Microsoft 365 Business Basic costs $7 per user a month on an annual commitment, the plan most agencies would use for a cold email mailbox. It includes custom business email through Exchange Online without the extra apps a sending-only mailbox does not need. Microsoft 365 is a live alternative to Google Workspace for hosting cold email mailboxes, and it carries its own sending limits and rules rather than ones built for outreach.
This page looks at Microsoft 365 as a mailbox provider for cold outreach: what it costs today, Exchange Online's sending limits, the inbox rules and high-volume sender requirements that apply to Outlook.com addresses, and how to set a mailbox up. For how mailboxes fit with domains, warm-up and volume planning, start with our guide to cold email mailboxes. That guide is part of our guide to cold email for agencies. This page checks every source on Microsoft's own sites.
How much does Microsoft 365 cost for cold email?
Microsoft 365 Business Basic costs $7 per user a month on an annual commitment, Microsoft's lowest-priced plan that includes custom business email through Exchange. Two higher plans add desktop apps, security features and Copilot, none of which a sending-only mailbox needs.
| Plan | Price per user/month (annual) | What it adds over Basic |
|---|---|---|
| Business Basic | $7.00 | Custom email, web and mobile Office apps; enough for sending |
| Business Standard with Copilot | $23.50 | Desktop Office apps, Copilot in Word, Excel, PowerPoint |
| Business Premium with Copilot | $32.00 | Desktop apps, Copilot, device management, advanced threat protection |
Prices are list prices on an annual commitment, checked on microsoft.com/en-us/microsoft-365/business/microsoft-365-plans-and-pricing on October 8, 2026. All three plans cap at 300 users, far above what a cold email setup with 10 to 40 mailboxes needs. Twenty mailboxes on Business Basic, the size of our 10-domain, 20-mailbox setup, costs $140 a month on the annual plan.
What are Exchange Online's sending limits for cold email?
Exchange Online enforces a recipient rate limit of 10,000 recipients per 24-hour period per mailbox, across Business Basic, Business Standard and Business Premium plans alike. That limit applies on a rolling 24-hour window, not a fixed calendar day, and it covers all outbound and internal messages combined.
| Limit | Value |
|---|---|
| Recipient rate limit | 10,000 recipients per day, per mailbox |
| SMTP AUTH (client submission) | 30 messages per minute, 10,000 recipients per day |
| Recipients per message | 500 by default, configurable up to 1,000 |
| External Recipient Rate sub-limit | Counted within the same 10,000 recipient pool |
Source: Microsoft's own Exchange Online limits page and troubleshoot outbound sending limits page, both opened on learn.microsoft.com on October 8, 2026. The 30-messages-per-minute figure is a throughput cap, not a daily cap: a mailbox sending steadily at that rate for 24 hours would exceed the daily recipient limit well before the minute-by-minute cap became the binding constraint.
These numbers are the technical ceiling Exchange Online enforces before blocking a mailbox, not a safe volume for cold outreach. A mailbox sending anywhere near 10,000 recipients a day has no warm-up runway and no margin if something goes wrong. Our mailboxes guide works from roughly 30 cold emails per mailbox per day once fully warmed, a small fraction of Exchange Online's stated ceiling, because a mailbox that sends less has less reputation to lose.
What are Outlook.com's inbox rules, and why do they matter for cold email?
Outlook.com and other Microsoft consumer inboxes, including Hotmail and Live addresses, let a recipient create inbox rules that automatically move, flag or delete incoming mail. One such feature, "Sweep," runs once a day to clean up unwanted senders in bulk. A recipient who marks one message from a domain as unwanted can have every future message from that domain quietly swept out of the inbox. The sender never sees a bounce or a complaint when that happens.
Microsoft's own rules guide describes inbox rules as applying to incoming messages the moment they arrive, while Sweep rules run once per day rather than instantly. Both are standard features available to any Outlook.com user. They simply mean a Microsoft consumer recipient has an easy, one-click way to stop seeing mail from a sender, with no delivery failure on the sending side to signal it happened.
What is Microsoft's High Volume Email note, and what are Outlook.com's May 2025 bulk cold email sender requirements?
Microsoft's High Volume Email guidance and its 2025 bulk sender requirements both apply stricter authentication rules to domains sending large amounts of mail to Microsoft's consumer inboxes, separate from the Exchange Online limits that govern sending itself. Microsoft announced the change in April 2025, with enforcement beginning May 5, 2025. Domains sending more than 5,000 emails a day to Outlook.com, Hotmail and Live addresses must pass SPF and DKIM, and publish a DMARC record at least at p=none aligned with SPF or DKIM.
Microsoft's own techcommunity post on the change, opened October 8, 2026, states the requirements plainly: "For domains sending over 5,000 emails per day, Outlook will soon require compliance with SPF, DKIM, DMARC. Non-compliant messages will first be routed to Junk. If issues remain unresolved, they may eventually be rejected." The same post recommends a valid, reply-capable From or Reply-To address and a functional, clearly visible unsubscribe link for bulk or marketing mail.
Most individual cold email mailboxes send far below the 5,000-a-day threshold that triggers this policy. But it signals the direction every major consumer mailbox provider is moving: SPF, DKIM and DMARC are becoming baseline requirements rather than optional hardening, regardless of volume. Our SPF, DKIM and DMARC setup guide covers the records a sending domain needs before any of this matters.
What is Microsoft's outbound spam policy, and what happens if a cold email account is restricted?
Microsoft 365's outbound spam protection monitors every cloud mailbox for spam-flagged outbound mail, and for sending too much mail too quickly, independent of whatever spam filter verdict an individual message gets. Microsoft's own description states the thresholds are deliberately undisclosed: "high enough to prevent an average business user from ever exceeding them, and low enough to help contain the damage caused by a spammer."
When a mailbox crosses one of those thresholds, Microsoft's default outbound spam policy restricts the user from sending mail until the following day, based on UTC time, with an email notification sent to the account. A stricter setting blocks sending indefinitely and adds the mailbox to a Restricted Entities list in the Microsoft Defender portal, which only an administrator can clear. Source: Microsoft's own outbound spam protection and configure outbound spam policies pages, opened October 8, 2026.
For cold email, this means a mailbox that ramps volume too fast, or that sends to a list with a high complaint or bounce rate, risks a same-day sending restriction with no warning beyond the notification email. Our sender reputation guide covers the behavior that triggers restrictions across mailbox providers generally.
How do you set up a Microsoft 365 mailbox for cold email?
Set up a Microsoft 365 mailbox for cold email in five steps, in the same order regardless of which plan is chosen.
- Add the domain to Microsoft 365. Verify ownership through the DNS TXT record Microsoft provides in the admin center.
- Create the mailbox. One licensed user per sending identity, with a real first and last name rather than a role address.
- Add an SPF record. A TXT record on the domain authorizing Microsoft's mail servers to send on its behalf.
- Turn on DKIM. Enable and publish the DKIM selectors Microsoft 365 generates for the domain in the admin center.
- Add a DMARC record. A TXT record at
_dmarc, starting atp=nonewith a reporting address, tightened once the domain has a clean sending history.
Confirm every record resolves with a DNS lookup tool, then send a test message and check the headers show SPF, DKIM and DMARC all passing before any cold email goes out. Our full SPF, DKIM and DMARC guide walks through each record, and our email warm-up guide covers the ramp-up period a new mailbox needs before full volume, regardless of which provider hosts it.
We never say which mailbox provider Pipefire uses for a given account, and we set up every domain's authentication records and warm-up automatically. Setup handles the DNS work and verifies every record resolves before warm-up begins, so there is no admin center work on your side either way.
Is Microsoft 365 good for cold email compared to other mailbox providers?
Microsoft 365 is a viable mailbox provider for cold email, with its own sending limits, high-volume sender rules and outbound spam enforcement rather than anything built for outreach specifically. Whether it or another provider fits better usually comes down to price, existing familiarity with the admin console, and how the two providers' limits map onto your planned sending volume. Our guide to cold email mailboxes covers the comparison across providers in more depth, and our Gmail sending limits guide covers the equivalent numbers on the Google side.
Neither Microsoft nor any other mailbox provider carves out an exception for cold outreach in its terms, so the setup discipline, SPF, DKIM, DMARC, warm-up and list hygiene, matters more than which provider a mailbox sits on. Check current pricing and limits on the provider's own site before committing, since both change without much notice.
Microsoft 365 cold email FAQ
How much does Microsoft 365 cost for cold email per month?
Business Basic, the plan most cold email mailboxes would use, costs $7 per user a month on an annual commitment, checked on Microsoft's own pricing page in October 2026. Higher tiers add desktop apps and Copilot features a sending mailbox does not need.
What is Exchange Online's recipient rate limit for cold email?
Exchange Online allows up to 10,000 recipients per mailbox per 24-hour period across Business Basic, Standard and Premium plans, with SMTP AUTH submission also capped at 30 messages a minute. Those are technical ceilings, not a safe cold email volume.
What happened to Outlook.com bulk cold email senders in May 2025?
Starting May 5, 2025, Microsoft began requiring domains sending more than 5,000 emails a day to Outlook.com, Hotmail and Live addresses to pass SPF and DKIM. A DMARC record aligned with one of them is also required, with non-compliant mail first routed to Junk.
Can my cold email account get restricted on Microsoft 365?
Yes. Microsoft 365's outbound spam protection monitors every cloud mailbox for spam-flagged mail and for sending too much too quickly. By default it restricts a mailbox from sending until the next day, based on UTC time, if an undisclosed threshold is crossed.
Do Outlook.com inbox rules affect cold email deliverability?
Yes, indirectly. A recipient can create a rule or run Sweep to automatically move or delete mail from a sender. No bounce or complaint is visible to the sender when it happens, which is one more reason list quality and relevance matter more than any single technical setting.