Cold outreach: what it is, the channels, the rules and what good looks like

This page is for founders, SDRs and account executives who contact people they haven't met: what cold outreach is, how the channels compare, the rules that apply in the US and UK, and what a good first message looks like. It's general information, not legal advice.

What cold outreach means

Cold outreach is a first contact with someone who has no relationship with you and hasn't shown interest in hearing from you. It's how outbound sales starts conversations: you choose the company and the person, then reach out first.

Cold outreach is one channel of outbound sales, which also covers the roles, process and metrics around it.

The channels compared

The rules in the US

Email. The FTC's CAN-SPAM guide says the law "makes no exception for business-to-business email." Every commercial message needs:

• Accurate "From", "To" and routing information, and a subject line that isn't deceptive
• Identification as an ad where it is one
• Your valid physical postal address
• A clear way to opt out, honored within 10 business days, including for messages vendors send for you

Each violating email can bring a penalty of up to $53,088. Mailbox providers add their own rules: Google requires every sender to authenticate with SPF or DKIM and keep reported spam below 0.3%, and senders of more than 5,000 messages a day to Gmail must also set up DMARC.

Calls. The FTC says most calls between a telemarketer and a business are exempt from the Telemarketing Sales Rule. The exemption doesn't cover calls selling nondurable office or cleaning supplies, or calls asking employees to buy for themselves. Since a March 2024 amendment, the rule's ban on misrepresentation applies to business-to-business calls too: be accurate about who you are and why you're calling.

Autodialers, recordings, AI voices and texts. FCC rules prohibit calls to mobile numbers using an automatic telephone dialing system or an artificial or prerecorded voice without the called party's prior express consent, and telemarketing calls of that kind need prior express written consent. In February 2024 the FCC confirmed that AI-generated voices count as artificial voices under the TCPA, and it applies the law to text messages as well as calls. The national do-not-call registry protects residential subscribers, so a rep's personal mobile, found through an enrichment tool, can be on it.

LinkedIn. LinkedIn's User Agreement prohibits using bots or other unauthorized automated methods to access the service, add or download contacts, or send messages. Keep LinkedIn outreach manual.

The rules in the UK

The ICO says the PECR rule on electronic mail marketing doesn't apply to corporate subscribers (companies and some partnerships), so you don't need their consent to email them. You must still identify yourself and give a working way to opt out. Sole traders and some partnerships are treated as individuals and need consent or a soft opt-in. And the UK GDPR still applies: a named person's work email address is personal data, so you need a lawful basis and must tell people where you got their details. For live marketing calls to businesses, the ICO says to screen numbers against both the Telephone Preference Service and the Corporate Telephone Preference Service, plus your own do-not-call list.

What good looks like

Good cold outreach passes five tests:

1. Fit. The company matches your customer profile and the person owns the problem.
2. A reason that's true and recent. One checked fact from the last six months: a new site, a hire, a contract, a launch.
3. About them. Most of the message is about their situation; one line is about what you do.
4. A small ask. A question they can answer in one line, not a 30-minute meeting.
5. Easy to decline. A clear opt-out and no pressure.

Subject: [the fact, in a few words]

Hi [first name],

I saw [company] [the fact, with when it happened].

When [type of company] does that, [role]s usually find [the problem it creates].

We help [similar companies] with [the outcome], for example [one specific result you can share].

Is [the problem] on your list this quarter, or is it handled?

[Your name]
[Company, postal address]
If you'd rather not hear from me, reply "no thanks" and I won't write again.

Hi [first name], saw [company] [the fact]. I work with [role]s at [similar companies] on [problem]. Happy to connect either way.

LinkedIn caps connection notes at 200 characters, and members without Premium can add a personal note to only three connection requests a month, so save notes for your best-fit accounts.

Worked example: rewriting a cold email

Illustrative example. The companies, people and facts are invented.

A rep at Compass Corporate Travel (compasstravel.example) wrote to the finance director of Lakeshore Engineering (lakeshore.example), a 600-person firm.

Before:

Hi Dana, I hope this finds you well! Compass is a leading travel management company offering end-to-end solutions for businesses of all sizes. We'd love to set up a 30-minute call to show you how we can transform your travel program. When works for you?

After:

Subject: Lakeshore's new Houston office

Hi Dana, I saw Lakeshore opened a Houston office in August and is hiring 40 engineers there. When a firm splits staff across two cities, travel between offices often jumps before anyone sets a policy for it. We help engineering firms of your size cap that with a simple trip-approval rule and negotiated hotel rates near each office. Is inter-office travel on your radar yet, or too early?

What changed: the opener is a fact about Lakeshore with a date. The problem is one Dana can confirm or correct. The description of Compass shrank to one line. The ask became a question she can answer in five words. Every claim can be checked.

Finding that fact for each account is the slow part. Bebop researches each account in a list and drafts outreach that opens with what's happening at the company, which you then check before sending.

How to judge your cold outreach

For reply rates traced to their original data, see the cold email statistics.

Common mistakes

• Opening with yourself. "We're a leading provider" gives the reader nothing to respond to.
• Fake familiarity. "Following up on our conversation" when there wasn't one breaks trust, and on a call it's misrepresentation.
• Personalization that isn't. A first name and company name merged into a generic template isn't a reason.
• Asking for too much. A meeting request from a stranger is a big ask; a question is a small one.
• Ignoring opt-outs across sequences, tools or team members.

Next step: write your own first message with the guide to writing a cold email.