Skip to content

Cold outreach: contact the right person (and for a reason)

Build your channel strategy · Chapter 21 of 29 · Published 17 September 2026

You'll leave with a first manual cold outreach test for 10 researched prospects, with a relevant first message, bounded follow-up plan, stop rules, delivery and legal checks and blank results.

Target before writing01PERSON02COMPANY03CURRENTREASONPASS ALL THREE → WRITE
Person + company + reason one message

You've built the product, asked everyone you know for an introduction and reached the edge of your immediate network. That's when cold outreach comes into play: a way to contact the people you think should care, although the apparent ease of buying 10,000 names can make the route look much simpler than it is.

The work begins before the email. You need to know why this person at this company might care now. A job title and a mail-merge field won't answer any of those questions, even if the software has helpfully colored them green.

Cold outreach works best for B2B products and services where you can identify the likely buyer. It can run as a small test alongside warm introductions when both lead to the same kind of customer. Broad consumer outreach is a poor fit, and messages to sole traders or other individuals can fall under stricter consent rules.

Start with ten

Your first batch is ten carefully researched people. That is large enough to expose an obviously weak assumption and small enough for you to understand why each person is there.

Christina Gilbert, visiting Y Combinator advisor, recommends making at least 100 approaches manually before automating outreach. Treat this number as a learning guide: by the time you've worked through several small batches, you should be able to describe who replies, why they respond, and the wording they use. Reaching email 100 with no better idea who should receive email 101 records activity and leaves you no further forward.

During this early manual work, never send more than 30 cold emails from one inbox in a day: this preserves your domain health. That's a conservative operating ceiling for this playbook; it can't guarantee delivery, and it doesn't replace the technical checks later in this chapter.

Targeting comes first

Before writing, check the person, the company and the current reason for contact, in that order.

Scroll to compare →
CheckThe question to answerWhat doesn't answer it
PersonDoes this person benefit from solving the problem, or own the consequences of leaving it alone?A senior-sounding title
CompanyDoes the business fit the customer you've chosen?Appearing in the right database category
Current reasonWhy might this subject be relevant now?A generic compliment or invented urgency

A recent public event gives you the easiest reason to write. The company may be hiring for the work your product changes, expanding into a new market, replacing a tool or discussing the problem in public. You don't need to manufacture an event when the person and company are a strong fit; you still need a specific reason that would make sense to the recipient.

Record the source and the date you checked it. Public information can support your reason for writing, although public availability doesn't automatically give you permission to collect or use every detail you can find. Nobody needs an email proving that you found the photos from their 2018 charity fun run.

Your prospect record needs enough information to show your working:

  • who the person is and what they appear to own;
  • why the company fits;
  • the event or other reason for contact;
  • the public source and date;
  • the route you plan to use; and
  • the assumption this message is testing.

A database can help you find a possible person; it's up to you to decide whether they belong in the test.

Before the draft

Target before writing

Check the person, company and current reason in that order. Only a prospect that passes all three gates reaches Write the message. A failed or unknown check leads to Research or remove.

  1. Person

    Does this person own or feel the result?

    If not: research or remove
  2. Company

    Does this business fit the customer I chose?

    If not: research or remove
  3. Current reason

    Why might this subject matter now?

    If not: research or remove
  4. Write the message

    Only after all three checks hold up.

A database can suggest a person. The three checks decide whether they belong in the test.

Write to one person

The first message has five purposes:

  1. Give the real reason you're writing.
  2. Connect it to a pressure or result the buyer might recognize.
  3. Explain how you can help in one sentence.
  4. Include one piece of proof you have.
  5. Offer one next step that's easy to answer.

Plain and skimmable usually means fewer than 150 words, although 149 vague words don't become good outreach by passing a word-count test. The message should make sense without a slide deck, a feature list or three paragraphs about the company you founded.

The next step depends on what the buyer has already done. A specific question fits somebody who may only be exploring the problem. A short comparison call or bounded test can suit a buyer who has acknowledged the need. A demo is reasonable when the company is actively evaluating software; asking everybody else to “book a demo” makes them do too much work to discover why you emailed.

Here is a fictional example. MesaOps is an early B2B product that helps customer-success teams manage complex client onboarding. Its founder sees that Northstar, a UK limited company, is advertising three enterprise onboarding roles.

Subject: Enterprise onboarding at Dunder Mifflin

Hi Michael,

I saw Dunder Mifflin is hiring three enterprise onboarding managers. When that volume grows, the handoffs between sales, implementation and customer success can become difficult to track.

I've built MesaOps to give customer-success teams one view of the decisions, owners and outstanding work for each onboarding. I led enterprise onboarding operations for 6 years before building it, so I truly known the pain points of the process inside-out.

Would it help if I sent over the two-minute workflow so you can tell me whether it resembles the process you're hiring for?

Jane Doe

The hiring advert supports a reasonable question; it doesn't prove that Dunder Mifflin's process is broken. If the company had also published a request for onboarding software, the stronger buying signal could support an invitation to see the product.

The inbox sees two lines

Many inboxes show the opening words beside the subject, so the subject and preview need to do different jobs.

Scroll to compare →
VersionSubjectOpening preview
WeakQuick questionI hope you're well. I wanted to reach out...
BetterEnterprise onboarding at NorthstarI saw Northstar is hiring three onboarding managers...

The second version gives the recipient a reason to understand the email before opening it. It doesn't need clickbait, a false Re: or a mysterious subject designed to resemble a message from their accountant.

Use the proof you have

Pre-revenue founders often have more evidence than they think, but each type proves something different.

Scroll to compare →
Proof availableWhat you can say
Relevant founder experienceWhat you've directly seen or done
Evidence of the problemThe pattern, process or public information you've verified
A working product or methodWhat exists and what it can currently do
A clearly labeled testWhat you want to examine with a buyer
A customer resultWhat happened for that customer, within the real scope of the result

The description in the MesaOps email is modest because modest is accurate.

Follow up with new information

One first message and no more than four follow-ups is the ceiling. Start with at least 48 hours between messages, then adjust for the channel and the decision. You can stop after two or three when another email would add nothing.

Scroll to compare →
MessageIts job
1Establish relevance and ask an easy question
2Add evidence, context or a clearer explanation
3Offer another angle or a smaller next step
4Ask whether the subject is a current priority
5Close the loop and stop

Christina Gilbert says the close-the-loop email is often the most effective. It removes the low-level irritation of an unresolved sequence and gives the recipient a straightforward way to answer:

Hi Michael - I'll stop here after this note. If you're reviewing enterprise onboarding at a later time, I'm happy to send the short workflow then. If it isn't relevant, no reply needed.

There is no guilt, countdown or threat to give the slot to somebody else. An A request to stop receiving marketing messages. The address should be added to a suppression list so it isn't contacted again by mistake., direct no, An email the receiving server couldn't deliver. A hard bounce usually means the address or domain doesn't exist and should be suppressed from future sends. or legal concern ends the sequence. A clear lack of fit does too.

Choose one route

Email, LinkedIn, phone, a referral or a conversation after an event can all work - the best route is the one this buyer uses for conversations of this kind. A second channel should add context, such as referring to a substantive LinkedIn exchange before emailing. Appearing in somebody's inbox, LinkedIn messages and missed calls before they've had their second cup of coffee adds recognition of a less helpful kind.

The rules still travel with the message. Moving an approach into a social direct message doesn't remove privacy law or the platform's own restrictions.

Check the sending setup and the law

Your first test should come from an address that clearly belongs to the business. Four checks cover the practical minimum:

Scroll to compare →
CheckWhat you need
AuthenticationSPF, DKIM and DMARC configured for the sending domain
Address careRecipient addresses checked before sending, with bounces and opt-outs suppressed
RepliesAn inbox that somebody monitors
PrivacyNo tracking pixels in the first manual test

A separate A subdomain used for one type of email, such as `outreach.example.com`. It still belongs to the real business and needs its own correct authentication. can protect different types of company email. It should clearly identify the real business; deceptive lookalike domains have no place here.

Google, Yahoo and Microsoft publish different requirements according to sender volume. Their bulk thresholds are compliance limits; they don't suggest an appropriate campaign size. The 30-per-inbox ceiling in this chapter remains much lower.

Cold email law depends on who receives the message and where they're located:

Scroll to compare →
JurisdictionStarting point for a manual B2B test
United KingdomPECR generally allows unsolicited email to corporate subscribers without prior consent. Sole traders and some partnerships are treated as individuals and usually need consent or a valid existing-customer exception. A named work address is personal data under UK GDPR, so you still need a lawful basis, privacy information, clear identification and a valid opt-out.
United StatesCAN-SPAM applies to commercial B2B email as well as consumer email. Sender details and subject lines must be accurate, and the message must be identified as an advertisement where the law requires it. Commercial emails need a valid postal address and a clear opt-out, which must be honored within 10 business days.
European UnionA named business email is personal data under GDPR. Whether you may send the message also depends on ePrivacy rules and the recipient country's implementation, which can require consent for marketing to professionals. Check the country before sending.

Use this table as a starting point and obtain legal advice when the recipient type or jurisdiction is unclear. Public availability isn't automatic permission, and tracking pixels can bring additional privacy rules that you don't need at an early stage. Your email service and the recipient platform may also set stricter rules than the law, so check their current terms before the first send.

AI can prepare the work

AI can summarize public information you've supplied and organize the prospect record. It can also prepare a draft or compare two versions. You still decide whether the person belongs in the test; every fact, final edit, and send needs your approval.

It can't invent personal details or infer a private problem from a public event. It also shouldn't send on its own. If the draft says you loved somebody's recent post, reading and loving the post remains a fairly reasonable entry requirement.

Read the results in the right order

Silence is normal. Instantly's 2026 benchmark report, based on billions of interactions across active customer workspaces, reports a 3.43% average reply rate. Instantly sells cold-email software and counts every reply, including negative ones; it doesn't measure positive replies or meetings. Use the figure only to understand how common silence is.

For each batch, keep three small groups of numbers:

Scroll to compare →
What you're checkingWhat to record
Work completedSuitable people researched and messages sent
ResponsesReplies that taught you something, refusals and objections
Outcomes and limitsMeetings, opt-outs, bounces and silence

An objection or a clear no can improve the next decision even though neither looks exciting in a dashboard.

Weak results should be checked in this order:

  1. Was it the right person?
  2. Was it the right company?
  3. Did the subject and preview establish relevance?
  4. Did the message and next step fit the situation?
  5. Did your website and profile support what you said?
  6. Was the message delivered and legally compliant?

When those six checks hold up across a meaningful manual sample, and nobody engages, the question moves to the market, the problem or what you're offering. More volume would give the same assumptions a larger audience.

Your first manual outreach test

The cold outreach record gives you space to research ten prospects and draft the first message. It also contains the follow-up, sending and legal checks, followed by a blank results log.

Prepare your first manual cold outreach testShow or hide prompt
I'm preparing a first manual cold-outreach test for 10 B2B prospects.
Use my attached cold outreach record, positioning and supplied public sources.
Don't send messages, contact anyone, enrich personal data or change an account.

For each prospect:
1. Separate the facts in my sources from my assumptions and missing information.
2. Assess the person, company and current reason for contact. Remove anyone
   whose fit depends on an invented need, private information or unsupported
   job-title assumption.
3. Record the public source and date for every reason to write.
4. Draft one plain first message, usually under 150 words. Include the real
   reason for writing, a plausible pressure or result, one sentence on how I
   can help, one truthful proof point and one easy next step.
5. Match the next step to the buying signal. Don't default to a demo.
6. Review the subject and opening preview together.
7. State what any supplied proof establishes and what it can't establish.
8. Suggest the job of each possible follow-up, within a five-message total
   ceiling and my stop rules. Don't draft an endless sequence.
9. Flag the recipient type and jurisdiction for human review. Don't give a
   legal clearance or assume a business address may always be contacted.
10. Leave all send and result fields blank for my approval.

Return standard Markdown in my first person. Don't invent events, quotations,
customer results, urgency, familiarity or personal details. Mark every unknown
as unknown. Stop with the prepared record for human review.

Once the record contains ten people you can defend, one message you can stand behind and a checked route to contact them, the test is prepared. Sending remains your decision; a reply moves the work into the founder-led sales conversation.

Glossary

Glossary11 terms

The meanings carried by the highlighted terms in this chapter.

Bounce
An email the receiving server couldn't deliver. A hard bounce usually means the address or domain doesn't exist and should be suppressed from future sends. Cold outreach: contact the right person (and for a reason)
DKIM
DomainKeys Identified Mail. It adds a cryptographic signature that receiving services can check to confirm that the message was authorized by the sending domain. Cold outreach: contact the right person (and for a reason)
DMARC
Domain-based Message Authentication, Reporting and Conformance. It tells receiving services what to do when SPF or DKIM checks fail and can send reports to the domain owner. Cold outreach: contact the right person (and for a reason)
Email authentication
The technical records that help an inbox provider verify the sender. SPF, DKIM and DMARC are the main records covered in this chapter. Cold outreach: contact the right person (and for a reason)
Inbox preview
The opening text many email clients display beside or beneath the subject line before the email is opened. Cold outreach: contact the right person (and for a reason)
Opt-out
A request to stop receiving marketing messages. The address should be added to a suppression list so it isn't contacted again by mistake. Cold outreach: contact the right person (and for a reason)
PECR
The UK's Privacy and Electronic Communications Regulations. Among other areas, they govern direct marketing by email, text and similar electronic messages. Cold outreach: contact the right person (and for a reason)
Sending subdomain
A subdomain used for one type of email, such as `outreach.example.com`. It still belongs to the real business and needs its own correct authentication. Cold outreach: contact the right person (and for a reason)
SPF
Sender Policy Framework. It lists the services authorized to send email for a domain. Cold outreach: contact the right person (and for a reason)
Suppression list
A record of addresses that mustn't receive future outreach because they opted out, bounced or otherwise need to be excluded. It prevents those addresses from being added back during a later import. Cold outreach: contact the right person (and for a reason)
Trigger
A recent public event that creates a credible reason to contact somebody, such as a relevant hire, expansion, launch or tool change. A trigger supports a question; it doesn't prove that the person has a problem. Cold outreach: contact the right person (and for a reason)

Alice Bull

Author · Last reviewed 17 September 2026

Sources

  1. Tincture strategy corpus, Founder-Led Outbound Sequences and Commercial Copy and Conversation Starter Library, updated in PR #1735, merged September 17, 2026.
  2. Instantly, Cold Email Benchmark Report 2026, checked September 17, 2026.
  3. Google, Email sender guidelines, checked September 17, 2026.
  4. Yahoo Sender Hub, Best practices, checked September 17, 2026.
  5. Microsoft, Strengthening Email Ecosystem: Outlook's New Requirements for High-Volume Senders, April 2, 2025.
  6. UK Information Commissioner's Office, Business-to-business marketing, checked September 17, 2026.
  7. U.S. Federal Trade Commission, CAN-SPAM Act: A Compliance Guide for Business, checked September 17, 2026.
  8. European Commission, When does the General Data Protection Regulation apply?, checked September 17, 2026.
  9. European Data Protection Board, Guidelines 1/2024 on processing of personal data based on Article 6(1)(f) GDPR, adopted October 8, 2024.
  10. EUR-Lex, Directive 2002/58/EC, Article 13, consolidated December 21, 2020.