Answer

What is cold email?

The difference between cold email and spam is not consent, which almost no outbound email has. The difference is relevance, personalization, honesty, and whether a single human could reasonably argue the message belonged in that inbox.

Start free trial See pricing
Short answer

Cold email is unsolicited business-to-business outreach sent to a researched contact who has not asked to hear from you. It is legal in the United States under CAN-SPAM and legal in the EU and UK under GDPR legitimate-interest rules for B2B, provided you identify yourself honestly, offer a working unsubscribe, and keep the message relevant. It is not spam when the recipient is specifically chosen, individually addressed, and offered something plausibly useful to their job.

Key points

What matters most.

The six things to know before sending a cold email, and the one that separates a reply rate worth running from a sender reputation that burns in a quarter.

Definition

Researched, not purchased.

Cold email is one-to-one outbound sent to a specific person at a specific company for a specific reason you can state in the first line. It is not a blast to a scraped list, not a newsletter, and not a nurture to opted-in subscribers. The recipient did not ask for the message, but the sender can defend why that person received it.

Legal line

CAN-SPAM, GDPR, honest sender.

In the United States, CAN-SPAM allows unsolicited commercial email if the sender is identified, the subject line is not deceptive, a physical address appears, and unsubscribe works within ten business days. In the EU and UK, GDPR permits B2B outreach under legitimate interest when the message is relevant to the recipient's role and unsubscribe is one click.

Not spam

Relevance beats volume every time.

Spam is high-volume, low-relevance, often deceptive, and sent to lists the sender did not research. Cold email is low-volume, high-relevance, honest about who is sending, and defensible on a per-contact basis. If a human reviewer could read the message and the recipient profile and understand why one went to the other, it is cold email, not spam.

Deliverability

SPF, DKIM, DMARC, warmed domain.

A cold email that lands in the promotions tab or the spam folder was never read. The sending domain needs SPF and DKIM records that authenticate the mail, a DMARC policy that tells inbox providers how to handle failures, and a gradual warmup from zero to real volume. Skip any of these and the campaign dies before anyone reads it.

What to measure

Reply rate and meetings, not opens.

Open rate stopped being reliable when Apple Mail Privacy Protection started pre-fetching images, which inflates opens for anyone on iPhone or iPad. The honest metrics are reply rate, positive reply rate, and booked meetings per hundred sends. Those three numbers tell you whether the message is working and whether the list is right.

The strategy

Personalized at low volume wins.

Sending five thousand generic emails to a scraped list produces fewer meetings than sending one hundred researched emails to a targeted list. The math is counter-intuitive until you watch it play out. Focused personalization also protects the sending domain, because recipients mark relevant mail as read instead of as spam.

The legal and ethical lines

What makes cold email legitimate.

Cold email sits inside a legal framework that most senders ignore until a complaint lands. The rules are not complicated, and following them is both the ethical thing to do and the way to keep a sending domain alive. The short version is below. The long version lives in the actual statutes, which every outbound team should have read at least once.

CAN-SPAM

The U.S. rules in one paragraph.

Do not use deceptive subject lines or From names. Identify the message as a commercial communication when it is one. Include a valid physical mailing address. Honor opt-outs within ten business days and keep the unsubscribe mechanism working for at least thirty days after sending. Follow these and U.S. commercial email is legal, consent or not.

GDPR B2B

The European carve-out that exists.

GDPR does not ban B2B cold email. Legitimate interest allows outreach to a business contact when the message is relevant to the recipient's professional role, the sender identifies itself honestly, and the recipient can opt out with one click. Personal addresses (consumer Gmail accounts) do not qualify. Business addresses at the company you are targeting do.

Unsubscribe

One click, no justification required.

Every cold email needs a working unsubscribe link or a plain-text instruction. Do not require the recipient to log in, create an account, or explain why they want out. Suppress the address immediately on the sending side and across every sequence, so the next rep on your team does not accidentally re-contact someone who already opted out.

Honest sender

Real name, real company, real address.

The From name is a real person. The sending domain is a real company. The signature carries a real mailing address and a real reply path. Do not spoof, do not use look-alike domains, do not pretend to be someone the recipient already knows. The moment the message is deceptive, it stops being cold email and starts being fraud.

Relevance test

Could a human defend this send?

The internal test every outbound team should run before pressing send is simple. If a reviewer read the message, the recipient's title, and the sender's product, could they argue the message belonged in that inbox? If yes, it is cold email. If no, it is spam, no matter how clean the deliverability setup is.

Industry rules

Healthcare, finance, government.

Certain industries have stricter rules than CAN-SPAM. Healthcare messaging touching patient data runs into HIPAA. Financial outreach runs into FINRA and SEC rules. Government procurement outreach runs into state-level restrictions. The outbound team should know which rules apply to the industries it targets, because the fines are per-message, not per-campaign.

Deliverability

The technical setup that decides whether anyone sees the message.

A perfect cold email with a weak sending setup lands in the spam folder and never gets read. A good sending setup is table stakes, and most of the failures outbound teams blame on copy are actually deliverability failures. The checklist below is non-negotiable, and every outbound team should walk through it before a first campaign ever sends.

SPF

Who is allowed to send for you.

Sender Policy Framework is a DNS record that lists the servers authorized to send mail for your domain. Inbox providers check it on every incoming message. If the sending server is not in the SPF record, the message gets a hard strike against it. Set it correctly and most providers stop treating your mail as suspicious.

DKIM

The cryptographic signature.

DomainKeys Identified Mail attaches a cryptographic signature to every outgoing message. Receiving servers verify the signature against your DNS record. A valid DKIM signature proves the message was not altered in transit and was sent by someone with your private key. Without DKIM, modern inbox providers are much more likely to filter the mail.

DMARC

The policy that ties it together.

Domain-based Message Authentication, Reporting, and Conformance tells inbox providers what to do when SPF or DKIM fails. A quarantine or reject policy signals to Gmail and Outlook that you take your sending domain seriously. DMARC also sends reports back about every message sent in your name, which surfaces impersonation attempts you would otherwise never see.

Warmup

Earn volume slowly.

A brand new sending domain has zero reputation with inbox providers. Sending five hundred cold emails on day one is a reliable way to get flagged forever. Warm up by sending small volumes to engaged recipients for two to four weeks, growing gradually. The sending domain used for outbound should also be separate from the main corporate domain to protect it.

Volume

Fifty per inbox per day, roughly.

The current practical ceiling is around fifty to one hundred cold emails per inbox per day. Beyond that, inbox providers see the behavior as bulk and start filtering. Teams needing more volume use multiple sending inboxes and multiple sending domains, each warmed independently. Volume is not a feature, it is a constraint to engineer around.

Infrastructure

Dedicated email infrastructure matters.

Transactional email infrastructure for cold outreach is distinct from marketing-blast infrastructure. The right setup uses dedicated sending IPs or well-reputed shared pools, provides per-message authentication, surfaces bounce and complaint signals in real time, and keeps marketing blasts off the same domain so a newsletter blow-up does not kill cold outreach.

Anatomy of a cold email

The five parts and the ninety-word budget.

A cold email that works has a predictable shape. Subject line, opener, value proposition, call to action, and signature. The entire body sits inside a ninety-word budget, because most recipients scan the first few lines on a phone screen before deciding whether to read further. Longer is not better. More personal is better. More specific is better.

Subject line

Short, honest, curiosity-tilted.

Three to six words, lowercased, no gimmicks, no false urgency, no RE: or FWD: tricks. The best subject lines reference the recipient's company or role in a way that could not have been generated by a mail merge alone. Deceptive subject lines are illegal under CAN-SPAM and also torch reply rates the moment the message opens.

Opener

One sentence that proves you looked.

The first line is where cold email either earns a read or gets archived. It should reference something specific about the recipient, the company, or the market that no other recipient would recognize. "Saw you grew headcount in revops by thirty percent last quarter" is a real opener. "Hope this finds you well" is not.

Value prop

What you do, for whom, with what result.

One or two sentences stating what the product does, who it does it for, and the outcome the recipient should care about. Avoid feature lists. Avoid the words "revolutionary," "cutting-edge," and "best-in-class." Name a specific customer category and a specific result the recipient's peers at similar companies would recognize as a real outcome.

Call to action

One ask, low commitment.

Ask one question or request one meeting. Not three. The best call to action is a yes-or-no interest check, not a calendar-link pitch. "Worth a fifteen-minute call next week to show you how three other teams in your space are doing this?" works better than "Here is my Calendly, book any slot."

Signature

Real name, real title, real address.

Full name, job title, company, physical mailing address (required by CAN-SPAM), and a working reply path. Skip the giant logo image, the sixteen social links, the inspirational quote, and the thirty-line disclaimer. A clean signature loads fast, renders on mobile, and does not trip image-heavy spam filters.

What to cut

Everything the recipient did not ask for.

No attachments. No case studies dropped in the first message. No "quick question" openers that signal mail-merge origin. No "I know you are busy" filler. No two-page product descriptions. Every word that is not earning its place is a word that pushes the archive button closer. Ruthless editing is the discipline.

The metrics

What to track and what to ignore.

Cold email metrics shifted hard around 2022 when Apple Mail Privacy Protection started pre-fetching images on behalf of users on iPhone and iPad. The result is that open rates are no longer a trustworthy signal. The metrics worth tracking today are the ones that reflect human behavior, not the ones that reflect pixel loads. The list below is what good outbound teams actually run on.

Open rate

Still useful, but noisy.

Opens are inflated by Apple Mail pre-fetching and by security scanners that fire the tracking pixel before the human ever sees the message. Treat open rate as directional, not definitive. A sudden drop still signals a deliverability problem. A high number alone no longer proves the message was read.

Reply rate

The honest top-of-funnel number.

Reply rate is the percentage of sent messages that got any human response, positive or negative. A healthy cold-email campaign to a well-researched list produces a reply rate between five and fifteen percent. Below one percent, the message or the list is wrong. Above twenty percent, the targeting is probably too narrow to scale.

Positive reply

Of the replies, which want to talk.

A reply saying "unsubscribe" is still a reply. The useful cut is positive reply rate: the percentage of replies that expressed interest in a conversation. Good campaigns run positive reply rates between twenty and forty percent of total replies, which is where the real meeting pipeline comes from.

Meeting rate

Booked calls per hundred sends.

The bottom-line number: of every hundred cold emails sent, how many turn into a booked meeting on the calendar. A good campaign produces one to three meetings per hundred sends, depending on the industry and the price point. This is the number the outbound team should report to leadership, not open rate.

Bounce rate

Keep it under two percent.

Hard bounces (invalid addresses) above two percent of sent volume will get the sending domain flagged by inbox providers within days. Verify every address before sending. Suppress hard-bounced addresses immediately. If a list bounces hot, the list is bad data and should be discarded, not blamed on deliverability.

Complaint rate

The one that ends the campaign.

Spam complaints above one in a thousand sends is the industry red line. Beyond that, inbox providers start filtering the entire sending domain. Complaint rate is the fastest way to burn an outbound program. The fix is almost always better targeting and honest copy, not clever filtering of the complainers themselves.

How a CRM runs cold email

What Strkr does for an outbound program.

Cold email at scale is not a mail-merge job. It is a workflow that spans a sales sequence, a CRM record, a reply-detection layer, and an unsubscribe suppression list. Strkr runs the whole motion inside one tool so the outbound team is not stitching four subscriptions together to get a reply tracked against a deal.

Sequences

Multi-step cadences, per persona.

A sales sequence runs a cold email, a follow-up a few days later, another follow-up with a different angle, and an auto-close that files the lead if nothing comes back. Sequences branch on reply, open behavior, or manual override. Each step is sent from the rep's own inbox so the message looks personal.

Reply detection

Positive, negative, auto-reply, out-of-office.

When a recipient replies, Strkr classifies the response and pauses the sequence automatically. Positive replies route to the rep for a human response. Negative replies log the objection and suppress follow-up. Out-of-office replies pause until the return date. The rep never sends a follow-up to someone already in a conversation.

Unsubscribe

Suppression that spans every sequence.

When a recipient unsubscribes or asks to stop, the address lands on a tenant-wide suppression list immediately. No sequence, no rep, no future campaign can re-contact that address until the suppression is manually lifted. CAN-SPAM compliance and GDPR compliance both depend on this being automatic, not a reminder in a playbook.

CRM link

Every send logs to the contact.

The cold email, the opens, the clicks, the replies, and the eventual meeting all log to the contact and company records in the CRM. The next person who opens that contact sees the full conversation history, including the sequence that got the meeting. Nothing lives only in a sales-engagement tool with its own data model.

Personalization

Variables, snippets, and research fields.

Sequences pull first name, company, title, industry, and any custom field on the record. Snippets let the rep insert research-based openers that are not simple merge fields. The result is a cold email that reads one-to-one even when the sequence is running against a hundred recipients at a time.

Reporting

Reply rate, meeting rate, by sequence.

Every sequence reports send volume, reply rate, positive reply rate, meeting rate, and attributed pipeline. The outbound team sees which sequences work, which copy wins, which personas respond, and which lists burn. The honest metrics drive which sequences get expanded and which get killed, with evidence instead of guesses.

Run cold email inside your CRM, not next to it.

Strkr runs sales sequences, reply detection, suppression, and reporting against the same contact records your pipeline lives on. Every send, open, reply, and meeting logs to the deal. Compliance is automatic. The outbound team stops stitching four subscriptions together to get one reply tracked.

Start free See sales sequences
People also ask

Related questions.

Is cold email legal?

Yes, in most jurisdictions, when done correctly. In the United States, CAN-SPAM allows unsolicited commercial email if the sender is honestly identified, the subject is not deceptive, a physical address is included, and unsubscribe works. In the EU and UK, GDPR permits B2B cold email under legitimate interest when the message is relevant to the recipient's role. Several countries including Canada, Germany, and Australia have stricter consent requirements, so research the specific destination.

What is the difference between cold email and spam?

Spam is high-volume, low-relevance, often deceptive outreach to lists the sender did not research. Cold email is low-volume, individually researched outreach to a specific person at a specific company for a defensible reason. The legal line is honesty and unsubscribe compliance. The practical line is whether a human reviewer could read the message and recipient profile and understand why one went to the other.

What is a good cold email reply rate?

A healthy cold email campaign to a well-researched list produces a reply rate between five and fifteen percent. Of those replies, twenty to forty percent should be positive, meaning the recipient wants to continue the conversation. The bottom-line metric is meetings per hundred sends, which usually lands between one and three for a working campaign. Open rate is no longer a reliable number because of mail-client pre-fetching.

How do you avoid the spam folder when sending cold email?

Set up SPF, DKIM, and DMARC records on the sending domain. Warm up a new domain gradually before sending at volume. Keep daily send volume per inbox under about fifty messages. Use a dedicated sending domain separate from your main corporate domain. Verify every address before sending to keep bounce rate under two percent. Write personalized, relevant copy that does not trigger spammy pattern filters.

What should a cold email include?

Five parts: a short honest subject line, an opener that proves you researched the recipient, a one or two sentence value proposition, one specific low-commitment call to action, and a clean signature with your real name, title, company, and physical mailing address. The entire body should fit inside a ninety-word budget so it reads cleanly on a phone screen.

How many follow-ups should a cold email sequence have?

Three to five total touches is the current norm. The initial cold email, two or three follow-ups spaced three to five business days apart, and a final auto-close that files the lead if nothing comes back. Each follow-up should bring a new angle, a new piece of value, or a new question. Repeating the first message with "just bumping this to the top of your inbox" annoys recipients and lowers reply rates.

What is the best time to send a cold email?

Mid-morning Tuesday through Thursday in the recipient's local time zone is the industry norm, but the data is softer than most senders admit. The quality of the list and the message matters more than the send time. Running an A/B test with your own list is more useful than following a generic best-practice chart that averaged results across industries you do not sell into.

Can you cold email consumers (B2C)?

Not safely. GDPR requires explicit opt-in consent for marketing email to personal addresses in the EU and UK. CASL in Canada requires consent across the board. Most other consumer-protection regimes are stricter than B2B rules. Cold email as a motion is almost entirely a B2B practice, built around the legitimate-interest carve-out that applies to business addresses, not personal inboxes.

More answers

Other questions in this category.

What is cold calling? What is outbound sales? What is a sales sequence? What is sales prospecting?

Try it free. Bring your team next week.

No sales call, no migration consultant, no four-month implementation. Enter your card, get 14 days of the full Pro tier, cancel any time before day 14 with zero charge. Spin up a workspace, import your CSV, and have something useful before lunch.

Start free trial See pricing