You wake up to an email from your cold email provider. Your account is suspended. No warning. No explanation. Just "we've detected suspicious activity" and a link to their appeals process that goes nowhere.
This happens more than you'd think. And it's almost never random.
Cold email providers - whether it's Lemlist, Instantly, Apollo, or any other platform - operate under intense pressure from ISPs and mailbox providers. They have reputation to protect across thousands of accounts. So when they see patterns that look risky to them, they pull the trigger fast. They'd rather suspend one account than risk getting their entire IP pool blacklisted.
The problem is that "suspicious activity" doesn't always mean you did something wrong. It usually means you did something that looked wrong to an automated system. Understanding what triggers these suspensions - and how to avoid them - is the difference between running a sustainable cold email operation and spending weeks trying to get reinstated.
The Real Reasons Your Account Got Suspended
Most suspensions fall into three buckets. Not all of them are your fault, but all of them are preventable.
1. Sending velocity that doesn't match your warmup
This is the most common one. You set up your account, run a warmup tool for three days, and then immediately send 500 emails on day four. The warmup tool might show you're "ready," but you're actually not.
Here's what actually matters: your mailbox provider needs to see consistent, gradual increases in sending volume. Not because it's good practice - because Gmail, Microsoft, and Yahoo literally track the rate at which your account's sending behavior changes. If it changes too fast, it looks like account compromise.
The safe formula is this - spend 5-7 days warming up, hitting these daily volume targets:
- Day 1-2: 5-10 emails total
- Day 3-4: 25-50 emails total
- Day 5-6: 100-150 emails total
- Day 7: 250-300 emails total
- Day 8+: Begin your actual cold email campaign at 300-400 emails per day
These numbers are conservative on purpose. You're establishing a pattern. A pattern is what keeps you safe.
2. Sending to low-quality or purchased lists
Your cold email provider doesn't know where your list came from. But they can see the results. If your bounce rate is above 5%, or if you're getting spam complaints on 0.5% or more of your sends, they're going to flag it.
Bounces and complaints both signal the same thing to them - that you're either buying lists, scraping lists, or not validating them properly. And that's a liability to their infrastructure.
This is why list quality matters more than list size. A 1,000-person list of decision-makers you actually researched will outperform a 10,000-person list of random emails. And critically, it won't get you suspended.
Your bounce rate needs to stay under 3%. Your complaint rate needs to stay under 0.1%. If you're seeing higher numbers, stop sending and validate your list better.
3. Copy that triggers spam filters - or worse, legal flags
Certain words, phrases, and patterns cause automated systems to increase scrutiny on your account. And some things cause them to shut it down immediately.
Avoid these entirely:
- "Act now" / "Limited time" / "Urgent"
- Multiple exclamation marks in a single email
- ALL CAPS words
- Misleading subject lines (pretending it's a reply, pretending it's internal, pretending you have mutual connections you don't have)
- Anything that looks like a phishing attempt (fake login pages, credential harvesting, impersonation)
Here's an example of copy that looks fine but will get flagged:
Subject: Re: Your Account Hi [Name], I noticed your account might be vulnerable. Click here immediately to secure it. Thanks, John
This triggers three red flags - the fake "Re:" line, the artificial urgency, and the vague security language. It looks like phishing.
Compare it to something straightforward:
Subject: Quick thought on your hiring process Hi [Name], I was looking at your careers page and noticed you're hiring for 3 sales roles. We work with [Industry] companies on reducing their time-to-hire by about 40% through a different screening process. Would a quick call make sense to see if it's relevant? John
This one is direct, specific, and doesn't trigger any alarm bells. It's also actually more likely to get a response.
What Happens When Your Account Gets Suspended
The appeal process varies by provider, but here's generally what you're dealing with:
- You submit an appeal explaining what happened (most providers have a form)
- You wait 5-15 business days for a response
- They either reinstate you or they don't (and rarely explain why if they don't)
- If they don't, you need a new domain and a new account - essentially starting over
The key thing to know: they're not interested in a conversation. They're interested in evidence that you understand what went wrong and won't do it again. So your appeal needs to be specific and honest. "We didn't do anything wrong" doesn't work. "We were warming up too fast and we're implementing X changes to prevent it" works.
How to Stay Off the Suspension List
Prevention is obviously better than dealing with appeals. Here's the checklist:
- Validate your list before you send. Use a tool like NeverBounce or ZeroBounce. Keep bounces under 3%.
- Warm up for a full week using the velocity schedule above. Don't rush it.
- Start your campaign at 300-400 emails per day, not 1,000+. Scale up by 10-15% per week if everything looks clean.
- Monitor your metrics daily. Bounce rate, complaint rate, open rate, reply rate. If anything spikes unexpectedly, stop and investigate before sending more.
- Use straightforward, honest copy. No fake reply lines, no artificial urgency, no deception.
- If you're using multiple domains, never send to overlapping lists. If someone gets two emails from you in the same week from different addresses, that's a pattern that gets noticed.
- Keep your email account's password strong and use two-factor authentication. A compromised account is one of the fastest ways to get suspended.
The reason email providers block accounts in the first place is because they're trying to protect their infrastructure. If you understand that, you understand why these rules exist. It's not arbitrary. It's practical.
When You Should Consider a Different Approach
If you've gotten suspended once, you can recover. If you keep getting suspended, or if you're suspended and the appeals process failed, it might be time to rethink your setup.
Some businesses are better off with a managed approach - where someone else handles the infrastructure, monitoring, list validation, and compliance. Not because they did anything wrong, but because the operational overhead of managing sends properly at scale is significant. You need to monitor daily, adjust velocity, validate lists, and respond to metrics. One mistake and you're back in suspension limbo.