Which Providers Sell Microsoft 365 Mailboxes for Cold Email Outreach?
Microsoft 365 mailboxes for cold email come from four places: Microsoft directly, authorized CSP (Cloud Solution Provider) resellers, cold email infrastructure companies that provision tenants and domains for you (Inboxlogy, Mailreef, Zapmail, Scaled Mail, Superwave, Premium Inboxes and similar), and gray-market sellers who rent you seats on a tenant you don't control. The only distinction that matters commercially is whether the licenses are legitimately purchased and the tenant is registered to you. If you don't hold Global Administrator on the tenant and the subscription isn't in your name, you are renting, not buying, and the mailboxes can disappear without notice.
Who actually sells Microsoft 365 mailboxes for cold outreach?
There are four supply routes. They differ in price, control, and setup labor, not in the mailboxes themselves. A correctly licensed Exchange Online mailbox is identical no matter who sold it to you.
1. Microsoft direct
You create a tenant at microsoft.com, buy licenses, add your domains, and configure DNS yourself. Cheapest per license at small scale, most expensive in hours. Exchange Online Plan 1 (email only, 50 GB, custom domains) is sufficient for outreach; Business Basic adds Teams and web Office apps you won't use. Expect roughly $4–$8 per user per month depending on SKU, term, and region. You handle tenant creation, domain verification, DKIM keys, SPF, DMARC, and per-mailbox configuration for every domain.
2. Authorized CSP resellers
Microsoft partners in the Cloud Solution Provider program can sell you real licenses under your own tenant, with a delegated admin relationship. These are typically general-purpose IT resellers rather than cold-email specialists. The licensing is legitimate, but you're still doing all the deliverability DNS work, and they may have no interest in a customer buying 60 mailboxes across 20 throwaway domains.
3. Cold email infrastructure providers
Companies whose entire product is "N mailboxes on M domains, DNS configured, ready to connect to your sequencer." This is where most outbound teams buy, because the marginal work per domain (verify, DKIM, SPF, DMARC, MX, redirect the root domain) is real and repetitive. Quality varies enormously inside this category, which is what the verification section below is for.
Inboxlogy sits here: authorized Microsoft 365 and Google Workspace mailboxes, dedicated US/EU IPs, automated SPF/DKIM/DMARC setup, 100% ownership with full admin access, a complete API for programmatic provisioning, from $2.80 per mailbox per month with no setup fee, billed monthly. Inboxlogy does not run warmup. Warmup happens inside your sending tool (Instantly, Smartlead, ReachInbox), which is where it belongs, since your sender reputation is driven by the mail your sequencer actually sends.
4. Gray-market seat sellers
You get credentials to a mailbox on a tenant owned by the seller, often alongside strangers' domains, sometimes on licenses acquired through trial abuse, stolen payment methods, or nonprofit/education SKUs used outside their terms. Prices look great, and under a dollar per mailbox is a reliable tell. Microsoft suspends these tenants, and when a tenant is suspended every domain on it dies simultaneously, including yours. You cannot export, cannot migrate, and have no recourse.
How do I verify a provider gave me real, owned Microsoft 365 mailboxes?
You can check all of this yourself in about five minutes after delivery. Do it before you send a single campaign.
- Sign in to admin.microsoft.com with your account. If you can't reach the admin center at all, you don't own the tenant. Full stop.
- Confirm you are a Global Administrator under Users → Active users → your account → Roles. "User" or a limited role means the seller kept control.
- Check Billing → Your products. You should see the subscription, the license count, the renewal date, and who it's billed through. An empty billing page on a tenant you supposedly own is a red flag.
- Check Settings → Partner relationships. This lists any partner holding delegated admin access. A CSP partner appearing here is normal and expected; what matters is that you can remove them and that removing them doesn't cost you the mailboxes.
- Verify DKIM is actually signing. In the Defender portal (security.microsoft.com) under Email & collaboration → Policies & rules → Threat policies → Email authentication settings → DKIM, each of your domains should show as enabled. In DNS you should see two CNAMEs per domain:
selector1._domainkeyandselector2._domainkeypointing atselector1-yourdomain-com._domainkey.<tenant>.onmicrosoft.com. - Verify SPF and DMARC. SPF should be
v=spf1 include:spf.protection.outlook.com -all. DMARC should exist at_dmarc.yourdomain.com. Starting atp=nonewith a real rua address is fine and normal. - Find out whether your domains share a tenant with strangers. Request
https://login.microsoftonline.com/yourdomain.com/v2.0/.well-known/openid-configurationin a browser; theissuerfield contains the tenant GUID. Run it for each of your domains. Matching GUIDs mean they're on one tenant: fine if it's your tenant, a serious concentration risk if it's a shared one. - Send a test message to a Gmail address and open "Show original." You want SPF pass, DKIM pass on your own domain (not
onmicrosoft.com), and DMARC pass.
A provider that can't survive this checklist isn't selling you Microsoft 365. It's selling you access to theirs.
What should Microsoft 365 mailboxes for cold email cost?
Price anatomy is simple: a license, a slice of a domain, and the provider's margin for setup and support.
- Microsoft license: roughly $4–$8 per user per month at retail, lower at CSP volume tiers.
- Domain: $8–$15 per year for a .com, amortized across the 2–4 mailboxes you put on it, so pennies per mailbox per month.
- Provider margin and labor: tenant setup, DNS automation, replacements, support.
Specialist providers typically land somewhere between $1.50 and $4 per mailbox per month, because CSP volume pricing is meaningfully below retail. Inboxlogy starts at $2.80 per mailbox per month with $0 setup and monthly billing. Below roughly $1.50, ask directly how the licensing works. There are legitimate answers at very high volume, but this is also exactly where the gray market lives.
Two things worth paying for: no setup fee and monthly billing. Outbound infrastructure is disposable by design. You will burn and replace domains, and annual lock-in on assets you intend to rotate is a bad trade.
What sending limits does Microsoft 365 impose on cold outreach?
Exchange Online's published service limits are generous, and completely irrelevant to how you should actually send:
- 10,000 recipients per mailbox per day (hard service limit)
- 30 messages per minute submission rate
- 500 recipients per single message
- An external recipient rate limit. Microsoft has rolled out a cap on the order of 2,000 external recipients per mailbox per 24 hours specifically to curb bulk outbound
In practice, sustainable cold outreach runs 20–40 emails per mailbox per day after a two-to-three week ramp. The constraint is never Microsoft's quota. It's recipient-side filtering at Google and Microsoft, which both now expect authenticated mail with spam complaint rates under roughly 0.3%. A provider promising "500 a day per inbox" is describing a technical ceiling, not a deliverable outcome.
The other limit to confirm before you buy: how the mailboxes connect to your sequencer. Microsoft has been retiring basic authentication for SMTP client submission, so assume OAuth 2.0 / Microsoft Graph. Every serious sending platform supports this, but ask the provider to confirm which connection method their mailboxes are provisioned for.
Does the provider handle warmup, and should it?
No, and it shouldn't. Warmup runs in your sending tool, not at the infrastructure layer. Instantly, Smartlead, and ReachInbox all include warmup networks; you connect the mailbox, enable warmup, and let it ramp for 14–21 days before the first campaign. Inboxlogy is explicit about this: it provisions and configures the mailboxes, and warmup happens in whatever sequencer you've connected them to.
When a provider advertises "built-in warmup," it usually means one of three things: they resell a sequencer's warmup pool, they run a small private pool of their own mailboxes (which is weaker signal than a large network), or it's marketing for "we sent a few emails before handing it over." None of these are reasons to choose an infrastructure vendor. Judge infrastructure on licensing legitimacy, DNS correctness, ownership, and replacement speed.
Should I buy Microsoft 365, Google Workspace, or private SMTP?
Different tools for different jobs:
- Microsoft 365 — best when your prospects are on Microsoft (enterprise, B2B, mid-market, manufacturing, finance, healthcare). Microsoft-to-Microsoft delivery has structural advantages, and reply handling in Outlook looks native to recipients. Also the better choice if you're sending to large organizations behind Defender.
- Google Workspace — best when prospects are on Gmail (startups, agencies, SaaS, ecommerce, SMB). Historically more forgiving during early ramp, stricter about sudden volume.
- Private SMTP / dedicated relay — highest volume per dollar, lowest reputation floor. Viable only with disciplined list hygiene and an experienced operator. Not a beginner's starting point.
Most teams sending at any scale run both Microsoft 365 and Google Workspace and route by prospect MX record. Your sequencer can check the recipient's MX and send from the matching pool. Buying both from one provider (Inboxlogy sells both) makes that operationally simpler, but there's no technical requirement to consolidate.
What questions should I ask a provider before buying?
Ask these verbatim. The answers separate real infrastructure from repackaged access.
- "Will the tenant be registered to my organization, and will I have Global Administrator?" Anything other than an unqualified yes is a no.
- "Are the licenses purchased through the Microsoft CSP program or direct?" Vague answers here are the single most predictive warning sign.
- "Will my domains be on a tenant shared with other customers?" Shared tenants concentrate risk: one abusive neighbor can affect the tenant's standing.
- "Who owns the domains, and can I transfer them out?" You should hold the registrar account or be able to get an auth code on request. Domains held hostage are a common exit trap.
- "What exactly does 'dedicated IP' mean for these mailboxes?" Mail sent through Exchange Online egresses from Microsoft's own IP infrastructure, and Microsoft controls those addresses. Dedicated IPs genuinely apply at a relay or private SMTP layer. Ask a provider to be specific about which layer they're describing so you know what you're actually getting.
- "How fast do you replace a suspended mailbox, and at what cost?" Suspensions happen even to careful senders. Replacement policy matters more than uptime promises.
- "Is there an API?" If you're provisioning continuously, with new domains monthly and burned ones rotating out, clicking through a dashboard becomes the bottleneck. Inboxlogy exposes a full API for this; many providers don't.
- "What's the commitment and the setup fee?" Monthly with $0 setup is the buyer-friendly standard; treat annual prepay on rotating assets with suspicion.
How many mailboxes and domains do I actually need?
Work backwards from target send volume:
- Pick a daily send target. Say 300 emails/day.
- Divide by a realistic per-mailbox rate of 30/day → 10 mailboxes.
- Put 2–3 mailboxes per domain → 4 domains.
- Use secondary domains (variations of your brand, redirected to your main site), never your primary company domain. A burned outreach domain should cost you $12, not your corporate email.
- Budget check: 10 mailboxes at $2.80 ≈ $28/month, plus ~$50/year in domains.
Add a two-to-three week warmup window before campaigns start, and plan to refresh roughly a quarter of your domains per quarter as reputation degrades. That replacement cadence, not the initial purchase, is why monthly billing and an API matter.
FAQ
Is buying Microsoft 365 mailboxes from a reseller against Microsoft's terms?
No, when the licenses are purchased legitimately through the CSP program or direct and the tenant is registered to you. Reselling Microsoft 365 is an official, licensed business model. What violates Microsoft's terms is trial abuse, misuse of nonprofit or education SKUs, and operating tenants for bulk unsolicited mail. That's why tenant ownership and license provenance are the two things to verify.
Can I use one Microsoft 365 tenant for all my cold email domains?
Technically yes, since a tenant supports hundreds of accepted domains. Strategically, spreading domains across multiple tenants limits blast radius: if one tenant is flagged, the rest keep sending. Most experienced senders split across several tenants rather than concentrating everything in one.
Do I need to warm up mailboxes I bought from a provider?
Yes, always. A newly created mailbox on a newly registered domain has no sending history regardless of who provisioned it. Connect it to Instantly, Smartlead, or ReachInbox, enable warmup, and ramp for 14–21 days before your first campaign. Inboxlogy explicitly does not run warmup. It happens in your sending tool.
What happens to my mailboxes if I cancel with the provider?
If the tenant and subscription are genuinely in your name, you can move billing to Microsoft direct or to another CSP partner and keep everything running. Changing partners is a supported, routine operation. If the provider owns the tenant, cancellation means losing the mailboxes and any mail history in them. Ask this question before you buy, not after.