Definition
Cold email is the practice of sending unsolicited commercial emails to individuals who have no existing relationship with the sender, typically for B2B lead generation purposes. Unlike spam, legitimate cold email is targeted, personalised, and complies with anti-spam regulations including CAN-SPAM in the United States and the legitimate interest provision under Article 6(1)(f) of the GDPR in Europe. The average reply rate for well-executed cold email campaigns is 1-5%, with top-performing campaigns achieving 8-10% reply rates according to 2024 data from Instantly and QuickMail.
Before sending cold emails, senders must complete a warmup process that gradually increases sending volume over 2-4 weeks. Warmup establishes sending reputation with mailbox providers by starting with 5-10 emails per day and incrementally increasing volume while monitoring inbox placement. Cold sending without warmup typically results in 80-90% of emails landing in spam, rendering the campaign ineffective before it begins. The warmup process also involves configuring SPF, DKIM, and DMARC authentication records and validating the sending domain's reputation.
Best Practices
-
Warm up sending infrastructure for 2-4 weeks minimum: Start at 5-10 emails per day from a new domain and increase by 20-30% daily. Use dedicated warmup tools such as Mailwarm or Warmbox that simulate positive engagement (replies, inbox movements) to build reputation. Sending 100+ cold emails per day without warmup guarantees near-total spam folder placement.
-
Personalise at scale using verified data fields: Move beyond first-name-only personalisation. Reference the recipient's company, recent news, job function, or shared connections. Tools such as Clay and Apollo combine firmographic and technographic data to generate personalised icebreakers. Personalisation that references verifiable company information increases reply rates by 35-50% compared to generic templates.
-
Follow CAN-SPAM and GDPR requirements rigorously: Every cold email must include a legitimate physical postal address, a clear one-click unsubscribe mechanism, accurate subject lines, and honest header information. Under GDPR, you must document your legitimate interest assessment (LIA) before processing personal data. Include an unsubscribe link in every email and honour opt-out requests within 72 hours in the US and 30 days under GDPR.
-
Structure follow-up sequences of 4-7 touches: A single cold email achieves only a 1-2% reply rate on average. A sequence of 4-7 emails spaced 2-4 days apart across 2-3 weeks increases aggregate reply rates to 5-10%. Vary the content across touches — value-add insight in email 1, social proof in email 2, direct ask in email 3, break-up email in email 4. Each follow-up should add new information, not simply resend the same message.
-
Avoid spam traps and purchased lists at all costs: Purchased email lists contain 15-25% spam traps according to Validity research. If you send to a spam trap, your sending IP will be blocklisted within 24 hours, damaging deliverability for all campaigns from that infrastructure. Use list verification tools such as ZeroBounce or NeverBounce before every campaign and reject lists from third-party vendors regardless of what they claim about data quality.
-
Monitor deliverability metrics in real time: Track inbox placement rate, spam complaint rate (keep under 0.1%), bounce rate (keep under 2%), and reply rate. Use seed-based testing tools such as GlockApps or Validity to measure actual inbox placement across major providers (Gmail, Outlook, Yahoo). A decline in open rate by more than 15% from baseline signals a deliverability problem requiring immediate investigation.
Related Glossary Terms
BIMI
BIMI (Brand Indicators for Message Identification) is an email standard that allows brands to display their logo next to their emails in supported email clients. It requires DMARC enforcement at quarantine or reject policy.
Bounce Rate
Email bounce rate is the percentage of emails that were rejected by the receiving server before reaching the recipient. It is a key indicator of list health and data quality.
Email Deliverability
Email deliverability is the ability to land in the recipient's inbox rather than the spam folder. It depends on sender reputation, authentication, list quality, and content practices.
Double Opt-In
Double opt-in (also called confirmed opt-in) is an email signup process that requires a new subscriber to confirm their email address by clicking a verification link in a confirmation email before they are added to your mailing list.
Email Alias
Alternative email addresses or subaddressing patterns that forward to a primary mailbox, affecting subscriber identity tracking and deduplication in email marketing.
Email Authentication
Email authentication (SPF, DKIM, DMARC) is a set of technical protocols that verify an email is genuinely from the domain it claims to be sent from. It prevents spoofing, phishing, and improves deliverability.
Frequently Asked Questions
Yes, cold email can be legal under GDPR using the legitimate interest basis (Article 6(1)(f)), but you must conduct and document a legitimate interest assessment (LIA) before sending. The LIA must demonstrate that your interest in contacting the recipient outweighs their privacy rights, that the data is necessary for the purpose, and that the processing is not intrusive. You must also provide a clear opt-out in every email and process opt-out requests promptly.
A 1-5% reply rate is average for most B2B cold email campaigns. Top-performing campaigns achieve 5-10%, and exceptional campaigns with high personalisation and strong targeting can exceed 10%. If your reply rate is below 0.5%, the problem is likely targeting (wrong audience), offer (uncompelling value proposition), or deliverability (emails landing in spam).
Start with 10-30 emails per day from a new sending domain for the first 2 weeks, scaling up to 50-100 per day in week 3-4, and a maximum of 200-300 per day per warmed domain after 60 days. Using multiple domains (3-5) and sending profiles allows scaling to higher volumes without damaging deliverability on any single domain.
A spam trap is an email address created specifically to catch spammers, not used by a real person. Pristine traps are addresses that never existed. Recycled traps are abandoned addresses repurposed by ISPs. Hitting a single pristine trap can destroy a domain's sending reputation permanently. Avoid traps by never buying lists, verifying every email address before sending, removing hard bounces immediately, and maintaining a 6-month send cadence to catch recycled traps before they damage reputation.
A standard 5-touch sequence: Email 1 — personalised value proposition (70-100 words). Email 2 — case study or social proof relevant to the recipient's industry. Email 3 — new angle or offer (different value proposition from email 1). Email 4 — direct question about what would make this relevant to them. Email 5 — breakup email acknowledging the silence and closing the loop. Each email must have a different subject line and distinct body content to avoid being filtered as repetitive spam.