What Is a Cold Email? Is It Spam, Is It Legal, Does It Work

Nobody asked for such emails. That’s what makes it cold, and it’s the source of every question people have about it.

Key takeaways

• What it is: An unsolicited business email to a stranger, sent because you believe it’s relevant to them. Unsolicited isn’t the same as untargeted.

• Is it spam: Not by definition. Spam is unsolicited and sent in bulk with substantively identical content. A researched message to one person is neither of the last two.

• Is it legal: Yes, in the US, the EU and Canada, under conditions that differ by country. Canada is strictest and requires consent in most cases.

• Is it right for your business: Only if your deal size justifies the effort of real research per prospect. If it doesn’t, this is the wrong channel and no tool fixes that.

• What it returns: Highly variable and mostly determined by list quality and relevance, not by copy. It’s also capped by something most guides ignore whether your mail arrives at all.

What Is a Cold Email?

A cold email is a message sent to someone you’ve no prior relationship with. The defining feature is the absence of a prior relationship. You haven’t met, they haven’t subscribed, and there’s no existing thread.

It’s usually sent for a business reason: a pitch, an introduction, a request.

What separates a cold email worth sending from one that isn’t is whether the sender did the work of establishing relevance before writing.

That’s not a moral point, it’s a practical one. Relevance is the only thing that makes a stranger read past the first line. It’s also the thing that keeps a sending reputation intact over time.

Cold Email vs Spam vs Warm Email

These three get conflated constantly, and the differences are worth setting out plainly.

Type	Prior relationship	Solicited	Sent in bulk	Content
Warm email	Yes, they know you or opted in	Yes	Sometimes	Varies
Cold email	No	No	No, one recipient, one message	Written for that recipient
Spam	No	No	Yes	Substantively identical across recipients

The industry-standard definition of spam is unsolicited bulk email, and both halves have to be true.

Unsolicited on its own doesn’t make a message spam otherwise every introduction ever made by email would qualify.

What makes it spam is sending the same thing to a large list of people who didn’t ask. The hope is that volume compensates for the lack of relevance.

It’s worth being honest that a great deal of what gets described as cold email falls on the wrong side of it.

Cold Email vs Cold Calling

A cold call interrupts and demands an answer immediately, which is why it converts well and scales badly. A cold email waits, which is why it scales and converts less per contact.

The practical difference is that a bad call wastes a minute of someone’s time and a bad email accumulates. Send enough irrelevant mail and mailbox providers stop delivering the relevant ones. There’s no equivalent penalty for a bad phone call.

Is Cold Email Legal?

Yes, in every major jurisdiction, and the conditions are stricter than most senders assume.

This is the question we get asked most, so it’s worth going through properly rather than in a sentence each.

United States – CAN-SPAM (US). The most permissive of the three.

You don’t need consent before emailing someone commercially.

What you do need: Accurate header information, a subject line that reflects the content, and a valid physical postal address in the message.

Also clear identification that it’s a commercial message, and a working opt-out honoured within ten business days. Penalties are assessed per email, which is what makes carelessness expensive at volume rather than merely embarrassing.

European Union – GDPR (EU). More restrictive, and often misunderstood.

A work email address tied to an identifiable person is personal data, so you need a lawful basis to process it. For B2B outreach that basis is usually legitimate interest. That’s a real and usable provision, not a loophole.

It requires 4 things:

• That the recipient would reasonably expect the contact.
• That you balanced your interest against their privacy.
• That you say where you got their details.
• That you stop when asked.

Note that several member states apply stricter national rules on top, so “GDPR-compliant” isn’t a single standard across Europe.

Canada – CASL (Canada). The strictest of the three by a wide margin.

CASL generally requires express or implied consent before the first commercial message, which inverts the American model.

Implied consent exists in defined circumstances. A published business address relevant to the recipient’s role is one. But the burden of proving it sits with the sender. Penalties run to millions per violation.

The practical rule if you send across regions: comply with the strictest regime that applies to any recipient on your list.

Segmenting by country works until the segmentation slips. It’s simpler to operate and it’s the version that survives a list being merged or re-imported.

Two things worth adding, because they’re commonly missed. An opt-out has to be honoured, not merely offered. A working mechanism you then ignore is the violation, not the absence of a link.

And none of this is legal advice. The rules turn on specifics, and at any scale it’s worth an hour of a lawyer’s time in your own jurisdiction.

What a Cold Email Actually Looks Like

A cold email that works has six parts, and the second-longest one is usually the mistake.

• Subject line: Short, specific, and not clever. It describes the email rather than teasing it.
• Opening line: Not about you. The fastest way to lose a reader is to spend the first sentence introducing your company.
• Relevance hook: The reason this message is going to this person. It should be stated in a way that could not be sent to anyone else. This is the part that takes the time, and it’s the part that decides whether the email works.

If you can’t write it, the prospect doesn’t belong on the list. That’s why defining an Ideal Customer Profile (ICP) before you build a list matters more than any sending tactic.

• Proof: One concrete thing that makes you credible for this specific claim. A named customer, a number, a result. Not three of them.
• Offer: What you’re actually asking for, sized to the relationship, which at this point is nothing.
• A single call to action: One or two options is a decision, and a decision made by a stranger about a message they didn’t ask for is usually “later”.

Most cold email tools will help with sending, scheduling and tracking. None of them will do the relevance hook, and that’s the part that determines the result.

Where Cold Emails Actually Land

Here is the part most guides skip: before any of the above matters, the message has to arrive.

We measured this across 3–5 August 2026. Mail in our warmup network reached the inbox 91.75% of the time at Gmail and Google Workspace addresses.

At Outlook and Microsoft 365 it reached the inbox 77.97% of the time. That’s a gap of nearly fourteen points between the two providers that between them receive the overwhelming majority of B2B outreach.

Measured on warmup traffic from paid TrulyInbox accounts, 3–5 August 2026. Warmup mail is sent between consenting mailboxes. It reads how providers treat a sender’s reputation, rather than predicting how a specific campaign will perform.

Two things follow from that. If your prospect list skews toward Microsoft, your ceiling is materially lower than the figures quoted in most cold email articles. That’s a property of the provider, not a fault in your copy.

And the difference between a good sender and a poor one shows up here, invisibly, long before it shows up in reply rates.

Outreach platforms can tell you what you sent and who opened it.

They can’t tell you where it landed, because they never see the recipient’s mailbox.

That’s the measurement gap. It’s why senders optimise subject lines when the actual problem is that a fifth of their mail is going to spam.

If that’s happening, emails will end up in spam, this guide explains the usual causes.

Does Cold Email Still Work in 2026?

Honestly: For most people sending it today, no. And it’s worth saying why before saying when it does.

• The majority of cold email is ignored, that is 91.5%.
• 74% of B2B senders build their lists by buying them.

A bought list can’t support a relevance hook, because you know nothing about the people on it beyond their job title. What is left is volume, and volume without relevance is the thing mailbox providers exist to stop.

So most cold email deserves its outcome. If that’s the version you were planning to run, the returns will be poor. The damage to your sending domain will outlast the campaign.

When it does work, the economics are specific rather than general. Cold outreach earns its keep when your average deal is large enough to justify genuine research per prospect.

In practice that means a smaller list and more time per message.

It also means a reply rate that looks implausible next to bulk benchmarks. It also needs a long enough sales cycle that a first message is allowed to be an introduction rather than a pitch.

It’s the wrong channel if you sell something low-value at high volume. Or if your buyer is genuinely unreachable by email, or you can’t afford the research time per prospect.

In that case no amount of tooling or copywriting rescues it. The money is better spent somewhere the channel fits.

On returns: Be sceptical of any published benchmark, including favourable ones.

Reply rates vary by an order of magnitude between industries, deal sizes and list quality. The figures in most articles come from whichever dataset flattered the tool being sold.

The number that matters is your own, measured against pipeline rather than opens, and you won’t have it for a quarter.

What to Set Up Before Your First Cold Email

Five things, in order. None is optional and all of them are cheap relative to the cost of a burned domain.

Authenticate the sending domain. SPF, DKIM and DMARC, in place and aligned, before the first send.

Without them the receiving provider has no way to attribute good behaviour to you.

Use a separate domain for outreach. Not to hide behind.

It is so a problem on your outreach can’t reach the domain your invoices go out from. One domain, used properly, not a rotating set.

• Verify the list: Every address, before the campaign. A high bounce rate is the fastest way to lose standing with a provider, and verification costs a fraction of what recovery does.
• Warm the mailbox: Reputation is built by consistent sending over weeks.

It isn’t switched on the day you launch.

Warming up your emails before and during outreach gives a new domain the sending history it lacks. That’s what TrulyInbox does.

Start low and ramp. The volume you finish at isn’t the volume you start at.

And keep it steady — providers read a consistent daily pattern as human and a spiky one as automated.

Our guide to email deliverability covers what to watch as you scale.

FAQ

1. Is Cold Email the Same as Spam?

No, though a lot of it is. Spam is unsolicited and bulk and substantively identical across recipients. A researched message written for one person is unsolicited only. The distinction is not a technicality — it’s exactly the line mailbox providers filter on.

2. How Many Cold Emails Can I Send a Day?

Fewer than most tools will let you. The right number depends on your domain’s age and history. The shape is always the same: start low, increase gradually, and keep the daily figure steady rather than sending in bursts.

If you’re researching each prospect properly, the research is the constraint long before the sending limit is.

3. Do I Need to Include an Unsubscribe Link?

The law requires a clear and working way to opt out; it doesn’t always require a link.

A plain line inviting the recipient to reply and be removed satisfies the requirement in most jurisdictions and reads better in a one-to-one message. What matters is that you honour it promptly.

4. Why Are My Cold Emails Going to Spam?

Most often authentication — missing or misaligned SPF, DKIM or DMARC — followed by a new domain with no sending history, then list quality.

Copy is a distant fourth despite getting most of the attention. Start by confirming you can set up email authentication records correctly.

5. Can I Buy a List to Get Started?

You can, and it’s the single most reliable way to make cold email fail.

Bought lists carry dead addresses and spam traps, which damage your sending reputation directly. They also make a genuine relevance hook impossible, because you know nothing about the people on them.

The channel works on research, and a bought list is the absence of research.

6. How Long Before I See Results?

Longer than the tooling implies.

Reputation takes weeks to establish, sales cycles take months, and a first campaign mostly teaches you which parts of your targeting were wrong.

Judge it on a quarter and on pipeline, not on a fortnight and on opens.