Outlook Email Warmup: How to Warm Up Microsoft 365 and Outlook.com Mailboxes

Outlook processes most enterprise B2B email. If your cold outreach lands in junk there, you are missing the majority of the decision-makers you are trying to reach. Warming up for Outlook requires a slightly different approach from Gmail — Exchange Online Protection watches different signals, and the monitoring tools you need are different too. This guide covers exactly what to do.

Why Outlook warmup is different from Gmail

Outlook — covering Outlook.com, Hotmail, Live, and the Microsoft 365 tenant mailboxes that most enterprise prospects use — runs on Exchange Online Protection (EOP). EOP differs from Gmail's filter in two important ways that change how you approach warmup.

First, EOP weights IP reputation more heavily than Gmail does. Gmail's dominant signal in 2026 is domain reputation. EOP gives IP reputation nearly equal weight. That means shared sending infrastructure matters more when targeting Outlook recipients. If your cold email platform routes through a pool with poor Outlook standing, a clean domain reputation will not save you.

Second, EOP's content scanner is stricter on link density and certain HTML patterns. Emails with a high link-to-text ratio, image-heavy templates, or patterns that match known spam campaigns are filtered more aggressively at Outlook than at Gmail.

What Exchange Online Protection actually checks

The main signals EOP uses, in rough order of weight:

1. IP reputation. EOP maintains its own IP reputation database and references public blocklists including Spamhaus and SpamRats. Each sending IP gets a filter result: Green (good), Yellow (borderline), or Red (blocked or heavily filtered).
2. Authentication. SPF, DKIM, and DMARC must pass. EOP is particularly strict about DKIM key strength — 1024-bit keys are treated as weak. Use 2048-bit.
3. Domain reputation. Weighted less than at Gmail but still contributes. Building domain reputation helps across Microsoft 365 tenants with custom filtering rules.
4. Complaint signals. Recipients marking messages as junk feeds into both EOP's own system and the Junk Email Reporting Program (JMRP). Complaint rate above 0.30% triggers aggressive filtering across all recipients on that IP.
5. Sending pattern. EOP watches volume stability. Consistent, predictable sends from the same IP look like a legitimate sender. Spikes from new senders look like compromised accounts.
6. Content patterns. High link-to-text ratio, base64-encoded bodies, shortener chains, and certain phrase patterns that match known campaigns all raise EOP's spam score.

Step 1: Configure authentication before anything else

Authentication must be in place before a single warmup message leaves your mailbox. For Microsoft's stack specifically:

• ✦SPF must be valid and must not exceed 10 DNS lookups. A broken or over-limit SPF record is an automatic soft-fail at EOP.
• ✦DKIM must use a 2048-bit key. EOP flags 1024-bit keys as weak and reduces the strength of your authentication pass accordingly.
• ✦DMARC must be published at p=none minimum with rua reporting active. Start at p=none, read 30 days of reports, then tighten.
• ✦If you send from Microsoft 365, enable DKIM signing in the Microsoft 365 admin centre — not just through DNS. The admin console enables the signing service and generates the key pair. Adding the DNS record alone without enabling signing does nothing.

Step 2: Register with SNDS before warmup starts

Smart Network Data Services (SNDS) is Microsoft's equivalent of Google Postmaster Tools. Register at postmaster.live.com and add every IP your sending infrastructure uses. SNDS shows you:

• ✦Filter result per IP: Green, Yellow, or Red.
• ✦Message volume per IP per day.
• ✦Complaint rate.
• ✦Spam trap hit count.

Without SNDS you are blind to your Outlook reputation. You will not know your IP status until campaigns start failing. Registration is free and takes about 10 minutes.

Step 3: Sign up for JMRP

The Junk Email Reporting Program sends you complaint feedback when Outlook.com, Hotmail, and Live recipients mark your messages as junk. Unlike Gmail's Postmaster Tools, JMRP sends individual complaint emails to a feedback mailbox you designate. A volume spike in JMRP reports is your early warning that complaint rate is rising before SNDS catches up.

You will need a feedback mailbox that somebody actually reads. Routing JMRP reports to an unmonitored inbox defeats the purpose.

Step 4: Run warmup with Outlook peers in the network

Your warmup tool must include Outlook and Microsoft 365 mailboxes in its peer network, not just Gmail. Many warmup tools are heavily Gmail-weighted because Gmail dominates consumer email volume. For B2B cold email, your prospects are mostly in Microsoft 365 tenants. Outlook-side peer activity is what builds the signals EOP tracks.

The core warmup mechanics are the same: conversational messages, replies with quoted history, spam-folder rescue, and positive engagement actions. The difference is the recipient side. Peer mailboxes at Outlook.com and Microsoft 365 receiving and engaging with your messages are the inputs EOP needs to move your IP filter result from Yellow to Green.

Step 5: Ramp gradually

EOP is less sensitive to total volume than Gmail but more sensitive to volume spikes from new senders. A realistic warmup ramp for a new Microsoft 365 mailbox targeting enterprise B2B contacts:

• ✦Brand new domain (under 30 days old): 21 to 28 days of warmup before any cold sending. Add a further 30 days of domain age before warmup starts if you can.
• ✦Aged domain (30 to 180 days, clean history): 14 to 18 days.
• ✦Established domain (over 6 months, previously sent normally): 7 to 10 days.
• ✦Previously burnt domain: treat as brand new at minimum, and consider whether it is worth rehabilitating at all.

How do you know a mailbox is ready?

Calendar days are a guide, not a guarantee. A mailbox is ready to send cold email when all of these are true:

1. Health score above 80 for at least three consecutive days in your warmup tool.
2. Inbox placement above 95% in your primary target provider, measured by seed tests.
3. Gmail Postmaster domain reputation showing High (set up Postmaster Tools for your sending domain now if you have not).
4. Spam recovery rate trending down — fewer messages landing in spam in the first place.
5. No authentication failures in the past 7 days.
6. Days 1 to 7: 10 to 20 warmup messages per mailbox per day, mixed across Outlook and Gmail peers.
7. Days 8 to 14: 25 to 40 per mailbox, spam rescue active on every cycle.
8. Days 15 to 21: 40 to 60 per mailbox, with at least 30% of peer traffic going to Outlook mailboxes.
9. Day 21 onward: begin cold sending at 10 to 15 messages per mailbox per day, only when SNDS shows Green and Outlook placement seeds are inboxing above 90%.

If you are using Warmerly, these indicators are surfaced in the dashboard. If you are using another tool or a manual approach, check Postmaster Tools and your warmup tool's placement data directly.

Step 5: Set up Google Postmaster Tools and Microsoft SNDS

These two free tools are the closest thing you get to seeing deliverability through the provider's eyes. Set them up before you start warmup so you have baseline data to compare against.

Google Postmaster Tools (postmaster.google.com) verifies your sending domain via a DNS TXT record and shows domain reputation, spam rate, IP reputation, authentication pass rate, and delivery errors. Domain Reputation is the headline number. High is where you want to be. Anything below Medium is a problem requiring immediate action.

Microsoft Smart Network Data Services (SNDS) covers Outlook.com, Hotmail, and Microsoft 365. Register the IPs you send from and SNDS shows per-IP filter results (Green, Yellow, Red) and complaint rates. If you are on a shared provider like Google Workspace, you share IPs with other senders — SNDS is most useful when you have dedicated or semi-dedicated IPs.

Step 6: Your first campaign — start small

Warmup is complete. Health looks good. Postmaster is showing High. Now you are ready to run your first campaign — but not at full volume.

The standard ramp for first campaigns from a warmed mailbox:

These figures assume one mailbox. If you run multiple mailboxes on the same domain, the per-mailbox volumes stay the same but the domain-level total grows. Gmail and EOP both watch domain-level totals alongside per-mailbox counts.

How to read your Outlook sender reputation

Once you are sending, these are the numbers to watch weekly.

SNDS filter result: Green means EOP is routing you to inbox. Yellow means borderline — EOP may route some messages to junk depending on recipient-level rules. Red means EOP is blocking or junk-filtering most messages. Most warmup tools do not surface SNDS data directly, so check it manually during the ramp phase.

JMRP complaint rate: target below 0.30%. Above that, EOP's filter becomes significantly more aggressive. Unlike Gmail's Postmaster spam rate display, JMRP sends raw feedback emails, so you need to track volume trends in your feedback mailbox yourself.

Outlook placement in your warmup tool: if your tool seeds test mailboxes across Outlook.com and Microsoft 365, you can see folder placement directly. Inbox above 95% is healthy. Junk placement above 10% means something needs to change.

Common Outlook warmup mistakes

• ✦Week 1: 20 to 25 cold sends per mailbox per day, alongside warmup continuing at full volume.
• ✦Week 2: 30 to 40 sends per day, monitor Postmaster every other day.
• ✦Week 3: 40 to 50 sends per day, reduce warmup to 50% of peak volume.
• ✦Week 4 onward: up to 50 sends per day, keep warmup running at 20 to 30% indefinitely.

Never send cold email on Monday mornings or Friday afternoons. Tuesday, Wednesday, and Thursday between 8am and 11am in the recipient's timezone is where open rates and reply rates peak.

List hygiene before every send

Verify your list before it touches a campaign. Bounce rates above 2% will get you throttled. Above 5% will get your domain blacklisted. Use a list verification tool that does syntax checking, MX lookup, SMTP probing, and catch-all detection. Remove role accounts (info@, sales@, support@, admin@) — they rarely result in replies and often inflate complaint rates.

Content basics that still matter

Modern spam filters do not care about the word free or exclamation marks. They do care about:

• ✦Link-to-text ratio. Keep it under 1 link per 200 words. Two links maximum per message.
• ✦Image-only emails. Always include text. A single hero image with no copy fails almost every spam filter.
• ✦Redirect chains. URL shorteners that resolve to other shorteners. Use clean, direct URLs.
• ✦Tracking domains. Warm your tracking domain the same way you warm your sending domain.

Step 7: Ongoing maintenance

Setup is not a one-time task. Cold email infrastructure needs weekly attention to stay healthy.

The Monday morning routine that keeps most senders out of trouble:

1. Check Postmaster domain reputation. If it dropped from High to Medium, pause cold sends and investigate before resuming.
2. Check SNDS if you have dedicated IPs. Any Red results need same-day attention.
3. Review your warmup tool's health score. Any sudden drops correlate to deliverability events you need to investigate.
4. Check bounce and complaint rates from last week's campaigns. Keep both under control.
5. Verify DMARC aggregate reports arrived from the major providers. Missing reports often mean alignment failed.

Keep warmup running permanently. This is the step most senders skip after a few months when campaigns are going well. Reputation decays during quiet periods. Any gap longer than two weeks without sending will require a short re-warm before resuming. Keep it running at low volume and you never have to restart.

Common mistakes that burn domains

Almost every domain-burn story has one of these at the root.

• ✦Sending from the primary business domain. The cost of a burnt primary domain is enormous compared to the cost of a separate sending domain.
• ✦Skipping warmup entirely. A single cold campaign from a new mailbox on a new domain is enough to permanently damage both.
• ✦Stopping warmup once campaigns start. Warmup is maintenance, not onboarding. It never fully stops.
• ✦Buying expired domains. The reputation that expired domain carries is unknown to you. Clean new registrations are safer.
• ✦Adding too many mailboxes to one domain too fast. Domain-level sending volume spikes are watched by Gmail just as closely as per-mailbox spikes.
• ✦Not reading DMARC reports. Authentication misconfiguration is often silent — the mailbox still sends, it just spam-folders at a higher rate. DMARC reports catch this.
• ✦Sending cold email from a domain used by real employees for normal business communication. When the outreach domain burns, it takes everyone's mail quality down with it.

Where Warmerly fits in

Warmerly connects to Microsoft 365 and Outlook.com mailboxes via Microsoft OAuth alongside Gmail via Google OAuth. Warmup traffic runs across a mixed peer network covering both providers. Inbox placement seeds check folder placement across five providers including Microsoft 365 and Outlook.com, so you see Outlook delivery data from the first week of warmup.

The health dashboard surfaces authentication status, per-provider placement scores, and timestamped health events per mailbox. If a DKIM record changes, a volume spike occurs, or an auth check fails, it appears in the timeline before it compounds into a deliverability problem.

Warmerly is warmup-only. It connects to the same mailbox your campaign tool uses and runs the reputation layer in the background. There is no migration, no routing change, and no conflict with your existing sending stack.