your infrastructure. Don't move to step 2 until this works.
  2. 02
    Buy 5-10 lookalike domains
    Day 1 of week 2 · 1 hour

    Once messaging is validated, buy 5-10 cheap lookalike domains separate from your real company domain. Never send cold email from your real domain — when reputation slips (and it will), you don't want your founder@yourcompany.com going down with it. Formula for sizing: take your target daily send volume, divide by 60, multiply by 1.1 — that's how many domains you need (3 inboxes per domain × 20 sends/inbox/day = 60/domain).

    • Pick .com, .io, .co — skip the weird TLDs (.xyz, .biz). Receivers trust them less.
    • Naming pattern: tryacme.com, getacme.io, acmehq.co. Keep them obviously related to your brand.
    • Spread purchases across 2 registrars and a couple of sessions. Buying 30 domains in one Cloudflare session gets you flagged for bulk registration.
    • Set each domain to redirect to your main website so receivers who Google you find something real.
  3. 03
    Create 3 mailboxes per domain on Google Workspace
    Day 1-2 · 2 hours

    Three mailboxes per domain, each capped at 20 sends/day, gives you 60 sends/domain/day with headroom. Use real first-name-last-name patterns and add profile photos — receivers check.

    • Mailbox names: omar@try-acme.com, oa@try-acme.com, o@try-acme.com (variations of the same real person, not sales@ or hello@).
    • Standard Google Workspace tier ($7/user/month). Don't try to cheap out with self-hosted.
    • Add a real profile photo and email signature to every mailbox. Empty profiles get filtered.
    • Pick Google Workspace OR Microsoft 365 — don't mix. The reputation systems are different.
  4. 04
    Add SPF, DKIM, and DMARC to every domain
    Day 2 · 2 hours

    These three DNS records tell Gmail and Outlook your emails are legitimate. Skip any of them and you land in spam by default. Since the 2024 Gmail/Yahoo bulk-sender policy update, this is non-negotiable.

    • SPF: TXT record at domain root. For Google Workspace: v=spf1 include:_spf.google.com ~all
    • DKIM: generate in Google Admin → Apps → Gmail → Authenticate Email. Add the long key to DNS as a TXT record.
    • DMARC: start with v=DMARC1; p=none; (monitoring mode). Move to p=quarantine after a few weeks of clean reports.
    • Verify everything at mail-tester.com — aim for a 10/10 score before you send anything.
  5. 05
    Warm the mailboxes for 14-21 days
    Days 3-24 · automated

    New mailboxes have zero sender reputation. If you send 50 cold emails on day one, you go straight to spam. Warmup tools (Smartlead, Instantly, Mailreach) automatically send and receive small volumes of friendly mail between your mailboxes and a curated pool. Start at 5 emails/day per inbox, ramp by 5 every couple of days until you hit ~40-65/day. Keep warmup running forever, even after you start cold sending.

    • Budget: $30-80/month per warmup tool, depending on inbox count.
    • Warmup pool quality matters. Some warmup tools share pools with spammers and can actively get you blacklisted — pick a reputable provider.
    • Don't send a single cold email before day 14. Day 21 is safer.
    • Always have new domains warming in the background. Sender reputation decays — rotate domains roughly every 90 days at scale.
  6. 06
    Send your first 50 cold emails and watch the funnel
    Day 25 · go live

    Start at 5-10 emails per mailbox per day. Watch four metrics, in this order: bounce rate, open rate, reply rate, spam complaint rate. If anything looks off after the first 3 days, pause and diagnose before scaling.

    • Healthy benchmarks: bounce <2%, open 40-65%, reply 5-10% (with 3-7% positive), spam complaint <0.1%.
    • Open rate below 40% = deliverability problem, not messaging. Stop sending and check Postmaster Tools.
    • Reply rate below 3% with healthy opens = messaging problem. Iterate on the copy, don't add volume.
    • Verify every email before sending (MillionVerifier, NeverBounce, Kickbox). High bounces destroy your reputation faster than anything else.
  7. 07
    Run a 4-touch sequence per prospect
    Ongoing · per campaign

    Single-touch reply rate is under 0.5%. A well-designed 4-email sequence multiplies that by 4-8x. The conventional cadence is 2-4 weeks; for early-stage founders who need signal fast, a blitz cadence (entire sequence in 4-5 days) often works as well or better.

    • Email 1: hook + value prop + credibility + CTA. 50-125 words, plain text, no images, no links.
    • Email 2: reply on the same thread. Short nudge with one new differentiator. 1-2 days later.
    • Email 3: reply on the same thread. New angle, different value prop. 2-3 days after email 2.
    • Email 4: new thread, new subject line. Breakup email — 'Last one from me, [soft CTA].' Often the highest-reply email in the sequence.
  8. 08
    Write copy that reads like a founder, not an SDR
    Ongoing · per variant

    Founder-written cold emails outperform SDR-written ones until you hit $1M ARR. Being the founder is a pattern interrupt — use it. Lead the email with a specific observation about the prospect's company or situation, name the problem you solve as a concrete outcome (not a feature), drop one piece of credibility (YC, recognizable customer, relevant background), and end with a binary yes/no CTA.

    • Subject lines: under 4 words, lowercase, no salesy patterns. 'quick question', 're: your outbound', 'maya — 15 min?'
    • Skip generic 'Hi {first_name}' personalization. If you can't write something specific to them in 30 seconds, they shouldn't be on the list.
    • Don't trust AI to personalize the pitch. AI-generated openers read like LinkedIn DMs from someone who skimmed an About page.
    • Use spintax ({Hi|Hey|Hello}) on greetings and openers. 20-40% higher inbox placement because the content fingerprint varies.
    • One credible logo changes everything. Land one recognizable customer, then reference them in every subsequent email.

What goes wrong

The failure modes that catch most founders.

  • You build infrastructure before you validate messaging

    The most common founder mistake. You spend two weeks setting up 50 domains and warming inboxes, then send 500 emails to a 0.3% reply rate. The infrastructure was fine — the message was wrong, and now you've wasted three weeks. Send 50 manual emails first. Always.

  • You send cold email from your real company domain

    When sender reputation tanks, your founder@yourcompany.com email starts landing in spam too. Internal email, inbound replies, fundraising threads all get hit. Recovery takes weeks. The $12/domain insurance is the cheapest move in this entire library.

  • You skip warmup because you're in a hurry

    14-21 days feels like forever when you're trying to get to first revenue. But day-one sends from a brand-new mailbox land in spam 80-95% of the time. The warmup buys you 70-85% inbox placement — which is what makes the whole motion work.

  • You use identical copy across 200 emails

    Gmail and Outlook use content fingerprinting to detect mass sends. 200 emails with the same body text is a clear spam signal even if your infrastructure is perfect. Use spintax on greetings and openers. Different opening sentences. Different specific observations.

  • You publish two SPF records by accident

    When you add a new sending platform, the temptation is to add a second SPF TXT record. SPF only allows one — two records cancel each other out, both fail, and your sending estate goes silently dark. Always edit the existing record, never add a second one.

  • You scale before reply rate proves out

    You see 50 sends produce 2 replies and assume 5000 sends will produce 200. They won't — your list quality, your sender reputation, and the freshness of your offer all degrade at volume. Test messaging on 100 prospects. If interested rate hits 1%, scale to 200. Then 400. Then evergreen.

Want the technical depth?

The chapters with the full reference detail.

We do all of this end-to-end for you in 2-3 weeks.

If you'd rather not spend 5 days configuring DNS records, we set up the whole stack — domains, mailboxes, authentication, warmup, sequencing — under your entity, operated by an engineer in your Slack. You walk into a working cold-outbound motion.