The Complete Cold Email Guide: From List to Reply, in Order

Cold email works when you do things in the right order: confirm you're allowed to email the people you're targeting, build a small list of the right accounts, verify every address, send from a separate warmed-up domain at low volume per inbox, write short emails with a true reason and one ask, follow up a few times, and measure replies, bounces and complaints. Skip a step and the later ones can't make up for it.

This guide walks through each stage in launch order. Each section is a summary with the essentials; the linked posts go deeper.

1. Check the law before anything else

Whether you may send a cold email at all depends on the recipient's country, and sometimes on whether they're a business or a person. The rules differ more than most guides admit.

• United States: CAN-SPAM doesn't require permission, but requires accurate headers, a non-deceptive subject, a postal address and an opt-out honoured within 10 business days.
• UK: PECR lets you email limited companies and LLPs without consent, but sole traders and ordinary partnerships count as individuals and need it.
• EU: GDPR allows B2B outreach on legitimate interests, but national ePrivacy rules decide whether the email can be sent.
• Canada: CASL requires consent, express or implied (for cold outreach, usually a conspicuously published work address), and you must be able to prove it.
• Australia: the Spam Act 2003 also requires consent, express or inferred, which for B2B usually means a conspicuously published work address.

Collecting the addresses has its own rules; see is it legal to collect business emails. This is general information, not legal advice.

2. Build the list accounts first

Choose companies, then roles, then people, then addresses. A list built that way is smaller than a bought export and much more likely to reach real inboxes.

• How to build a B2B email list from scratch walks through the accounts-first method.
• How to find someone's business email covers finding the address once you know the person.
• For local trades, see cold email to local service businesses.
• Bought lists carry dead addresses, spam traps and no lawful basis for many recipients; see should you buy an email list.

Record where every address came from and when. You'll need it for legal questions and for deciding when to re-verify.

3. Verify every address before it touches a sending tool

Bounces are the one deliverability problem you can remove almost entirely before sending. A hard bounce tells the receiving server you don't know who you're writing to, and a high bounce rate drags down the domain for every later email. Why cold emails bounce explains the mechanics.

What to do:

1. Clean the file first: dedupe, fix obvious typos, strip junk. Scraped lists need extra care; see verifying scraped emails.
2. Verify. The free email verifier checks single addresses and samples; SimpleVerifier's paid plans handle full lists (see pricing).
3. Decide what to do with uncertain results. Catch-all addresses can't be confirmed by any verifier, and role addresses like info@ behave differently from personal ones.
4. Re-verify anything older than a few months. B2B contact data decays as people change jobs.

If your list came from a database, read should you re-verify an Apollo export; the same logic applies to other data vendors.

4. Set up sending domains and authentication

Send cold email from a secondary domain close to your brand, with its own SPF, DKIM and DMARC. That keeps cold-outreach complaints off the domain your customers and invoices depend on.

• Setting up secondary domains for cold email covers registration, redirects and DNS.
• DKIM setup for Google Workspace and Microsoft 365, step by step.
• Check the result with the SPF checker, DKIM checker and DMARC checker, or all three at once with the deliverability audit.
• If your tool rewrites links or adds an open pixel, use a custom tracking domain rather than the shared default.

A separate domain isolates domain reputation. It doesn't fix a bad list or misleading copy, and mailbox providers can still connect domains through shared links, content and infrastructure.

5. Warm up new inboxes gradually

New domains and inboxes have no sending history, so start small and increase slowly. Our warm-up schedule suggests a small daily volume to engaged recipients, then raising it about 50% at a time and holding each step for several days. Step back at the first sign of deferrals or rising complaints.

Automated warm-up networks can help a new inbox look active, but they aren't a cure for a list that bounces or a message people report.

6. Keep volume per inbox low

Mailbox provider limits are abuse ceilings, not safe cold volumes. Google Workspace allows 2,000 messages per user per day and Microsoft 365 allows 10,000 recipients, but cold email tools commonly suggest 30 to 50 a day per inbox. See how many cold emails per day per inbox and Gmail sending limits.

To send more, add inboxes and spread the load. Inbox rotation does that, but it doesn't spread domain reputation or list quality: inboxes on one domain still share its standing.

7. Write the email

A cold email needs a true reason for writing to this person, one or two lines on why it matters to them, and a single question that's easy to answer. Short enough to read on a phone without scrolling.

• How to write a cold email: eight steps and a worked rewrite.
• 24 cold email templates by situation, each with when to use it.
• Cold email subject lines: principles and 50 examples.
• Personalization at scale: segment-level relevance plus one checked detail.
• Do spam trigger words still matter? Mostly no; links, reputation and recipient reactions matter more.

For founders doing outbound themselves, cold email for SaaS founders treats it as a learning tool first.

8. Plan follow-ups, and when to stop

Follow-ups add a large share of replies, and each extra step adds complaint risk. Three or four follow-ups after the first email is a sensible starting point; cut the sequence at the step where removal requests start to rival replies.

• How many follow-ups a cold email sequence should have, with the published data and Gmail's 0.3% spam-rate line.
• 12 follow-up email templates by scenario.

Stop the sequence for anyone who replies, asks to be removed or bounces. Pause rather than continue on out-of-office replies.

9. Decide what to track

Open tracking is weak data and can cost deliverability, so most cold campaigns are better off without it. A pixel turns a plain-text message into HTML with a remote image, and Apple Mail Privacy Protection inflates opens. See does open tracking hurt cold email deliverability.

Track these instead:

• Human replies per prospect contacted, classified by hand.
• Bounce rate per batch. See how to calculate bounce rate.
• Spam rate in Google Postmaster Tools.
• Removal requests per step of the sequence.

10. Read results honestly

Compare yourself with your own last campaign, not a vendor benchmark. Published reply rates vary widely because they use different formulas; cold email reply rate benchmarks shows how to match a benchmark's denominator before comparing.

Change one thing at a time (segment, reason, ask, or sequence length) and give each version enough sends to mean something. Small samples mislead: a handful of replies either way can swing a percentage dramatically when you've only contacted a few hundred people.

The most useful output of a campaign is often qualitative. Read every reply, including the no's. Objections tell you whether the segment, the problem or the timing was wrong, and that tells you what to change next far more reliably than a reply-rate figure.

11. When something goes wrong

Stop sending first, then diagnose. More volume never fixes a deliverability problem.

• Bounces spiked: what to do after a high bounce rate.
• Mail landing in spam: why emails go to spam in Gmail and Outlook's junk folder.
• Listed on a blocklist: how to get removed from a blacklist, after checking with the blacklist check.
• Reputation damaged: a realistic 30-day recovery plan.

Choosing a tool

Pick the sending tool last, after you know your volume and channels. Tools that meter contacts and emails with unlimited inboxes suit high volume; seat-based tools suit small teams; some include verification and some don't. Best cold email software compares eight, with prices read from vendor pages, and lemlist alternatives goes deeper on that switch.

The launch checklist

Before the first campaign goes out, you should be able to tick every line:

1. The recipients' countries allow this outreach, and you know your opt-out process.
2. The list is accounts-first, with a source and date for each address.
3. Every address is verified, and catch-all and role addresses are handled deliberately.
4. The sending domain is separate, with SPF, DKIM and DMARC passing.
5. Each inbox is warmed and capped at a modest daily volume.
6. The email has a true reason, one ask, an address and an opt-out.
7. Follow-ups are written, with stop rules for replies, removals and bounces.
8. You're tracking replies, bounces and spam rate, not opens.

If line 3 is the one you can't tick yet, the free verifier is there for a sample first, and SimpleVerifier's plans for full lists are on the pricing page. For the deliverability side in more depth, see the email deliverability guide.