Email blast platform: how to send a safe first blast, step by step
Published Updated 17 min readBy the Rasket team
Written for e-commerce teams, beginners and small business owners

To send an email blast safely, mail only people who agreed to hear from you, from a verified domain, in small first batches, with a one-click unsubscribe, and read the complaints after every send. An email blast platform is the software that does this: it keeps your list with each person’s consent, sends everyone their own copy, and reports bounces, complaints and unsubscribes.
Say your online shop is about to announce its first ever sale by email. The store’s customer export holds about 2,000 addresses, and the quickest plan is a mass email from your own mailbox with everyone in BCC. The risk is the list, not the offer: some of those customers never agreed to marketing, some addresses are dead, and one bad send can push your order confirmations into spam with it. What follows is the safer route. (No list yet? The double opt-in post shows how to collect one.)
What is an email blast platform?
Platforms call one blast a campaign; Rasket’s API calls the same thing a broadcast. The platform matters because Gmail, Yahoo and Outlook decide where each message lands from your sending domain’s reputation (their record of how readers treated its past mail), what the message contains, and how that reader has treated your mail before. A blast feeds thousands of those judgements into your domain in an hour, so four habits damage it fast:
| What goes wrong | Why it hurts | What prevents it |
|---|---|---|
| A cold list | Old addresses bounce, abandoned ones have become spam traps, and people who forgot signing up press Report spam. | Mail only people who opted in, and stop mailing the ones who stopped reading. |
| Too much, too soon | A domain with no history that suddenly sends thousands of messages looks like a spammer's new domain. | Send to your most engaged customers first and widen the audience over days. |
| No easy way out | A reader who cannot leave reports the message as spam instead, which costs far more than losing them. | One-click unsubscribe and a visible link in every message. |
| Nobody watching complaints | Complaints build up across sends; by the time inbox placement drops, the damage is weeks old. | Read the complaint figures after every send and stop when they rise. |
A spam trap is an address no person reads: created as bait, or an abandoned mailbox a provider has repurposed. Mail to one tells the provider your list was bought, scraped or never cleaned.
The one rule with no exception
Never send a blast to a bought, rented or scraped list. Those people never asked to hear from you, so such a list produces every problem in the table above at once. Google’s sender guidelines say “Don’t purchase email addresses from other companies”, Yahoo’s say “Don’t purchase mailing lists”, and Rasket’s acceptable use forbids sending to purchased, rented, shared, scraped or harvested lists. No setting, warm-up or platform makes such a list safe.
What do Gmail, Yahoo and Outlook require before a blast?
Google counts you as a bulk sender once you send close to 5,000 messages or more in 24 hours to personal Gmail accounts, counted across your primary domain, and its FAQ says the status is permanent, so one big seasonal blast keeps you under the stricter rules for good. Microsoft draws a 5,000-message line for Outlook.com, Hotmail and Live addresses and can reject mail that fails its checks. Google demands all four below only of bulk senders, but meet them at any size; each has a guide of its own:
- Authenticate the domain. Your domain is the part after the @ in your address, such as
yourshop.com. Its settings page, usually where you bought it, holds short public text entries that mail servers look up: the DNS records. SPF is the guest list of servers allowed to send for you, DKIM a seal on each message that proves it came from you unaltered, and DMARC your instruction for mail that fails both. For you it comes down to one check in step 7: the seal must carry your domain, not the platform’s. The DKIM, SPF and DMARC post shows each record. - Offer one-click unsubscribe. Two hidden lines at the top of the email (headers) let Gmail, Yahoo or Outlook show its own Unsubscribe button. Your platform should add them for you; keep a visible link in the body too. Yahoo asks bulk senders to honour unsubscribes within 2 days (the one-click unsubscribe guide).
- Keep spam complaints rare. Google’s target is under 0.1% of the mail that reached the inbox, about one report per 1,000, and never 0.3%. The spam complaint rate guide explains how each provider counts it.
- Send steadily, and only to people who signed up. Google asks senders to “send email at a consistent rate” and not “send messages to people who didn’t sign up to get messages from you.”
The law adds a postal address and a working opt-out in the United States (step 2), and consent rules elsewhere (past customers, below). The bulk sender requirements guide compares the three providers line by line.
How to send a safe first blast, step by step
Each step starts with what any platform needs, then where to click in Rasket where that is the next step; none of it needs code. Steps 1 to 4 are done once, 5 to 9 for every blast.
1. Verify your sending domain, then add DMARC
Providers trust mail signed by a domain that has proved it is yours, and you can do this without an IT person. In Rasket, go to Domains and click Add domain. You don’t need to know who runs your DNS: the page works it out and shows that company’s own instructions, with a one-button connect for Cloudflare and the domain sellers that support it. Otherwise you copy each record into the DNS settings where you bought the domain; changes often show within minutes and the domains documentation allows up to an hour. Once sending is verified, the same page offers a guided DMARC record. Publish it with p=none (monitor only), the minimum the three providers accept, and tighten it later as the DMARC guide describes.
Do your order emails share this domain? On Shopify, go to Settings → Notifications and click Email domain authentication under Sender email. If it says Authenticated, they go from your domain; if not, Shopify rewrites the sender to a shopifyemail.com address and a blast from your domain can’t touch them. If they share it, a bad blast can hurt your order emails and your own day-to-day emails from that domain too. A few hundred campaign emails a month can still go from news@yourshop.com; at thousands, send from a subdomain, a name you create under your own such as news.yourshop.com. It keeps most of the risk away from receipts, though not all, as the marketing subdomain guide explains.
Already use Google Workspace or Microsoft 365 for your mailboxes? Rasket’s sending records sit on names of their own (a subdomain for bounces and the DKIM keys), so they leave the SPF record your mailboxes use alone. If your domain already has a DMARC record, keep it; Rasket only offers one when none applies.
Order emails share the monthly allowance
If Rasket sends your order emails too, they draw on the same monthly emails as campaigns. On a paid plan with a card on file, pay-as-you-go is on unless someone switched it off under Settings → Usage, so emails past the plan cost $0.60 per 1,000 on Pro. With it off, a blast that uses up the month leaves order emails refused until it resets.
2. Add your postal address
US law (CAN-SPAM) requires a valid postal address in every commercial email. The FTC accepts a post office box registered with the US Postal Service, or a private mailbox at a commercial mail receiving agency, so a business run from home need not print its street address. In Rasket, go to Settings → Sender, fill in Postal address and click Save. Every campaign footer prints it, and Rasket won’t send a campaign without it.
3. Create a topic for this kind of mail
A topic is what people agreed to receive, such as “Sales”; a segment, in step 5, is who you pick for one send. With topics, someone who leaves your sale emails keeps the newsletter they still want instead of reporting both as spam. A new topic should reach nobody until people are put on it, which the import in step 4 does for those who agreed. In Rasket, go to Audience → Topics, click Create topic, leave Default subscription at Opted out for that reason, and set Visibility to Public so readers see it on the preference page Rasket hosts.
4. Import only the customers who agreed
Only people who said yes to marketing go in. In Shopify, go to Customers and click Export. The file has an Accepts Email Marketing column (yes or no) and a Total Orders column, according to Shopify’s help. Delete the “no” rows and keep Total Orders for step 5. Rasket for Shopify, listed as coming soon, will bring that consent over by itself. Until then, export again before each later blast and import only the new “yes” rows; people who unsubscribe from a blast do it through Rasket’s link, so Rasket already has them.
From a booking system, a till or a spreadsheet, any CSV works: you need an email column and a yes or no for marketing consent, often a column called something like “Marketing OK” or “Newsletter” from a tick box on the booking form. If your system never recorded consent, don’t guess: leave those people out, ask at the next booking or on the next invoice, and read past customers below for what your country allows. Coming from another email tool? Map its unsubscribed column to Unsubscribed? (yes / no), so people who left there stay unsubscribed here.
In Rasket, go to Audience, open Add contacts, choose Import a file and match each column to a field. A column saying where and when each person signed up is kept on the contact, as your record if anyone asks.
Check the file before you pick a topic
Under Put them on a topic, everyone in the file who isn’t marked unsubscribed is opted in to the topic you pick. A file that still holds the “no” rows signs those people up for your blast, so delete them first or leave it at No topic.
Click Start the import; it sends nothing. From then on, hard bounces (addresses that don’t exist) and spam complaints go on your suppression list, the list of addresses Rasket will not mail again, automatically.
5. Pick a small first audience and ramp up
Start with the people most likely to want the email: repeat buyers open the most and complain the least. In Rasket, go to Audience → Segments, click Create segment and filter on Total Orders of 2 or more; the count under the filter shows how many match. Too many for day 1? Raise the bar to 3 or more orders. Too few? Add one-order customers next.
No mailbox provider publishes a schedule. As an illustration for a 2,000-person list (ours, not a rule): about 150 repeat buyers on day 1, 250 on day 2, 400 on day 3, 600 on day 4 and the last 600 on day 5, stepping up only if bounces and complaints stayed flat. A list of a few hundred can go in two sends: your repeat buyers, then everyone else a day later. That is the shape the warm-up guide describes: engaged people first, each step well short of doubling. If the sale starts Friday, begin on Monday with an early-access email to your best customers, so the warm-up reads as a perk. A new Rasket account also starts on low sending limits, raised once your email address and domain are verified and a payment method is on file.
6. Create the campaign
People report mail as spam when they don’t recognise the sender, so send under the shop name on their receipts and open with one line saying why they are hearing from you (“You bought from us last spring and said yes to news”). In Rasket, go to Campaigns, click Create campaign, and fill in Details (Subject and Preview text are what readers see) and Sender. Under Audience and content, pick the Segment and Topic, then click Change next to Template for a drag-and-drop design you published in Templates, or a starter whose placeholders, such as [Shop URL], you replace. Click Create draft; nothing is sent.
The Variables button inserts details such as {{{FIRST_NAME|there}}}: the customer’s first name, or “there” when you don’t have one. Without an unsubscribe link of your own, Rasket adds a footer with one and your postal address. Click Save draft.
7. Send yourself a test and check it passed authentication
Click Test email, enter your own Gmail and Outlook addresses and click Send test. Check the sender name, every link and the first-name fallback on a phone. In Gmail, open the test, click More (the three dots next to Reply) and choose Show original. A test that passed shows three lines like these near the top:
SPF: PASS with IP 192.0.2.10
DKIM: 'PASS' with domain news.yourshop.com
DMARC: 'PASS'The domain after DKIM must be yours (yourshop.com or a subdomain of it), not the platform’s. Fix any FAIL before anyone else gets the email.
8. Review, then send or schedule
Click Review. Before you send checks the sending domain, postal address, segment, body and saved draft, plus content checks such as a dead link or a variable that would print empty; a failing row links to its fix. Then drag Slide to send, or click When beside the To field, set Send at and click Schedule. Recipients are worked out when the send starts, so anyone who unsubscribes meanwhile is skipped.
9. Read the report before you widen
Click View report on the campaign. Delivered means the receiving server accepted the email, not that it reached the inbox. Opens overstate reading, because Apple Mail can load every image in advance (the inactive subscribers guide explains), so judge a step on clicks and orders. To see orders, add utm_source=email and a campaign name to your links, and your shop’s analytics will credit the sale.
Small steps need counts, not percentages. On a step of 150 people, one complaint is already 0.67%, far above Google’s 0.1% target. Our rule for a first ramp: step up only with zero complaints and fewer than 2 hard bounces per 100 sent. The report’s Bounced tab has a Bounce type column: permanent is a hard bounce (the address doesn’t exist), transient a soft one (a full mailbox, or a server turning mail away for now). One complaint means read who it was and why before widening; more than that means stop and clean the list. Rasket’s sending standards list the rates at which we warn you and then limit sending.
Expect a sale email to land in Gmail’s Promotions tab. That is part of the inbox, not spam, and Google describes offers as what the tab is for, so don’t try to dodge it (the Promotions guide).
What do you do if complaints spike during a send?
Stop it. Rasket has no pause button: open the campaign and click Cancel campaign while it is Scheduled, Queued or Sending. It stops at the next page of recipients, emails already created still go out, and it can’t be restarted; Duplicate in the row’s menu on the Campaigns list copies it for later. Then find the cause:
- Who: the report’s Complained tab lists them, already suppressed.
- How many: Metrics charts Complaint rate, filterable by sending domain, from the complaints providers report back. Gmail never says which person complained, so for Gmail readers that figure runs low; Gmail’s own number is in Google Postmaster Tools.
- Delays: if Delivery delayed climbs in Metrics, providers are slowing you down. Delays that clear within hours usually mean pacing of sudden volume; delays that grow with each send, or end as bounces, mean look at reputation. Either way, send smaller segments over more days.
- Blocklists: read the bounce message first, since a blocklist rejection usually names the list. Spamhaus has a free domain reputation checker. If the listing is for a shared sending address rather than your domain, it is your provider’s to fix, so tell their support.
The usual cause is the audience, not the wording: an old segment, people who never opted in, or a topic they didn’t choose.
How do you tell if a list is too old to send to?
Ask two questions of every address: when did this person last agree to hear from you, and when did they last click, buy or reply? M3AAWG, the email industry’s anti-abuse working group, counts “not mailing to the addresses in a year or more” as a mark of a dirty list. If you can’t answer the first question for an address, leave it out. If the person has done nothing for a year, send one small re-engagement email and stop mailing those who ignore it. Never test a stale list with a big blast; that is how spam traps get hit.
Can you email past customers who never subscribed?
It depends on where they live; this is a summary, not legal advice.
- United States. The FTC’s CAN-SPAM guide does not require permission before the first commercial email. It requires accurate sender details and subject lines, a clear sign that the message is an ad, your postal address, and an opt-out that works for at least 30 days after the send and is honoured within 10 business days.
- EU and UK. Marketing email to individuals needs consent, apart from the narrow “soft opt-in”: you got the address while selling them something, told them then that you would email them and let them refuse, the email is about your own similar products, and every email offers a free way out. Countries differ in the detail.
- Canada. Canada’s Anti-Spam Legislation treats a purchase in the previous two years as an existing business relationship, which gives implied consent for that period.
Legal is not the same as wanted: Google asks you not to mail people who did not sign up, whatever your law allows, and people who never chose your emails complain more. Where the law allows it, put only recent buyers on a topic, send them one campaign that says why they are hearing from you, and drop anyone who ignores it. The marketing email guide quotes each region’s rules.
What does a blast to 2,000 people cost on Rasket?
Take 2,000 contacts and one blast a month: 2,000 emails. The Free plan is for smaller lists (it holds 900 contacts and sends 100 emails a day, campaigns included). The cheapest plan that fits is Pro at $20 a month, with 4,500 contacts and 50,000 emails a month; a weekly blast to the same list, up to 10,000 emails a month, costs the same $20. Paid yearly, it works out at $16 a month. The pricing page prices other list sizes.
Which email blast service should you trust with your list?
Whichever email blast service you are weighing, a free plan or trial answers these:
- Consent: does it record how each contact opted in, and send only to people who chose that kind of mail?
- Unsubscribe: does a test’s Show original list both unsubscribe headers, with a body link you can’t delete by accident?
- Your own domain: does it sign with your domain’s DKIM, not one shared among its customers?
- Complaints: does the report show complaints per campaign, not only opens and clicks?
- Pricing: contacts, emails sent, or both? Contact pricing favours a small list mailed often, per-email pricing a big list mailed rarely. Do unsubscribed people still count?
- Editor: can someone who doesn’t write HTML build the email by dragging blocks?
We wrote this list, so weigh our own answers with that in mind. Rasket covers consent, unsubscribe, your own DKIM, per-campaign complaints and contact-plus-email pricing. Four gaps matter for a blast. Segments filter on contact fields, properties and topics, not on opens or clicks, so “engaged” means order data you import or a click tag an automation sets (the email marketing software post shows how). There is no A/B testing. Complaints are not split by Gmail, Yahoo and Microsoft. And there is no per-provider speed setting; you pace a blast with segments and schedules, as in step 5. A campaign can be built without HTML, from a published template or a starter.
When Rasket is not the right tool: if your shop platform’s own email feature already sends from your authenticated domain (the check in step 1) and you need none of those four, stay with it and run the steps above there. If you need A/B tests or segments built on opens and clicks, pick a platform that has them.
For developers: the same campaign in one API call
To send bulk email from code instead, a campaign is the broadcasts resource. This call creates the draft from step 6. Set RASKET_API_KEY, set SEGMENT_ID and TOPIC_ID to IDs from Audience, and change from to an address on your verified domain. Every request needs a User-Agent naming your app.
curl -X POST https://api.rasket.com/broadcasts \
-H "Authorization: Bearer $RASKET_API_KEY" \
-H "User-Agent: acme-news/1.0" \
-H "Content-Type: application/json" \
-d '{
"name": "Autumn sale, first segment",
"segment_id": "'"$SEGMENT_ID"'",
"topic_id": "'"$TOPIC_ID"'",
"from": "Acme <news@news.acme.example>",
"subject": "The autumn sale starts Monday",
"html": "<p>Hi {{{FIRST_NAME|there}}},</p><p>Everything in the shop is cheaper for a week.</p><p><a href=\"{{{UNSUBSCRIBE_URL}}}\">Unsubscribe</a></p>"
}'It answers 201 with the draft’s id. To send it, call POST /broadcasts/{id}/send, optionally with scheduled_at; or put "send": true in the create call. Either runs the same gate as Review: a missing condition is a 422 naming it (a 403 if your team cannot send), and a failing content check is a 422 unless you pass "acknowledge_checks": true, which an automated sender should leave to a person. POST /broadcasts/{id}/cancel stops a send, GET /broadcasts/{id}/recipients?type=complained lists who complained, and email.complained and email.bounced webhooks fire per recipient. The broadcasts reference and the newsletter API post cover the rest.
Frequently asked questions
Can I send an email blast from Gmail or Outlook using BCC?
For a handful of people, yes; for a list, it is the wrong tool. A personal mailbox has a daily sending limit set by its provider, adds no one-click unsubscribe headers, keeps no record of who opted out, and puts the address you use every day behind every copy, so each spam report counts against it.
How fast should a large blast go out, and can I stagger it by provider?
Steadily, without bursts. Most platforms decide the moment-to-moment pace themselves; what you control is the size and timing of each send. For a big list, split it into segments and schedule them over several days, most engaged first, and slow down if Delivery delayed rises in your report.
Do I need Google Postmaster Tools with only 2,000 contacts?
Set it up anyway: it is free, and it is the only place you see Gmail's spam rate for your domain, the one number your own report cannot show. Google says its dashboards may leave out data on days your volume is low, so a small shop may see gaps. The Postmaster Tools guide walks through adding and verifying the domain.
Do I need double opt-in for a blast list?
Few laws require it by name, but it is the strongest evidence that a person asked for your mail: they confirmed by clicking a link sent to that address. It also keeps typos, fake sign-ups and spam traps off the list. The double opt-in post explains how it works and when it is worth the lost sign-ups.
How often can I send a blast to the same list?
No provider sets a number. Send as often as you told people you would when they signed up, and keep the rhythm steady: a list that hears from you monthly and then gets a blast every day of a sale will complain more. If unsubscribes or complaints climb after you send more often, go back to the old rhythm.
What does a good first sale email look like?
Short. A subject that names the offer and the date, such as 'The autumn sale starts Monday'; preview text that adds one fact; a first line saying why they are hearing from you; the offer in two or three sentences; one button to the shop; and the footer with your postal address and an unsubscribe link. One message and one button make the clicks you judge the next step by easy to read.
Sources
- Email sender guidelines — Google, read 2026-10-17
- Sender Best Practices — Yahoo, read 2026-10-17
- Email sender guidelines FAQ — Google, read 2026-10-17
- Fix NDR error 550 5.7.515 in Outlook.com — Microsoft, read 2026-10-17
- CAN-SPAM Act: A Compliance Guide for Business — Federal Trade Commission, read 2026-10-17
- Canada's Anti-Spam Legislation (S.C. 2010, c. 23), full text — Justice Laws Website, Government of Canada, read 2026-10-17
- M3AAWG Sender Best Common Practices, Version 4.0 (August 2026) — M3AAWG, read 2026-10-17
- Import and export customers — Shopify, read 2026-10-17
- Setting up your email — Shopify, read 2026-10-17
- Domain reputation — Spamhaus, read 2026-10-17
Related
- How to lower your email spam complaint rate — What a good email spam complaint rate is, how Gmail and Yahoo measure it, how to read it on a small list, and the steps that bring it down.
- How to warm up a new domain or IP address — How to warm up a new domain or IP: what Gmail, Microsoft, Yahoo and M3AAWG publish, schedules from 300 contacts to 50,000 a day, and when to slow down.
- Should you use an email subdomain for marketing? — When a marketing subdomain like news.example.com is worth it, by volume: what it separates from your domain, what it shares, and the DMARC and DNS records.
- Email list cleaning: sunset inactive subscribers — Define inactive subscribers when Apple inflates opens, spot scanner clicks, run a re-engagement flow, and sunset the rest without blocking their receipts.
- Google Postmaster Tools, explained — What Google Postmaster Tools shows, how to set it up, what each v2 dashboard means, how to query its API, and what to use when the charts stay empty.
- Campaigns — An audience you own: contacts with typed properties, segments, topics people subscribe to, and campaigns sent through the same pipeline as your other mail.
- Newsletter API: send campaigns from your code — Send a newsletter from code or an AI agent: contact, segment, draft, test, human approval, then send. Runnable Node scripts and the MCP flow, with real output.
- Double opt in email: how it works and why — How a double opt in email works and why it pays: the confirmation email, a link scanners can't trip, what to send after the click, and the law.