Most people buying cold email mailboxes cannot answer a simple question: where did these accounts come from?
You paid a vendor. Mailboxes appeared. They work. That is usually where the curiosity ends, and it is fine right up until the morning they all stop working at once and the vendor’s support channel goes quiet.
This guide is the thirty-second version of that question, turned into six checks you can run yourself today. No tools required, nothing to install, and you do not need to ask your vendor’s permission.
Quick disclosure: we sell email infrastructure, so we have a horse in this race. But the checks below work regardless of who you buy from, including us, and a couple of them are checks you should run on us too.
What a “panel” actually is
Google Workspace Business Starter lists at $8.40 per user per month. A large part of the cold email mailbox market sells Google mailboxes at $2.50 to $3.50.
That gap has to come from somewhere, and there are only two honest explanations. Either the vendor is running on thin partner margins at genuine volume, or the seats did not start life as commercial Business seats.
The second route is what the industry calls a panel. Three licence types make it possible:
- Education seats. Google Workspace for Education is heavily discounted or free for accredited institutions. Someone with access to an institutional agreement splits off seats and sells them.
- Nonprofit seats. Google for Nonprofits provides free or discounted Workspace to registered charities. Same mechanic.
- Legacy free G Suite. Accounts created before Google ended the free tier in 2022, accumulated in pools and resold rather than migrated to paid.
None of these licences permit commercial resale. That is the critical detail, and it is not a grey area: it is written into the education and nonprofit agreements. Which means when Google enforces, it is not a billing dispute. It is a terms violation on an account you do not hold.
The consequence that matters: a direct Google customer who trips a policy gets a notice, a remediation window and an appeal. You get bounces.
This is not theoretical, and it has dates
| When | What happened |
|---|
| October 2025 | Google begins issuing permanent suspensions against non-compliant workspaces, targeting education, nonprofit and legacy free G Suite licences. No warning wave, no appeal path. |
| October 2025 | Postmaster Tools v1 retired. The IP and Domain Reputation dashboards are replaced with a binary Pass/Fail compliance status. |
| November 2025 | Enforcement phase goes live. A “Fail” no longer just routes mail to spam, it allows Google to reject mail outright with 5xx errors. |
| March 2026 | Suspension notices still going out. One user publishes a notice using the word “panel” in the subject, with a hard compliance deadline of May 2, 2026. |
| 2026 onward | Microsoft follows the same trajectory. Basic authentication for SMTP AUTH retired, stricter bulk-sender requirements, tenant-level sending caps. |
Worth pausing on the Postmaster Tools change, because it is the one people miss. The old dashboards let you watch reputation degrade and react. The replacement is binary, and a Fail means outright rejection rather than the spam folder. You lose both the early warning and the soft landing. We wrote about the enforcement wave itself in the Google EDU panel ban.
The six checks
Run these in order. Two or more warning signs and you are almost certainly on panel infrastructure.
| Check | How to run it | Panel warning sign |
|---|
| 1. Admin console | Go to admin.google.com and sign in with your mailbox address | You cannot get in, or you are given a vendor dashboard instead |
| 2. Billing in your name | In the admin console, open Billing and look at the subscription owner | No billing record, or the payer is a company you have never heard of |
| 3. Licence type | Billing > Subscriptions shows the SKU | It reads Education Fundamentals, Nonprofit, or G Suite legacy free edition |
| 4. Price sanity | Compare your per-mailbox price to Google’s list | Under roughly $3 when Business Starter lists at $8.40 |
| 5. Password control | Try resetting a mailbox password yourself | You have to raise a ticket with the vendor |
| 6. Tenant identity | Check the primary domain on the tenant your mailbox sits in | A school, university or charity you have no relationship with |
Check 1 and 2 are the ones that matter
If you only do two things, do these.
Go to admin.google.com and sign in with one of your mailbox addresses. A legitimate setup puts the tenant in your name, and you land in the Google Admin Console. If you are bounced out, or the vendor gives you their own panel instead, the tenant is not yours.
Then open Billing. You are looking for a subscription owned by your company, paid on your card or invoice. If there is no billing record visible, or the payer is an entity you do not recognise, you are a guest inside someone else’s account.
Those two together are the whole test. Everything else is corroboration.
What the licence SKU tells you
If you do have admin access, go to Billing and then Subscriptions and read the product name. You are looking for Google Workspace Business Starter, Standard or Plus. If it says Education Fundamentals, Education Standard, Nonprofit, or G Suite legacy free edition, the seats were not issued for commercial outbound, whatever the vendor told you.
The price test
This one is crude but effective. Google’s own list price is public. A vendor buying at partner rates and adding a margin lands somewhere near it, not at a third of it. If you are paying under roughly $3 per mailbox for Google Workspace, ask directly where the seats come from and get the answer in writing.
To be fair to the category: cheap alone is not proof. Some vendors run genuinely thin margins to win volume. But cheap plus no admin access plus no billing record is not a coincidence.
Legitimate reseller versus panel operator
This distinction gets blurred constantly, usually on purpose. Both are resellers. Only one leaves you as the account holder.
| Legitimate reseller | Panel operator |
|---|
| Licence source | Google Partner Program, standard Business SKUs | Education, nonprofit or legacy seats not licensed for resale |
| Whose tenant | Yours | Theirs |
| Admin console | You get full access | You get a vendor dashboard, or nothing |
| Billing | In your name | In theirs, if it exists at all |
| Typical price | At or near Google list, sometimes a small partner discount | 60 to 80% below list |
| If Google enforces | You are the customer. You get notice and an appeal path | You are not the customer. You find out from bounces |
| Domain portability | You can transfer out | You often cannot |
One thing worth being clear about, because it is a common misconception: there is no such thing as a direct Google mailbox vendor. Only Google provisions Google Workspace. Every vendor in this market is reselling. The question is never whether they resell. It is whose name the tenant is in when something goes wrong. We go deeper on the structural point in our guide to cold email infrastructure.
The Microsoft version of the same problem
Microsoft has the identical structure and it is less well understood.
There are education and nonprofit Microsoft 365 licences with the same resale restrictions. And there is a second variant unique to Microsoft: the Azure tenant setup, where a vendor spins up an Azure or Entra tenant, attaches a domain, and provisions 25 to 100 mailboxes on it rather than buying per-seat licences.
The checks translate directly. Can you reach the Microsoft 365 admin center? Is there a subscription in your company’s name? What SKU is it? If the answer to any of those is no, you are renting space in a tenant you do not control, and a tenant-level block takes every mailbox on it at once.
Microsoft has also been explicit about direction of travel: through March and April 2026 they rolled out tenant-level external recipient caps, and their own documentation states that Exchange Online does not support bulk or high-volume email outside a specific paid offering. Our Outlook comparison covers the practical limits.
You failed the test. Now what?
Do not panic-migrate everything in a day. That is its own deliverability event.
- Ask the vendor directly, in writing. “What licence type are my seats provisioned under, and can you give me admin console access and billing in my company’s name?” The answer, or the absence of one, tells you everything. Keep the email.
- Check whether your domains are portable. If the vendor bought your domains for you, find out today whether you can transfer them out. Domains you do not control are a bigger problem than mailboxes you do not control.
- Stop adding to the exposure. Do not buy more seats on infrastructure you have just discovered you do not own.
- Run a domain reputation check on your sending domains so you have a baseline before anything changes.
- Migrate in tranches, not all at once, and warm the new infrastructure properly. Our domain warming guide covers the ramp. Moving 200 mailboxes to new rails and sending at full volume on day one reproduces the problem you were trying to escape.
- Keep the old mailboxes sending at reduced volume while the new ones warm, if they are still alive. A staged handover protects your pipeline.
How to make this a non-issue permanently
The panel problem exists because the mailbox sits in someone else’s upstream account. There are two ways out.
Buy Google or Microsoft seats directly, in your own tenant, with billing in your name. More expensive, entirely legitimate, and you keep the appeal path. For lower volumes this is a perfectly good answer and we tell people so.
Or move off rented rails entirely. Dedicated SMTP infrastructure has no upstream licence to revoke, because there is no licence. Nobody can suspend your account for a terms violation on an agreement you were never party to. That is what we build, and the honest caveat is that it only works if the provider warms its own IPs, which most do not. We explain why in our piece on dedicated IP vs shared IP, and why teams make the jump in why teams are moving cold email off Google Workspace.
Either way, the thing to stop doing is not knowing.
Frequently asked questions
What is a Google Workspace panel account?
A mailbox provisioned from education, nonprofit or legacy free G Suite licences that were never authorised for commercial resale, sold on through a vendor dashboard rather than provisioned in your own tenant. The seats are cheap because the licence was never meant to be sold.
How do I know if my cold email mailboxes are legitimate?
Sign in at admin.google.com with your mailbox address and open Billing. If you have full admin console access and a subscription in your own company’s name on a standard Business SKU, you are fine. If you cannot get in, or the payer is someone else, the tenant is not yours.
Is buying cheap Google Workspace mailboxes illegal?
It is not a criminal matter, but reselling education and nonprofit licences for commercial outbound breaches Google’s terms. The practical risk is not legal, it is that Google can suspend the underlying account with no notice and no appeal available to you, because you are not the account holder.
Why are panel mailboxes so much cheaper?
Google Workspace Business Starter lists at $8.40 per user per month. Panel mailboxes sell at $2.50 to $3.50. The difference comes from licences issued at institutional or nonprofit rates, or free legacy accounts, rather than from commercial volume discounts.
What happened with the Google EDU panel bans?
Google began permanently suspending non-compliant workspaces in October 2025, targeting exactly these licence types, with no warning wave and no appeal path. Enforcement was still issuing notices in March 2026, one of which carried a compliance deadline of May 2, 2026.
Does Microsoft have the same problem?
Yes, in two forms: education and nonprofit Microsoft 365 licences with the same resale restrictions, and Azure tenant setups where a vendor provisions 25 to 100 mailboxes inside a tenant they control. The same admin-access and billing checks apply.
Can I move my domains if my provider is using panels?
Only if you own them. If the vendor bought your domains on your behalf, check today whether they will transfer them out. Some will not, and domains you cannot move are a worse problem than mailboxes you cannot keep.
Run the check, then decide
Two minutes at admin.google.com will tell you more about your cold email risk than any vendor comparison page, including ours.
If you run it and do not like what you find, we are happy to talk through options, including the ones that are not us. Book a free deliverability consult, or start on Lite at $50 a month and test a slice of your volume against what you have now.
.svg)
.svg)
