Picture a head of operations at a growing logistics company opening her inbox on Monday morning. The first cold email begins: "Hi {FirstName}, I hope this email finds you well. I'm reaching out from a leading provider of innovative solutions that help companies like yours unlock efficiency." She deletes it without reading the rest. The second begins: "Saw your team is hiring three dispatch coordinators in Leeds. When we worked with a similar-sized carrier last year, most of their dispatch overtime came from one manual step in route changes. Worth a two-line summary of what we found?" She replies before her coffee cools.
Both were cold emails, sent to a stranger, asking for attention. The difference is that the first could have been sent to anyone, and the second could only have been sent to her. That's the whole game. A cold email that could have been sent to anyone will be ignored by everyone. This guide covers how to structure emails that earn replies, how to personalise in ways that actually matter, how to follow up, how to stay out of the spam folder, and how to stay within the rules in the markets you're likely to email.
This is general information for marketers, not legal advice. Rules on unsolicited commercial email differ by country and by whether the recipient is a business or an individual, and they change. Take legal advice for the markets you contact. Wider deliverability is covered in email deliverability.
What cold email is, and what it isn't
Cold email, as covered here, means individual, relevant outreach from one business to a person at another business who hasn't asked to hear from you, usually to start a sales, partnership or hiring conversation. It isn't indiscriminate bulk marketing to consumers who never signed up. Consent rules vary by jurisdiction and recipient type: the US allows it under CAN-SPAM's conditions, others often require prior consent for individuals, and some B2B outreach is allowed without consent under specific conditions. Either way, it's a fast route to the spam folder. The distinction matters: good cold email looks and feels like a thoughtful note from one professional to another, sent to a small, carefully chosen list, and it's easy to decline.
It works best as part of a wider approach rather than a standalone blast. Target accounts identified through account-based marketing, prospects showing signs of interest through intent data, and follow-up that feeds the rest of the B2B lead generation playbook all make cold email far more effective.
The anatomy of a cold email that gets replies
Most effective cold emails share the same six parts, in roughly the same order, and fit comfortably on a phone screen.
| Part | Its job | Common mistake |
|---|---|---|
| Subject line | Signal relevance, honestly, in a few words | Clickbait or false "Re:" threads |
| Opening line | Show why you're writing to this person | "I hope this finds you well" |
| Relevance | Connect to a real priority or problem | Talking about your company first |
| Value | Offer an insight, example or proof | A list of features |
| The ask | One small, easy-to-answer request | "Can we book 45 minutes?" |
| Sign-off and opt-out | Real identity and an easy way to decline | No way to say no |
Subject lines should be short, specific and truthful: "Dispatch overtime at [Company]" or "Question about your Leeds expansion". Avoid fake "Re:" or "Fwd:" prefixes, which mislead recipients and can breach anti-spam rules. The principles are covered in writing subject lines that get opened. The opening line is the most important sentence: it should prove, immediately, that this email is about the recipient. Relevance and value together should take two or three sentences at most. And the ask should be small: a question that can be answered with a yes, a no or a one-line reply. A request for a 45-minute call from a stranger is a big ask; "Worth sending a two-line summary?" is not.
A worked example
Here's an illustrative first email built on that structure, from a fictional scheduling-software company to a logistics business; the names, details and result are invented.
It's about 100 words, including the signature. It opens with something specific to her company, connects it to a likely problem, offers a concrete, credible example, asks for something tiny, identifies the sender properly with a physical address, and makes declining effortless. There's no attachment, one short link at most if any, and no marketing language. Notice that the result, illustrative here, is specific enough to be interesting but framed as one customer's experience, not a guarantee. Only cite results you can verify.
Moosend
Budget-friendly email marketing platform with powerful automation and great deliverability
Best for: Affordable Email Marketing
Personalisation that actually matters
"Personalisation" in cold email often means inserting a first name and a company name into a template. Recipients see through that instantly. Real personalisation shows you've thought about their situation. Three levels are worth distinguishing:
- Surface personalisation: name, company, job title. Necessary, but it persuades no one on its own.
- Situational personalisation: a real trigger, such as hiring, a new office, a product launch, funding, a leadership change, a new regulation affecting their sector, or something they said publicly. This is what earns attention.
- Problem personalisation: connecting that trigger to a likely challenge for someone in their role, and offering something useful about it. This is what earns replies.
You don't need to research every prospect for twenty minutes. A practical approach is to personalise the opening line and the relevance sentence for each person, keep the value and the ask consistent within a segment, and group prospects by shared situation, such as "logistics firms that are hiring dispatchers", so research effort goes further.
AI tools can help find triggers and draft first versions, but they also make it easy to send thousands of emails that sound personal and aren't. Recipients are increasingly good at spotting generic AI phrasing, a problem explored in prompt templates for marketers, where reusable templates with real inputs are the antidote. Fully automated outreach raises its own questions, covered in what autonomous prospecting means for marketers. Always have a human read before sending.
The principle A cold email that could have been sent to anyone will be ignored by everyone. The goal is an email that could only have been sent to this person: relevant, short, useful and easy to say no to.
Why smaller, better lists win
The instinct with cold email is to send more. But volume without relevance hurts twice: fewer replies, and more spam complaints, which damage your ability to reach anyone's inbox at all.
→ Generic: 1,000 emails, 1% reply = 10 replies. 0.5% mark it as spam = 5 complaints.
→ Targeted: 250 emails, 6% reply = 15 replies. 0.1% mark it as spam = fewer than 1 complaint.
A quarter of the emails, 50% more replies, and a far lower complaint rate.
Why complaints matter: Google's guidance for senders is to keep the reported spam rate below 0.1% and avoid reaching 0.3%. The generic campaign's 0.5% is above both, which raises the risk of your emails, including legitimate ones, landing in spam.
Rates vary widely by market, offer and list quality. Track your own reply and complaint rates by segment.
Follow up with something new
Many replies come after a follow-up, because busy people often mean to respond and forget. But "Just bumping this to the top of your inbox" adds nothing. A good sequence adds value each time:
- Day 1: the first email.
- Around day 4: a short follow-up with a new, useful detail: a relevant insight, a one-line result, or a question that reframes the problem.
- Around day 9: a different angle, for example a second use case or a useful resource, with no pressure.
- Around day 16: a brief close-the-loop message: "I'll assume the timing isn't right and won't follow up again. If it becomes relevant, just reply."
Here's what the day-4 follow-up to Priya might look like:
Reply in the same thread so context stays visible. Stop immediately if someone replies, asks to be removed or says no, and make sure every opt-out is honoured across all your tools. Longer sequences mostly add complaints, not replies. Keep contact records clean so nobody is emailed twice or after opting out, following CRM data hygiene.
Handle every reply well
A reply is the start of a conversation, not a closed deal, and how you respond matters as much as the first email. "Yes, send it": deliver exactly what you promised, promptly and briefly, and only then suggest a next step. "Not now": thank them, ask when might be better, and set a reminder rather than adding them back into a sequence. "Wrong person": thank them and, if they offer, ask who the right person is, then mention the referral in your next email. "No" or "remove me": confirm briefly, remove them everywhere, and don't argue. Every reply, including a polite no, is also useful information about your targeting and message.
Stay out of the spam folder
Cold email is judged harshly by mailbox providers, so the technical basics are non-negotiable.
- Authenticate your domain with SPF, DKIM and DMARC, explained in SPF, DKIM and DMARC explained.
- Consider a separate domain or subdomain for outreach, so any problems don't affect your main business email.
- Increase volume gradually on new inboxes and domains, as Google advises, and keep daily volume per inbox modest. Artificial warm-up or engagement networks that trade automated opens aren't required and can't guarantee inbox placement; genuine engagement, low complaints and clean data matter more.
- Verify addresses before sending to keep bounces low; high bounce rates are a strong spam signal.
- Write plain, simple emails: few links, no attachments or heavy images on first contact, no misleading subject lines.
- Watch complaint and bounce rates weekly, including in Google's Postmaster Tools, and pause if they rise.
Why legitimate senders still land in spam, and how reputation is built, is covered in sender reputation in 2026.
The rules, market by market
United States. The CAN-SPAM Act doesn't require prior consent for commercial email, including to business addresses, but, per the FTC's compliance guide, it requires accurate header information, subject lines that aren't deceptive, a clear disclosure that the message is an ad, a valid physical postal address, a clear way to opt out, and opt-outs honoured within 10 business days. Each violating email can draw penalties of up to $53,088. Its pre-emption is limited: it supersedes state laws expressly regulating commercial email, but not those prohibiting falsity or deception, which remain relevant.
United Kingdom. Under the Privacy and Electronic Communications Regulations, as the ICO's direct marketing guidance explains, emailing corporate addresses for business purposes is generally permitted without prior consent, provided you identify yourself and offer an easy opt-out. Individual subscribers, including sole traders and some partnerships, generally need to have consented. UK GDPR also applies to handling people's personal data, which usually means documenting a legitimate interest, being transparent about where you got the data and honouring objections. Recent UK legislation has also raised the maximum penalties for breaching these rules.
European Union. Rules vary by country. Some member states treat business-to-business email relatively permissively; others require prior consent even for business addresses. GDPR applies to the personal data involved everywhere. The fundamentals are covered in GDPR and CCPA for marketers.
Canada. Canada's anti-spam law, CASL, is among the strictest. It generally requires express or implied consent before sending commercial email. Implied consent from a published business address applies only if all the Act's conditions are met: the recipient conspicuously published it, or had it published; the publication doesn't say they don't want unsolicited commercial messages; and your email is relevant to their business, role, functions or duties. Finding an address on a website isn't enough, and since the sender must prove consent, keep evidence of where each address was published. Messages must also identify the sender and include an unsubscribe mechanism, as the CRTC's CASL guidance explains.
India. The main substantive provisions of India's DPDP Act are scheduled to commence on 13 May 2027, so they aren't yet in force. Under the Act, a named person's work email can be personal data, and there's no broad legitimate-interest basis, so consent is likely to be central for much marketing outreach once it applies. That isn't a blanket ban on cold email, and other Indian laws on data and electronic communications may also apply, so take advice and plan now, as covered in India's DPDP Rules at one year.
Across all markets, the same practical habits keep you on safe ground: target businesses rather than consumers, be relevant to the person's role, identify yourself honestly, include a physical address, make opting out easy, honour it promptly everywhere, and keep records of where each contact came from.
Measure what matters
Open rates are unreliable because of privacy features in email apps, so judge cold email on what happens after the open. Track reply rate, positive reply rate, meetings or conversations booked, bounce rate and spam complaints, by segment and by message. Test one thing at a time, such as the opening line, the value point or the ask, and run each version to enough people to see a real difference. And connect outreach to pipeline, so you know which segments and messages actually lead to revenue. Teams that want outreach sequences, deliverability and follow-up flows built properly often work with a specialist email marketing automation team.
The short version
A cold email that could have been sent to anyone will be ignored by everyone. Good cold email is individual, relevant outreach from one business to a person at another, not bulk marketing to consumers. Structure it in six parts: an honest, specific subject line; an opening line that proves it's about the recipient; a sentence of relevance; one concrete point of value; a small, easy-to-answer ask; and a real sign-off with a physical address and an easy way to decline, all in under about 125 words. Personalise the situation and the problem, not just the name, and use AI to help research and draft but never to replace thought. Smaller, targeted lists beat large generic ones on replies and draw far fewer complaints, in line with Google's guidance (spam rate below 0.1%, avoid reaching 0.3%). Follow up two or three times with something new each time, then stop. Authenticate your domain, increase volume gradually, verify addresses and keep emails plain. Follow the rules where your recipients are: CAN-SPAM in the US, PECR and UK GDPR in the UK, national rules plus GDPR in the EU, CASL in Canada, and, from 13 May 2027, the DPDP Act in India. Measure replies, meetings and pipeline, not opens.
Want cold outreach that earns replies, not complaints?
We build compliant outreach and follow-up flows that start real conversations.
Explore Email Marketing Automation →Frequently asked questions
Is cold email legal?
It depends on where the recipient is and whether they are a business or a consumer. In the United States, the CAN-SPAM Act allows commercial email without prior consent, including to business addresses, as long as senders use accurate header information and honest subject lines, identify the message as an ad, include a valid physical postal address, provide a clear way to opt out, and honour opt-outs within 10 business days. In the UK, emailing corporate addresses for business purposes is generally permitted under the Privacy and Electronic Communications Regulations with clear identification and an easy opt-out, but individual addresses, including those of sole traders and some partnerships, generally need consent, and UK GDPR applies to handling people's data. Rules across the EU vary, and some countries require consent even for business addresses. Canada's anti-spam law generally requires express or implied consent, and implied consent from a published address is narrow and must be provable. In India, the DPDP Act's main obligations are scheduled to apply from 13 May 2027; under it, a named person's work email can be personal data. This is general information, not legal advice.
How long should a cold email be?
Short enough to read in a few seconds on a phone, which usually means somewhere between 50 and 125 words. A cold email is asking a stranger for a small amount of attention, so every sentence should earn its place: a clear reason for writing to this specific person, a relevant point of value, and one simple, easy-to-answer request. Long introductions about your company, lists of features and multiple calls to action all reduce the chance of a reply. If you need to share more detail, offer it rather than including it, for example by asking whether a short case study would be useful. Keep formatting plain, avoid heavy images and multiple links, and write the way you would to a respected colleague rather than in marketing language.
How many times should you follow up on a cold email?
Usually two to three times after the first email, spread over two to three weeks, with each follow-up adding something new rather than simply asking whether the recipient saw the previous message. Many replies arrive after the first follow-up, because busy people often intend to respond and forget. A useful sequence might include a follow-up with a short, relevant insight or example, another with a different angle on the problem, and a final brief message closing the loop and making it easy to say no or not now. Stop immediately if someone replies, asks to be removed or shows they are not interested, and always honour opt-out requests promptly. Sending many more follow-ups tends to increase complaints and damage your sending reputation more than it increases replies.
How do you keep cold emails out of spam?
By looking and behaving like a legitimate, low-volume sender. Authenticate your sending domain with SPF, DKIM and DMARC, and consider using a separate domain or subdomain for outreach so any problems do not affect your main business email. Increase sending volume gradually on new inboxes rather than sending large volumes from day one, and keep daily sending per inbox modest; artificial warm-up services are not required and cannot guarantee inbox placement. Verify email addresses before sending to keep bounce rates low, and target carefully so recipients find your emails relevant, which keeps spam complaints down. Mailbox providers watch complaint rates closely; Google's guidance for senders, for example, is to keep the reported spam rate below 0.1% and avoid reaching 0.3%. Write in plain text with few links and no attachments on first contact, avoid misleading subject lines, and always include a clear way to opt out.
