Blog
Cold Email Mailbox Ownership: Who Controls Your Mailboxes?

Cold Email Mailbox Ownership: Who Controls Your Mailboxes?

Summarize with

Your order confirmation from a mailbox provider shows your domains, mailboxes, and monthly price. 

It usually leaves out three details you may need later. 

Whose name is on the registrar account? Who holds the admin login? Can you take your domains with you if you leave?

You won’t miss this information while your campaigns run. You’ll need it when you try to move a domain and discover you can’t get the transfer code yourself. Your provider must send it, leaving you waiting.

You may think this doesn’t apply because you trust your provider. I’m not asking you to doubt them. I’m asking you to check what you agreed to when signing up. Those terms, not your relationship with the provider, decide what you keep after you stop paying.

Below, I explain cold email mailbox ownership in plain language. You’ll learn how to check who controls each part of your setup and what to ask before buying more mailboxes.

Table of Contents

Quick comparison

Question Direct Google Workspace or Microsoft 365 Mailbox Provider or Reseller Shared SMTP Mailboxes Agency-Run Setup
Whose name is on the domain? Yours Whoever registered it, you or the provider Yours, or the provider’s Yours only if the setup is client-owned
Who holds admin rights? You Depends on how the provider sets up your account No tenant to hold The agency, unless you grant them access to your own tenant
Who can edit DNS? You The provider, if your nameservers point to them The provider, if your nameservers point to them Whoever manages the nameservers
What leaves with you? Everything Whatever the transfer and export terms allow The domain, if it’s registered to you Whatever the contract names
How much setup work is yours? All of it, by hand Very little Very little Very little

The less setup work you handle, the more your ownership depends on someone else’s terms. Before buying, check whose name appears on the registrar account and who holds the admin role. 

If you use Primeforge, Mailforge, or Infraforge, the Salesforge section explains how each product handles these questions. 

What cold email mailbox ownership means

Cold email mailbox ownership comes down to one question. If you stop paying your provider or agency tomorrow, what can you take with you?

You own a mailbox when your name appears on the accounts that decide its future. That includes the registrar account for the sending domain, the admin seat in the Google Workspace or Microsoft 365 tenant, and the billing account that keeps both active.

Paying for mailboxes every month doesn’t settle ownership. Payment gives you permission to use them. 

The names on those accounts decide who can change, move, or delete them, and those names aren’t always yours.

Ownership rarely matters on your first day. It matters months later when you want to change sending tools, cancel a plan, or recover a suspended inbox.

Ownership vs access

If you can sign in to a mailbox, it’s easy to assume you own it. A login only gives you access. You can read replies, send emails, and connect the mailbox to your sending tool.

Ownership sits one level higher. A tenant admin can reset your password, suspend the mailbox, or delete it. 

The registrar account holder can edit DNS records, let the domain expire, or transfer it elsewhere. Neither needs your approval.

Check two things. Who holds admin rights in your tenant, and whose name appears on the domain’s registrar account? If both point to your provider or agency, you have access, but they own it.

The layers of a cold email setup and who controls each one

A cold email mailbox isn’t one asset you either own or don’t. It depends on five separate parts, and different parties may control each one. 

You could own the domain while your provider manages the tenant, or own the tenant while an agency handles DNS. 

Below, I explain each part and what you lose if you don’t control it.

Layer Who Controls It What You Lose If It Isn't Yours
Domain The registrar account holder Renewals, transfers and the domain itself
DNS records Whoever manages your nameservers Edits to SPF, DKIM, DMARC and MX
Tenant The super admin or global admin Admin changes and separation from other customers' suspensions
Sending tool connection The tenant admin and your provider's export options The option to move mailboxes to another tool
Warmup history and reputation Whoever keeps the domain and mailboxes The sending history you built

The domain and registrar account

Most people check the domain first, and for good reason. Whoever holds the registrar account can renew it, let it expire, or move it to another registrar. If that account belongs to your provider, the domain your prospects recognize belongs to them.

Ask for two details. Which registrar holds the domain, and whose name is on the account? Seeing a domain in your dashboard doesn’t answer either question.

DNS records

DNS records tell inbox providers which servers may send emails for your domain and where replies should go. SPF, DKIM, and DMARC prove you’re allowed to send, while MX directs incoming email.

You can own a domain without controlling these records. If the nameservers point to your provider, only they can edit them. That saves setup time because the provider writes the records for you.

However, taking back control means moving the nameservers. Any mailboxes relying on the old records may stop working until you rebuild them.

The Google Workspace or Microsoft 365 tenant

The tenant is the account holding your mailboxes. Its highest admin, called a super admin in Google and a global admin in Microsoft, can create or delete users, reset passwords, and approve or block outside apps.

Some setups give you your own tenant. Others place your mailboxes inside one managed by the provider. In the second case, you can’t make admin changes yourself. If Google or Microsoft suspends that tenant, your mailboxes stop working alongside everyone else’s, even if your sending was clean.

The mailbox connection to your sending tool

Your sending tool connects to each mailbox using OAuth or SMTP and IMAP credentials. With OAuth, the tenant admin approves the connection and can revoke it at any time.

Export access matters most here. If you can’t download the credentials or move mailboxes into another tool, changing platforms means starting again.

Warmup history and sender reputation

Warmup history and reputation don’t live in your provider’s dashboard. Inbox providers connect them to your domains and mailbox addresses, which is why the earlier layers matter.

If the provider keeps the domain after you leave, the reputation you built stays with them. If they delete the mailboxes, each address loses its sending history.

Common ownership models for cold email mailboxes

Most cold email setups follow one of five ownership models. None is automatically wrong. Each trades some control for convenience or faster setup. What matters is knowing what you give up before buying. 

Model Who Holds Admin Who Owns the Domain Exit Path
Direct Google Workspace or Microsoft 365 You You You keep everything
Mailbox provider or reseller Depends on the provider You or the provider, depending on who registered it Depends on the provider's transfer and export terms
Shared SMTP The provider You or the provider Mailboxes end with your account; the domain moves only if it's yours
Agency-owned The agency The agency Only what the contract allows
Client-owned, agency-run You, with agency access You Remove the agency's access

1) Buying Google Workspace or Microsoft 365 directly

In this model, you sign up with Google or Microsoft yourself. You hold the tenant, register domains through your own registrar account, and pay the bills. Every layer is in your name.

The cost is your time. You must add and verify each domain, create users, and manually write every DNS record. That’s manageable with a few mailboxes. As you scale, the hours add up quickly, and one incorrect record can hurt deliverability across an entire domain.

2) Buying through a mailbox provider or reseller

A provider buys Google Workspace or Microsoft 365 seats and handles the domains, DNS, and mailbox setup. You receive working mailboxes without opening an admin console.

Ownership depends on how the provider structures your account. Two providers can sell the same Google mailboxes while giving you very different rights.

One may register domains in your name and let you transfer them. Another may keep the registrar account and admin role. Price and setup speed won’t reveal which one you’re buying. Only the terms will.

3) Shared SMTP mailboxes

Shared SMTP mailboxes don’t run through Google or Microsoft. The provider operates its own mail servers, creates your mailboxes, and gives you SMTP and IMAP credentials to connect them to your sending tool.

You give up more ownership in this model. You don’t have a tenant to hold, so the mailboxes exist only as long as your provider account remains active. You can keep the domain only if it’s registered in your name.

4) Agency-owned vs client-owned setups

When an agency manages your cold email, the same ownership layers apply, with another party added.

In an agency-owned setup, the agency registers the domains and holds the tenants. When the contract ends, you keep only what it says you keep. Without a transfer clause, assume the agency retains the domains and mailboxes.

In a client-owned setup, you register the domains and own the tenant. The agency works through admin access you grant. Ending the relationship means removing that access, while your domains, mailboxes, and sending history remain intact.

What happens when you don’t control your mailboxes

You won’t notice an ownership gap while everything works. It appears when something changes, usually when you have the least room to act.

These four situations are where missing ownership costs the most.

1) A suspension stops mailboxes you never misused

If your mailboxes sit inside a tenant run by your provider, a suspension stops every mailbox in that tenant, including yours.

You can’t ask Google or Microsoft to resolve it because the account isn’t in your name. You must wait for the provider while your campaigns remain paused.

2) Your provider pauses or shuts down

If the provider stops operating, changes its terms, or removes the service, any mailboxes inside its tenant go with it.

If your domains also sit in the provider’s registrar account, you can’t rebuild elsewhere using those domains. You must start again with new ones and no sending history.

3) You want to switch tools or leave

Leaving should involve a few simple steps. Export your mailbox credentials, transfer the domains, and point DNS toward your new setup. Without ownership, you'll need your provider’s help for each step.

If the nameservers point to the provider, you can’t edit DNS yourself. If they own the registrar account, the transfer happens only after they release the domain. If no export option exists, you must manually add every mailbox to your new tool, assuming you can get the credentials.

The same problem appears when an agency contract ends without a transfer clause.

4) Replies land in mailboxes you no longer have

Prospects reply to the address that contacted them, sometimes long after a sequence ends. Once that mailbox disappears, their replies never reach you.

That includes someone who responds a month later because the timing finally works.

How to check who owns your mailboxes today

You can run most of these checks yourself in a few minutes. Start with one sending domain, complete the six checks below, and repeat them for the others. 

  1. Find your registrar. Run a WHOIS lookup on your sending domain. It shows which registrar holds the domain, though privacy settings may hide the owner. Check whether you have a login for that registrar. If not, someone else holds the account.
    ‍
  2. Check your nameservers. A free DNS lookup tool shows where the domain’s nameservers point. If they point to your provider, the provider manages your DNS records, even if you registered the domain.
    ‍
  3. Try to get the transfer code. Most domains require an authorization code, also called an EPP code, before moving to another registrar. If you can retrieve it yourself, you can move the domain when you choose. If you must ask your provider, they control when it moves.
    ‍
  4. Try the admin console. Visit admin.google.com for Google Workspace or admin.microsoft.com for Microsoft 365 and sign in with one of your mailbox accounts. If the admin dashboard opens, you have admin access. If you reach your inbox or receive an access error, someone else holds it.
    ‍
  5. Check who bills you. An invoice from Google or Microsoft means you have the billing relationship. An invoice from your provider means they pay Google or Microsoft and you pay them.
    ‍
  6. Look for an export option. Check the provider’s dashboard for a way to download mailbox credentials or export mailboxes to another sending tool. If you can’t find one, ask support now rather than waiting until you want to leave.

If most answers point to your provider, that isn’t automatically a problem. It does mean your exit depends on their terms, so get those terms in writing. 

Questions to ask a mailbox provider or agency before you buy

The previous checks show where you stand today. Before buying, ask any provider or agency these questions and request written answers rather than relying on a sales call. 

Question The Answer You Want What to Watch For
Whose name goes on the registrar account for my domains? Yours Domains registered under the provider's account, with no way to move them into yours
Can I transfer my domains out, and what does it cost? Clear steps, a stated fee per domain, and a date when each domain becomes eligible No written transfer process, or vague answers about waiting periods
Do I get my own tenant, or do I share one? Your own tenant, or a clear explanation of how customers are kept apart Mailboxes mixed with other customers' mailboxes, where their spam complaints can affect yours
Who holds the admin role, and can I get admin access? Admin access, or a clear list of what you can change yourself No say over passwords, forwarding, or signatures
How do I export my mailboxes, and what happens when I cancel? Export to the sending tools you use, downloadable credentials, and time to move after you cancel Mailboxes deleted on the day you cancel
For agencies: will the contract name me as the owner, with a transfer clause? Yes, in writing A verbal promise with nothing in the contract

A note on transfers: Registrars lock newly registered domains against transfers for a set period. A provider may not be able to move a new domain immediately. You need a clear eligibility date rather than an open-ended wait.

If an agency won’t include ownership in the contract, plan as though the domains and mailboxes belong to them.

How Salesforge handles mailbox ownership

Salesforge is the tool used to send emails. The mailboxes connected to it come from Primeforge, Mailforge, or Infraforge, and each offers a different level of ownership.

Primeforge places mailboxes on Google Workspace or Microsoft 365, with a separate workspace or tenant for every domain.

Mailforge and Infraforge host SMTP mailboxes on their own servers. Mailforge uses a shared IP pool, while Infraforge provides a dedicated IP.

Below are the answers to three questions that reveal how locked in you would be. Who owns the domains? Who holds admin access? What do you keep if you leave?

Question Primeforge Mailforge Infraforge
Who owns the domains? You, even after you cancel You, with full DNS control You, with full DNS control
Do you get admin access? Super Admin per Google Workspace; one Microsoft tenant per domain No tenant to administer No tenant to administer
Who shares your sending setup? No one; each domain has its own workspace or tenant Other senders on a shared IP pool No one; you get a dedicated IP
Can you move mailboxes to another tool? Yes, by native export or CSV Yes, by export or CSV Yes, by export or CSV

Do you own the domains?

Yes, across all three products.

With Primeforge, you can buy domains through the platform or bring your own. Your registrar doesn’t change. Only the DNS hosting moves. You keep the domains after canceling.

With Mailforge and Infraforge, you manage your domains and DNS records as you would through any registrar.

If you use Primeforge, enable auto-renew on your first day. It’s off by default, and your domain can still expire.

Do you get admin access?

This is where the three products differ most.

Primeforge gives every domain its own Google Workspace, including the Super Admin account. You can manage users, access security and API settings, and connect your own tools through Domain-Wide Delegation without relying on a sending platform.

For Microsoft, each domain gets its own tenant, so no other customer or domain shares it.

Mailforge and Infraforge don’t use Google or Microsoft, so there’s no tenant or admin console to access. Your mailboxes run on their servers.

Mailforge uses a shared IP pool. Infraforge provides a dedicated IP used only by your mailboxes, so you own the sender reputation, along with the responsibility to keep it clean.

Not owning the server has practical consequences. When Mailforge moved some accounts to another server, the hostnames changed. Those mailboxes disconnected from sending platforms until users updated their settings.

What happens if you cancel or leave?

Your domains stay with you. With all three products, you send support a list of the domains you want to move. Support unlocks eligible domains, and you complete the transfer through your new registrar. Recently registered domains may need to wait until the registrar lock expires.

You need to plan for the mailboxes. Primeforge mailboxes stop working when your subscription ends, and you can’t move them to direct Google or Microsoft billing. If you leave, you must recreate them and warm them again.

If you only want to change sending tools, don’t cancel. Export the mailboxes instead.

Primeforge exports to Salesforge, Warmforge, and seven other platforms or provides a CSV. Mailforge and Infraforge export to platforms such as Smartlead and Instantly or provide a CSV. Neither product requires a contract, so you can cancel anytime.

Personalized Outbound Strategy

Get The Right Outbound Strategy In Minutes

Enter your email to get a custom plan & stack recommendation for your business

It's being carefully crafted by AI

Please check your mailbox in 5 minutes

Conclusion: Start with one domain

You don’t need to rebuild your entire setup to close an ownership gap. Start this week by running the checks on one sending domain.

If your name appears on the registrar account and you hold the admin login, you already control the two layers that are hardest to recover.

If not, ask your provider for its transfer and export terms in writing. Then decide whether you can accept them.

When buying new mailboxes, choose a setup where you keep the domains and receive admin access from the start.

Primeforge gives you Super Admin access for every Google Workspace domain, and your domains remain yours after cancellation. 

Set up your mailboxes in Primeforge, then export them directly to Salesforge when you’re ready to send.

Book more meetings on autopilot

Set up in minutes. No per-seat pricing. No commitment.
Try
free
4.6 rating on G2
Add as a preferred
source on Google