Separate Domain for Cold Email: Do You Need One?

You found a founder asking for exactly your product on Reddit. You have their company, their name, a good reply drafted. Then you open your email client and hesitate, because your sending address is the same one your customers use to pay in

You found a founder asking for exactly your product on Reddit. You have their company, their name, a good reply drafted. Then you open your email client and hesitate, because your sending address is the same one your customers use to pay invoices, and someone in a Slack group told you last week that you must never cold email from your main domain. Buy five lookalike domains, they said. Rotate them. You closed the tab and sent nothing.

So, a separate domain for cold email: needed or folklore? Some of it is folklore and some of it is sensible, and Google's own documentation sorts out which is which.

Google's 5,000 threshold counts your primary domain

Most of the advice you read quotes the rule wrong. Google's email sender guidelines say that starting February 1, 2024, senders who send more than 5,000 messages a day to Gmail accounts must meet the bulk sender requirements. Those add DMARC on top of SPF and DKIM, one-click unsubscribe for marketing mail, and a spam rate kept below 0.3% in Postmaster Tools, with a recommended target below 0.10%.

Google's bulk sender FAQ closes the loophole people hope for. It gives an example of a sender mailing 2,500 messages a day from solarmora.com and 2,500 from promotions.solarmora.com, and says that sender counts as a bulk sender because all 5,000 messages came from the same primary domain. It also says a sender classified as bulk stays classified as bulk, whatever changes afterward.

For a founder sending twenty triggered emails a day, this means the threshold is not your problem. You sit about two orders of magnitude under it. A subdomain would not move you across it either way, and a separate domain only changes which domain's count grows.

At twenty emails a day, Postmaster Tools shows you nothing

Here is the part the deliverability vendors skip. Google Postmaster Tools is the dashboard that reports your spam rate, and its help page says data might be missing if the total number of messages for a given day is too low, to protect users' privacy. Low-volume senders get blank charts. The same page says you can add a subdomain to see its dashboards independently from the primary domain, which tells you Google reports on them separately.

So the dashboard that every "keep your complaint rate under 0.3%" article tells you to watch will probably show nothing for you. At your volume, your signals are different: bounces, replies, and the number of people who say "who is this?" That is one more reason to write the kind of email that gets replies instead of reports.

The real reason to separate is what your main domain carries

Forget thresholds. Your main domain sends your invoices, your password resets, your support replies, and the email your first customers use to say they still exist. If a cold campaign goes badly, because you pointed it at a list nobody wanted to hear from, the damage should land somewhere you can afford to lose.

That is the whole argument, and it is an opinion, not a rule from Google. A cold email that gets reported spam is a bad week on a throwaway sending domain. On your primary domain it is a bad week for the mail that keeps your business running. I would take that trade even at twenty emails a day, because the cost is a domain registration and one more mailbox.

The question was never whether Google will punish you. It is whether you want your invoices riding on the same domain as your riskiest campaign.

A cousin domain works if it stays obviously yours

Separate does not mean disguised. The FTC's CAN-SPAM compliance guide says your From, To, Reply-To and routing information, including the originating domain name and email address, must be accurate. It also says the law makes no exception for business-to-business email, and that each violating email can draw penalties of up to $53,088. Our CAN-SPAM breakdown walks through the rest.

A cousin domain passes that test when a recipient can work out who sent it in ten seconds. If your product is acme.com, then tryacme.com or getacme.com pointing to your real site, with your real name in the signature and a real postal address in the footer, is a different mailbox for the same honest sender. Registering acme-support.io to look like a company you are not is something else, and nothing here helps with it.

Rotating burner domains treats complaints as a plumbing problem

The folklore gets expensive at this step. Someone sells you a stack of ten domains and a rotation tool so no single domain sends enough to get noticed. That plan exists to spread out complaints, not to stop them, and spreading complaints is the opposite of what Google's 0.10% target asks of you. It also costs more than the problem it solves when you send twenty emails a day.

My view: one cold sending domain, a small number of real mailboxes, and a hard rule that anything generating complaints stops until you find out why. If a campaign needs domain rotation to survive, the list or the message is wrong. That is also why volume outbound stopped working, whatever infrastructure sits under it.

Setting up one cold domain takes an afternoon

Here is the version I would run for a founder doing signal-triggered outreach, not blasts:

1. Register one lookalike domain that is plainly your brand, and point its website at your real site.
2. Authenticate it before the first send. Google says all senders need SPF or DKIM, and bulk senders need both plus DMARC. Publishing all three costs nothing, and Outlook's rejections show the checks run on small senders too.
3. Create one or two mailboxes under real names and put your actual postal address and an opt-out sentence in the footer.
4. Add the domain to Postmaster Tools anyway. It will probably stay blank for a while, but the data appears once you have volume.
5. Send a handful of personal emails a day to people with a live reason to hear from you, and add to that number only while replies stay healthy.
6. Stop and investigate if anyone reports you, replies angry, or you see a cluster of bounces.

Step five does the real warmup. If you want to know whether Gmail is quietly rejecting your drafts for sounding like a robot, it isn't, per Google's own docs, and the fix for a flagged domain is almost always authentication or targeting.

A last note on the targeting. Shadow Inbox is our product, so weigh this accordingly: it exists because the best cold email is one sent to someone who just asked for it, and a person who posted "any tool for X?" an hour ago does not report your message as spam. Whatever domain you send from, that is where your complaint rate stays low.

● FAQ

Do I need a separate domain for cold email?

Not for any rule Google publishes. Its bulk sender requirements start above 5,000 messages a day, and a second domain does not change what the first one is doing. The reason to separate is practical: if a cold campaign draws complaints, you want them landing on a domain that does not also carry your invoices and customer replies.

Does a subdomain protect my main domain's reputation?

Google's bulk sender FAQ says messages from subdomains count toward the same primary domain for the 5,000 threshold. I could not find a Google page that says whether reputation is shared between a domain and its subdomains, so treat a subdomain as partial isolation at best. A separate domain isolates more.

Can I use a lookalike domain for cold email?

Yes, if it is clearly yours. The FTC's CAN-SPAM guide says the From, To, Reply-To and routing information, including the originating domain name and email address, must be accurate. A cousin domain that points to your real site and signs with your real name passes that test. One that imitates a different company does not.

Do I need to warm up a new cold email domain?

A new domain has no sending history, so start with a handful of real, personal messages a day and raise the number only while replies stay healthy. Google's guidance says nothing about warmup tools, and our cold email playbook explains why we think they treat the symptom. Low volume to people who asked for help is the warmup that matters.

Can I see how Gmail rates my cold email domain?

Only with enough volume. Google Postmaster Tools tells you that data might be missing when a day's message count is too low, which protects recipient privacy. At 20 emails a day you will likely see empty dashboards, so authentication checks and reply rates have to be your signals.