Cold email is outreach to people who have not opted in to hear from you. Relevant, carefully managed outreach can support B2B sales and business development, but poor targeting or sending practices can damage domain reputation, create legal risk, and burn bridges with the people you are trying to reach. Responsible programs require targeting, personalization, current legal review, and sound infrastructure.
Cold Email vs Permission-Based Email Marketing
Cold email and permission-based email marketing are fundamentally different channels that operate under different rules, require different infrastructure, and are measured by different metrics. Conflating them is one of the most common and costly mistakes in outreach.
Permission-based email marketing — newsletters, product updates, promotional campaigns — goes to people who explicitly opted in to hear from you. Cold email goes to people who have not. That distinction matters legally, technically, and strategically. For a full breakdown of permission-based best practices, see our email marketing best practices guide.
The most important practical implication: cold email must run on separate sending infrastructure from your marketing email. If you send cold outreach from the same domain and IP as your newsletter, a spam complaint from a cold prospect can damage the deliverability of your entire marketing program. Use a subdomain (e.g., outreach.yourcompany.com) or a separate domain entirely for cold campaigns.
⚠ Never Mix Cold Email with Marketing Email Infrastructure
Sending cold outreach from the same domain as your newsletter or transactional email puts your entire sending reputation at risk. A single spam complaint from a cold prospect can trigger filtering that affects your permission-based campaigns. Always use a dedicated subdomain or separate domain for cold outreach, with its own SPF, DKIM, and DMARC records.
Legal Review: Rules Vary by Audience and Location
There is no universal rule that makes cold email lawful everywhere. Requirements can depend on where the sender and recipient are located, whether the recipient is an individual or a business, how the address was obtained, and the content and purpose of the message. Verifying that an address can receive mail does not establish consent or another lawful basis for contacting its owner.
United States: CAN-SPAM can apply to business-to-business commercial messages. Review the FTC's current requirements for accurate sender information, non-deceptive subject lines, identifying the message as an advertisement when required, a valid postal address, and a working opt-out process. See the FTC's CAN-SPAM compliance guide.
European Union and United Kingdom: Data-protection and electronic-marketing rules can both apply, and the details differ by country and recipient type. Legitimate interests is a context-specific assessment, not an automatic permission for cold outreach. The UK ICO's business-to-business marketing guidance illustrates the questions senders should evaluate; check the rules that apply in each relevant jurisdiction.
Canada: CASL generally requires consent before sending a commercial electronic message. Whether an exception or time-limited form of implied consent applies is fact-specific. Consult the CRTC's current CASL guidance before sending to Canadian recipients.
Do not treat a short checklist as a substitute for current jurisdiction-specific review. Honor objections and opt-out requests promptly, keep suppression records, and confirm the current official guidance or seek qualified advice for the audiences you intend to contact. This overview is general information, not legal advice.
Building a Targeted Prospect List
The quality of your prospect list determines the ceiling of your cold email results. A smaller, highly targeted list will consistently outperform a large, loosely defined one — in reply rates, in conversion rates, and in deliverability.
Start with a clear Ideal Customer Profile (ICP): the specific type of company and role that gets the most value from what you offer. Define it by industry, company size, geography, technology stack, funding stage, or whatever signals correlate with your best customers. The more specific your ICP, the more relevant your outreach can be.
Common data sources for building prospect lists include LinkedIn Sales Navigator, Apollo, ZoomInfo, and industry-specific databases. Regardless of source, every address should be verified before you send. Invalid addresses bounce, and bounces damage your sender reputation with every campaign.
Use bulk email verification to clean your list before any send. Peopledat currently provides a dashboard upload and export workflow rather than a public real-time API.
Personalization That Actually Works
Personalization in cold email means more than inserting a first name. Every prospect receives dozens of cold emails that open with "Hi [First Name], I noticed you work at [Company]..." That level of personalization is table stakes — it no longer differentiates you.
Research-based personalization is what actually moves the needle. Reference something specific and recent: a funding announcement, a job posting that signals a strategic priority, a piece of content they published, a product launch, or a mutual connection. This kind of specificity signals that you did your homework and that your outreach is relevant to their actual situation.
Trigger events are particularly powerful. A company that just raised a Series B is likely hiring and scaling. A company that just posted five sales roles is probably investing in pipeline. A VP who just started a new job is often evaluating vendors in the first 90 days. These signals make your outreach timely, not just targeted.
The practical constraint is time. Deep research does not scale to thousands of prospects. The solution is tiered personalization: highly customized outreach for your top 50 accounts, semi-personalized templates for the next tier, and broader messaging for the long tail.
Writing Cold Emails That Get Replies
The anatomy of a cold email that gets replies is simple: a subject line that earns the open, an opening line that earns the read, a value proposition that earns the interest, and a call to action that earns the reply. Every word should serve one of those four purposes.
Subject line: Short, specific, and curiosity-driven without being clickbait. Avoid spam trigger words (FREE, GUARANTEED, Act Now), excessive punctuation, and all caps. The best subject lines often look like they came from a colleague, not a marketer.
Opening line: Skip the "I hope this email finds you well." Lead with the specific, research-based observation that makes this email relevant to this person right now.
Value proposition: One sentence on what you do and why it matters to them. Frame it in terms of their problem, not your product features.
CTA: Ask for one specific, low-friction action. "Would it make sense to connect for 15 minutes next week?" outperforms "Let me know if you want to learn more." Make it easy to say yes.
Keep the entire email under 150 words. Longer emails get skimmed or ignored. Brevity signals respect for the recipient's time and forces you to be clear about your value proposition.
Cold Email Deliverability: Protecting Your Domain
Deliverability for cold email requires the same technical foundations as any email program — SPF, DKIM, and DMARC authentication — plus additional precautions specific to cold outreach.
Use a separate sending domain or subdomain for cold outreach. This isolates any reputation damage from cold campaigns and protects your primary domain. Set up full authentication on the sending domain before you send a single email.
Warm up new sending domains gradually. Start with 20–30 emails per day and increase volume over 4–6 weeks. Sending high volumes from a new domain immediately triggers spam filters. Most cold email tools include automated warm-up features — use them.
Keep daily sending volume conservative: 50–100 emails per day per inbox is a reasonable ceiling for most cold outreach tools. Spread sends throughout the day rather than blasting all at once. Monitor bounce rates closely — if hard bounces exceed 2%, pause and clean your list before continuing.
For a deeper technical walkthrough of authentication, reputation management, and inbox placement, see our email deliverability guide.
Follow-Up Sequences: How Many Is Too Many?
Most replies to cold email come from follow-ups, not the initial message. A single email is rarely enough — but a relentless sequence of bumps is a fast path to spam complaints and burned relationships.
A 3–5 touch sequence is the right range for most B2B cold outreach. Space touches 3–5 business days apart. Each follow-up should add value — a relevant case study, a useful resource, a different angle on the value proposition — rather than just asking "Did you see my last email?"
The final touch in a sequence is often a "breakup email" — a short, direct message that acknowledges this is the last outreach and gives the prospect an easy way to re-engage if the timing is ever right. These often generate replies from prospects who were interested but not ready.
When to stop: if a prospect replies asking to be removed, honor that request immediately and apply the suppression requirements that govern your campaign. If they have not replied after a reasonable sequence, move on. Additional messages can increase complaints and waste sending reputation; sequence length does not replace the legal rules that apply to each recipient.
Measuring Cold Email Performance
Cold email is measured differently from marketing email. Open rate is a vanity metric for cold outreach — it is easily gamed and does not correlate with business outcomes. The metrics that matter are:
- Reply rate — total replies divided by emails delivered. A healthy cold email campaign achieves 5–15% reply rate.
- Positive reply rate — replies expressing interest, not just opt-outs or "not interested." This is the real signal of message-market fit.
- Meeting booked rate — the percentage of prospects who convert to a scheduled call or demo. This connects outreach directly to pipeline.
- Bounce rate — keep hard bounces below 2%. Above that, pause and clean your list.
- Spam complaint rate — should be near zero. Any meaningful complaint rate signals a targeting or messaging problem.
Track these metrics by sequence, by segment, and over time. A sequence that performs well for one ICP segment may perform poorly for another. Aggregate numbers hide the signal — break them down to find what is actually working.