How to Write a Cold Email People Actually Reply To
The Dos, the Don'ts & the Legal Basics
Cold email — a first message to someone who doesn't know you yet — is a legitimate, effective way to reach new people, when it's done right. Done wrong, it lands in spam, damages your sender reputation, and occasionally breaks the law. This guide covers both halves: the craft of writing a cold email worth opening, and the rules that keep you compliant and welcome in the inbox.
“Cold email” and “bought list” get confused constantly — they're not the same thing
Cold email simply means a first message to someone who hasn't heard from you before. That's it — no opt-in required, and it's a completely normal, legal way to reach a new prospect, provided you follow the rules covered on this page. Done well, cold email is research-driven: you've identified a specific person, at a specific company, who has a specific reason to care what you're offering, and you've verified their email address is real and current.
A bought or scraped list is a different practice wearing the same name. These lists are assembled in bulk, often years out of date, riddled with dead addresses and spam traps, and — critically — the people on them were never individually chosen because they fit what you offer. As our open rate guide lays out, mainstream email platforms (Mailchimp, Constant Contact, and peers) prohibit purchased lists outright in their terms of service — using one risks account suspension, and the flood of bounces and spam complaints wrecks your sender reputation for every email you send afterward, including to people who genuinely want to hear from you.
The practical takeaway: everything on this page — the dos, the don'ts, the compliance rules, the structure — assumes you're sending to people you (or your platform) individually identified and verified, not a purchased file. That's the version of cold email that actually works, stays compliant, and doesn't torch your sender reputation. If you're currently working from a bought list, the single highest-impact change you can make is switching to a researched one — everything else on this page performs better once that foundation is right.
Where Cold Email Fits
Cold email earns its place when you have something genuinely useful for a specific, identifiable audience and no existing relationship to reach them through — new business development, partnership outreach, recruiting, or introducing a service to a niche you don't yet have contacts in. It's not a replacement for the warm relationships and referrals most small businesses run on; it's a tool for the gap those relationships haven't reached yet.
Eight pairs — what works, and what quietly kills it
Each “don't” below is a mistake we see constantly — and each has a straightforward fix sitting right next to it.
Build or verify your list one contact at a time — LinkedIn, company directories, industry associations. Slower, and every address is real and relevant.
Buy or scrape a list. Dead addresses and spam traps tank your sender reputation, and most platforms will suspend the account.
Reference something true and specific about them — their recent post, their company's news, their role. One real sentence beats a paragraph of flattery.
Fake personalization with a merge-tag first name dropped into an otherwise generic template. People spot it instantly, and it reads as worse than no personalization at all.
Lead with what's in it for them. One sentence on their likely problem, one on how you help, before you say anything about yourself.
Open with “My name is…” and three sentences about your company before the reader learns why they should care.
Keep it short enough to read on a phone in ten seconds — 75–125 words is a strong target for a first message.
Write a full pitch deck in paragraph form. Nobody reads a wall of text from a stranger.
Ask for something small: a 15-minute call, a yes/no answer, permission to send one useful resource. Low-friction asks get answered.
Ask a stranger to “hop on a 30-minute discovery call” or, worse, to buy something in the very first message.
Follow up 2–3 times, spaced several days apart, each one short and adding a small new angle or piece of value.
Send one email and disappear, or send seven in ten days. Both extremes waste the opportunity.
Send from a real person's name and address, include your actual business address, and honor opt-out requests immediately.
Use a misleading subject line or fake sender name, skip your physical address, or keep emailing someone who's asked to stop. This is where CAN-SPAM stops being a suggestion.
Track opens, replies, and bounces — and act on what they tell you. Rising bounces mean it's time to re-verify the list.
Send from your regular business inbox at high volume. It risks your everyday deliverability — use a separate sending domain for volume outreach.
CAN-SPAM in plain English — the six rules that actually matter
The U.S. CAN-SPAM Act permits commercial email to people who haven't opted in — cold email is legal — provided you follow these rules. This is a plain-English summary, not legal advice; for anything high-stakes or international, a quick check with an attorney or the FTC's own compliance guide is worth the ten minutes.
| The Rule | What It Means in Practice |
|---|---|
| No misleading header information | Your “From,” “To,” and routing information must accurately identify you as the sender — no spoofed or borrowed domains |
| No deceptive subject lines | The subject has to reflect what's actually inside — no “Re: our call” when there was never a call |
| Identify it as an ad, if it is one | Clear disclosure that the message is a commercial solicitation — doesn't need to be a giant banner, just honest |
| Include your real physical address | A valid postal address (street, PO box, or registered agent) somewhere in the email — usually the footer |
| Offer a clear opt-out | A working way to say “stop emailing me” — a reply works for cold outreach; no confusing multi-step process |
| Honor opt-outs within 10 business days | Once someone opts out, stop — the clock is federal law, not a suggestion, and there's no fee or extra step you can require of them |
If your prospects are outside the U.S.: other regions are stricter. Canada's CASL and the EU's GDPR generally require opt-in before you email someone commercially — cold email as described on this page is not compliant there without consent. Sending internationally is exactly when a quick conversation with an attorney familiar with the destination country pays for itself.
Anatomy of a cold email worth answering
Five parts, in order — skip one and the email gets noticeably weaker:
Short, specific, human — reads like something a colleague would send, not a marketing blast. “Quick question about [their specific thing]” beats “Boost Your Revenue Today.”
One sentence proving this isn't a mail-merge blast — something true and specific about them, their company, or their recent work. Earns the next sentence.
Their likely problem, in their language, and the shape of how you help — one or two sentences, not your whole service menu. This is where most cold emails overstay their welcome; resist it.
One clear, low-friction request. A yes/no question is often stronger than a calendar link — “Worth a quick chat?” beats “Book 30 minutes here.”
Real name, real role, real way to reach you — plus your required physical address per CAN-SPAM. No “Sent from my team at [Company]” anonymity; people reply to people.
All five parts together should land around 75–125 words. That's roughly what fits on a phone screen without scrolling — and scrolling is exactly where cold emails lose their reader. If your draft runs long, the value section is almost always where to cut.
Opens tell you it landed — replies tell you it worked
As covered in our open rate guide, cold email plays by different rules than a newsletter — and the metrics that matter shift accordingly:
The Signal
Reply rate is the real scoreboard
A 3–5% reply rate is average for cold outreach; 5–10% is considered strong. Opens confirm deliverability; replies confirm your message actually persuaded someone. A campaign with great opens and few replies has a copywriting problem, not a delivery problem — a genuinely useful diagnostic split.
The Warning Light
Bounce rate is your list-quality alarm
Keep hard bounces under 2–3%. Climbing past that means your list has gone stale — dead addresses, job changes, typos — and it's time to re-verify before it damages your sender reputation. Under ~20% opens on a properly researched list is a similar red flag: something's wrong with deliverability, not the message.
The Cold Email Compliance & Craft Audit — 12 Things to Verify
No bought or scraped list
Every contact was individually researched and verified?
Real sender identity
Accurate name, address & routing info — nothing spoofed?
Honest subject line
Reflects what's actually inside — no fake “Re:” or false urgency?
Physical address included
Your real postal address is in the footer, per CAN-SPAM?
Working opt-out
A simple reply removes them, honored within 10 business days?
Genuine personalization
One real, specific detail about the recipient — not just a merge-tagged name?
Their problem before your pitch
Value comes before company introduction, not after?
Under ~125 words
Readable on a phone screen with no scrolling?
One low-friction ask
A yes/no question or small next step — not a 30-minute call?
A follow-up sequence exists
2–3 planned touches, spaced days apart, not one-and-done?
A separate sending domain
Volume outreach isolated from your everyday inbox's reputation?
Bounces & replies tracked
Someone's watching the numbers and re-verifying the list if bounces climb?
From blank page to sent — six steps
Whether this is your first cold email campaign or your fiftieth:
Define Exactly Who — Not Just What Industry
“Small businesses” is too broad to write a good email to. Narrow to a specific role, company size, and situation — “operations managers at 20–50 person manufacturing companies who just changed ERP systems,” for instance. The narrower the definition, the easier every later step becomes.
Build the List by Hand (or with Verified Tools)
LinkedIn, company websites, industry directories, and reputable B2B contact tools that verify deliverability — never a bought or scraped file. Confirm the email format for each company (most follow a pattern like [email protected]) and verify addresses before sending.
Draft Using the Five-Part Anatomy
Subject, opener, value, ask, sign-off — from the section above. Write the value section in the recipient's language, not yours; describe their problem the way they'd describe it, not the way your service page describes your solution.
Check It Against the Compliance Checklist
Real sender name, honest subject, physical address in the footer, clear opt-out. This is the step people skip when they're eager to hit send — it's the one that matters most for staying welcome in the inbox and out of trouble.
Send Small, Then Scale
Test with 20–30 emails first. Watch opens, replies, and bounces before sending to your full list — a rough draft on 25 people is far cheaper to fix than a flawed campaign on 500. Once the numbers look healthy, scale gradually rather than all at once, which also protects your sending domain's reputation.
Follow Up, Then Learn From What Worked
Two or three brief follow-ups, days apart, then stop. After each round, compare reply rates across your different openers and value propositions — the version that gets more replies teaches you what your specific audience responds to. Cold email gets better the more honestly you study your own results.