Cold email still works.
The bar is low. The rules got stricter, and sounding like a real person is now the edge.
most cold emails are actually terrible, so the bar is really low for you to stand out
Two things changed. Gmail, Yahoo and Outlook now publish hard rules for senders, with numbers attached 8 9 10. And AI made generic email cheap to write, so readers and their software are getting better at spotting it. Max Kolysh, a YC Visiting Partner, says long emails get ignored and readers “assume you used an LLM to write it” 6. Pete Koomen, a YC partner and Optimizely’s co-founder, gave his own email agent a rule for sales pitches: “...trying to sell me something: archive” 11.
Cold email also isn’t where most first customers come from. Kolysh: “Customers one through three almost always come from your personal network.” 6 Epstein calls a warm intro the best outreach hack there is and estimates it converts two to three times better than cold 2. Work your network first, and use cold email for the people it can’t reach. Not sure who they are yet? Start with prospecting.
Start from your own mailbox.
Your first few hundred emails need a simple setup: you, your work address and one person at a time.
This is the stage YC partners describe, and where I’d start: tens of emails a day, not thousands. Epstein’s rough math says founders need “dozens of emails per day, possibly even 50 per day” to see results 2. Christina Gilbert, a YC Visiting Partner who closed millions of dollars in founder-led sales at OneSchema, recommends doing at least your first 100 by hand, so you learn who replies and why 1. Koomen’s version: “Start by writing each email by hand.” 12
- Send from your own work address, with your name in the From line. Epstein: the From “should just be your personal name.” 2
- Turn on SPF and DKIM for your domain and add a basic DMARC record (all three are explained in the next section). Gmail requires every sender to have at least SPF or DKIM 8.
- Check every address with a verifier before you send, and keep bounces under 2% 13.
- Write each email to one person, about them. No mail merge with the name swapped.
- Plain text, like a note to a colleague. Gustaf Alströmer, a YC partner: “Write your email in plain text only, like you would write it to a friend.” 14
- Keep a simple sheet: who you emailed, when, what they said, and who asked you to stop.
Protect your domain when you scale.
When you send more, or start testing campaigns in a sending tool, move the sending off your main domain.
Your main domain carries your company’s everyday email. Separate sending domains keep its reputation “from being damaged if your emails are marked as spam,” as Clay’s deliverability guide puts it 3. Most of this is an afternoon’s work.
- 2–3 separate domainsgetacme.com, tryacme.com. Each redirects to acme.com.
- Inboxes in your nameTwo or three per domain, on Google or Microsoft.
- SPF, DKIM, DMARCThree DNS records that prove the mail is yours.
- A sending toolA few dozen a day per inbox, plain text, no tracking.
- Their inboxA short, personal email from a real person.
Your main domain, acme.com, stays out of campaigns. Its reputation carries your everyday mail.
Buy two or three lookalike domains.
Variations on your name, like tryacme.com or getacme.com, each forwarding to your real site with a permanent (301) redirect, so anyone who checks lands somewhere real 3. Use separate domains, not subdomains: when Gmail decides who’s a bulk sender, it counts all mail from the same main domain together 15.
Create inboxes in your own name.
Two or three per domain, on Google Workspace or Microsoft 365. Nick Abraham, who runs the lead-generation agency Leadbird: “Always use Google or Microsoft accounts - most trusted and stable.” 4 Smartlead’s data from its own customers agrees: Gmail senders got about twice the replies per contact of custom mail servers (a correlation, not a test) 13.
Add the three records.
SPF is a public list of the servers allowed to send email for your domain. DKIM puts a signature on each email that proves it came from you and wasn’t changed on the way. DMARC tells inboxes what to do when an email fails those checks and sends you reports; start with the monitoring-only setting (p=none). Gmail and Yahoo require all three once you send in bulk 8 9. If DNS settings are new to you, this is the step to get help with.
Connect a sending tool.
Instantly or Smartlead sends from all your inboxes in turn, schedules follow-ups, stops them when someone replies and gathers the replies in one place. Set each inbox to a low daily number and leave it there.
Send plain text, with nothing tracked.
Turn off open tracking, and keep links and attachments out of the first email. Abraham: “Plain text-only. No open tracking, links, or attachments. This just ruins deliverability.” 16
The domain name matters less than people think. Abraham, who says his agency runs more than 125,000 inboxes 4, has tested branded against unbranded domains at scale: “Branded domains matter way less than people think.” He says sender names barely matter either 7. I’d still send as yourself: it’s honest, it’s what YC partners tell founders to do, and US law requires the From line to identify who sent the email 17.
Pre-warmed inboxes are fine. A brand-new inbox on a brand-new domain has no sending history, so sending tools usually warm it up first with automated back-and-forth mail. Pre-warmed inboxes come with that history; Zapmail sells them as a way to “Skip 3 to 4 weeks of warmup” 18. Check three things before you buy:
- Who owns the domain. Instantly says of its pre-warmed accounts: “We currently retain domain ownership and administrator access.” 19 That’s fine for a test. For anything long-term, I’d want domains I own.
- Whose name is on the inbox. Smartlead’s pre-warmed mailboxes come with “personas already assigned,” and the names can’t be changed 20. Send as yourself, or don’t send.
- How much each one sends. Even vendors who sell them cap it: Instantly recommends at most 20 to 25 emails a day per account 19. Pick a low number, keep it fixed, and add inboxes when you want more volume instead of pushing one harder.
How many inboxes you need. Count follow-ups too. Say you want to reach 50 new people a day with a first email and two follow-ups. Once it’s running, that’s up to about 150 emails a day. At 15 per inbox, close to the median of 14 in Smartlead’s data 13, that’s 10 inboxes: four or five domains with two or three inboxes each, so more domains than the two or three you’d start with. That’s my arithmetic, not a rule.
Stay out of spam.
The big mailbox providers publish their rules. Meet them, and most deliverability problems never start.
- Verify every address and keep bounces under 2% 13.
- Send catch-all addresses separately, or skip them. These are company mail servers that accept any address, so a checker can’t confirm the person exists 4.
- Never buy a list. Google: “Don’t purchase email addresses from other companies.” 8
- Keep spam complaints under 0.1%, and never let them reach 0.3%, which is 3 reports per 1,000 emails 8.
- A low, fixed number of emails per inbox per day.
- Plain text. No images, attachments or open tracking, and no links in a first email you send at volume.
- An easy way out in every email, like “If this isn’t relevant, tell me and I won’t write again,” honored right away.
- Only people with a real reason to hear from you. Relevance is what keeps complaints down.
| Provider | The rule |
|---|---|
| Gmail, every sender | SPF or DKIM, a secure connection, valid DNS records, and spam complaints below 0.3% (ideally below 0.1%) 8 |
| Gmail, bulk senders (about 5,000 a day to personal Gmail) | SPF and DKIM, DMARC, and one-click unsubscribe on marketing mail, honored within 48 hours. All mail from your main domain counts toward the 5,000, and bulk status is permanent 15 |
| Yahoo | Everyone: SPF or DKIM and a spam rate below 0.3%. Bulk senders: SPF and DKIM, DMARC, and one-click unsubscribe honored within 2 days 9 |
| Outlook.com | Domains sending over 5,000 a day must pass SPF, DKIM and DMARC, or their mail is rejected (since May 2025) 10 |
Most founders never get near 5,000 a day, so the bulk rules may not strictly apply to you. The rules for every sender do, and one careless campaign can cross 0.3%. Gmail also says it started “ramping up its enforcement on non-compliant traffic” in November 2025 15.
Google’s own stance, honestly. Google doesn’t endorse cold email. Its sender guidelines say “Don’t send messages to people who didn’t sign up to get messages from you” 8. Google Workspace’s terms ban using it for “unsolicited mass email” 22, and accounts that send spam “might be permanently restricted from sending email” 23. My read: what survives is mail people don’t mind getting, meaning relevant, one to one and low in volume. That’s the only kind of cold email I’d send anyway.
Lead with the offer.
What you offer matters more than how you word it. Make it about their result, not your product.
Gong, which sells sales software, analyzed more than 28 million cold emails and found that “Pitching reduces reply rates by as much as 57%.” 24 Gilbert’s version: executives don’t care that your database is built in Rust; they care about hitting their quarterly target, so she keeps the product explanation to one sentence 1.
Great offers > great personalization. A 10-step Clay workflow will not save a mediocre offer.
Abraham’s formula: “The best offers have a quantifiable end result, risk reversal, and social proof.” 5 In plain words:
| Part | What it means | Example |
|---|---|---|
| A result | Something they can picture: a number, time saved, a problem gone | “Close your books in 3 days instead of 10” |
| Less risk | A reason yes is safe: money back, an easy opt-out, or a free piece of work like an audit | “If it doesn’t save you a week in month one, you don’t pay” |
| Proof | A customer they’d recognize, or your relevant background if you don’t have one yet | “like we did for Parkview Dental” |
Two refinements. A name they know beats a bigger number from a company they don’t, Abraham says 7. And for business customers, Gustaf Alströmer would skip the free trial: “Go for a money-back guarantee and go for the ability to opt out instead.” 14
Size the ask to what you have:
- Nothing to sell yet: ask for advice about how they handle the problem today. Only if it’s true. Kolysh: “If you’re not actually open to learning from them and you’re just trying to disguise a sales call, don’t do this.” 6
- A product, no customers: offer something useful first, like a short audit or a finding about their business, then ask for 15 minutes. Kolysh calls 20 minutes of work before asking for someone’s time “quite a reasonable trade.” 6
- A few customers: the full offer, with a result, less risk and a name they know, and a 15-minute call.
The smoothie-party rewrite. Aaron Epstein shows this with a YC company that sold office smoothies. Its first email was about the founders: they were in the YC batch, hustling to hit their Demo Day goal, and asked to be forwarded to the office manager. Epstein: “It’s less clear what’s in it for the recipient.” The rewrite offered the whole team a free smoothie party in return for feedback, and it “helped get them in the door” for long-term deals 2. The full email is in the examples below.
Write it like you’d say it.
Under 75 words, plain words, one ask. If it sounds like a template, rewrite it.
- A short subject about their world. A few words; lowercase is fine. Epstein’s examples: “Hey quick question,” “Can I get your advice,” “Help a fellow founder.” 2 For an agent company Gilbert worked with, “broken agents” beat the more descriptive “better agents for every workflow.” 1
- Open with them. A fact about their company, not your name and title. The first few words also show as the preview in Gmail 1.
- One clause of proof. A customer they know, or why you of all people understand the problem.
- One ask, on its own line. About 15 minutes by phone or video, or a yes to something you’ll send.
- Under 75 words. That’s Kolysh’s limit, and Abraham’s too. 6 5
Casual is fine. Epstein takes “hey” more seriously than “Hello Mr. Epstein,” and says you can even have “no capitalization. Typos can be okay.” Both tell him a human wrote it 2. A typo won’t hurt you; just never in their name, their company or a number. One caution: Lavender, an email-writing tool, finds in its own data that “neutral-slightly formal emails receive 11% more replies” 25. So casual should mean plain words and contractions, not sloppy.
Read it out loud. Kolysh’s one-minute test: “Find a friend and just read your email out loud to them.” 6 Abraham’s: “If you wouldn’t say it to a friend, don’t say it in a cold email.” 26 Cut anything you’d never say to a person: “I hope this finds you well,” your job title, a paragraph about your company, a feature list, “just circling back.”
only send emails that you yourself would be excited to read.
Personalize with what you found.
A real fact about their business, tied to the problem you solve. Not a compliment.
Abraham’s test: “never send a cold email (for yourself or your client) that can be sent to another person and still make sense.” 27 Generic praise fails it. Epstein’s example: “hey, love what you’re doing at Creative Market” reads like his company’s name dropped into a placeholder, while “I’m a huge Creative Market fan ever since you launched the photos category” shows the sender actually looked 2.
| Reads like a template | Reads like you looked |
|---|---|
| “Loved your recent post.” | “Saw you’re hiring three account executives in Denver.” |
| “I see you’re a leader in fintech.” | “Your careers page went from 4 open roles to 11 since the Series A.” |
| “As a fellow Michigan alum…” | “Two of your recent Glassdoor reviews mention a rough first month for new reps.” |
The best findings are recent and tied to the problem: a job post, a funding round, a new leader, the tools they use, a gap you can see on their site, a complaint in their reviews (more on finding these in prospecting). Eric Nowoslawski, who runs the outbound agency Growth Engine X, warns that unrelated “attention hacks,” like where someone went to college, reveal “that you’re using automation, yielding nothing but eye rolls.” 28 A shared past still works when it’s specific and rare: Epstein answered a stranger’s LinkedIn message that noticed they’d both had classes in the same campus building. 2
This is the part to hand to AI. Abraham: “AI has made deep segmentation practical at a scale that previously required too much manual research.” 29 Let AI read each prospect’s site and posts and suggest how a finding connects to your offer. Then read the first batch yourself. Epstein’s warning still applies: language models “often struggle with a lot of this personal connection.” 2 Write your first hundred or so by hand, and automate only what works.
Learn from real examples.
Seven emails from YC partners and practitioners, plus one rewrite, with a note on what each line does.
These come from YC partners reading founders’ emails aloud and from Nick Abraham’s templates on X (he sells lead generation, so read his numbers as an agency’s). Lines in square brackets are paraphrased; templates keep their authors’ {{placeholders}}.
And one rewrite, from Abraham’s thread of before-and-afters 33. The first version opens with the sender, a statistic and a 30-minute ask. The second opens with the reader, offers proof from a similar show and takes the risk away.
“Hi {{first name}}, I’m Nick, Head of Sales at Podcast Growth.AI.” Then “Did you know 50% of Marketers think their company could benefit from having a podcast?” It ends “Want to schedule 30 mins next week for a discovery call?”
“{{first name}} - noticed {{Podcast Name}} is {{position}} on {{Podcast Genre}} chart.” Then “Can I show you how we helped ABC Podcast, a similar {{Podcast Genre}} pod, jump 23 spots in 30 days?” And “PS - We can give you a free trial, no strings attached if you’d like.”
Test the list and the offer first.
Run a few campaigns side by side, change big things, and judge them by replies, never opens.
Once a first email gets some replies, split your next few hundred people into two to four groups of 100 to 200, and give each a different audience or offer. Test in this order:
- Who: the job title and the kind of company. Gilbert: “Targeting beats perfect messaging.” 1
- The offer or angle. Abraham: “The angle and offer matter much more” than small wording changes 7.
- The first line: which finding you lead with.
- The ask: interest or a specific time (more below).
- The subject line, judged by replies.
90% of copy split tests are noise. If variant A gets 2 positive replies and variant B gets 1, that is technically a 100% lift.
Why small tests lie. Send the same email to two groups of 300 at a 1% reply rate, and about half the time one will look at least twice as good by luck alone. Telling 1% from 2% reliably takes roughly 2,300 people per version (standard statistics, my arithmetic). So at founder scale, groups of 100 to 200 are for reading replies and spotting big differences, not crowning winners. At campaign scale, give each version a thousand or more; Abraham won’t even judge a sending domain on fewer than 1,000 emails and 48 hours 4.
Count the replies that matter. Open rates are noise now: Apple Mail opens emails automatically, so Smartlead doesn’t even report them 13. Abraham: “Reply rate is the only metric that matters. Everything else is vanity.” He also finds “77% of our replies are automated,” mostly out-of-office notes and people who’ve left 4. So count positive replies (interested people) and meetings booked per 100 emails. Gilbert’s yardstick: “two to three replies on 100 emails is a great place to start iterating.” 1
| Ask for interest | Ask for time |
|---|---|
| “Open to hearing more?” 4 | “Got 20 minutes to hop on a call this week?” 1 |
| Gong, which sells sales software, studied 304,174 emails, counting a meeting booked within 10 days as a win, and interest asks came out on top 34. Abraham: “Pushing for calls on first touch is dumb.” 16 | Gilbert wants a specific ask, “not, does this sound interesting to you?” 1 |
If replies stay near zero, Gilbert checks in this order: the right person, the right companies, the subject line, only then the message, then your website and LinkedIn, and deliverability last. If all six look fine, she says the problem may be deeper: people may not want the product enough yet 1.
Follow up with something new.
Two to four follow-ups a few days apart, each adding something, and a fast answer when they reply.
One email isn’t enough. Epstein: “you should plan to manually follow up two, three, four times as needed,” with a few days between emails 2. In Smartlead’s data, one email earned about 12 replies per 1,000 people and a three-email sequence about 25, so a single send leaves roughly half your replies on the table 13.
Day 1: the first email.
Short, about them, one ask.
Day 4: add something useful.
In the same thread: a resource, a quick finding, or the answer to the question they’re likely to have. Never just “checking in.”
Day 8: a new angle.
Different proof, a fresh reason to talk now, or a smaller ask.
Day 13: the breakup.
Assume a polite no and make it easy to say, like Gilbert’s breakup email in the examples 1.
No one has a good study on same thread versus new thread; practitioners keep follow-ups in the same thread, and so would I. After the breakup, stop. Epstein: “Nobody owes you anything here. Just move on.” Check back in a couple of months if something changes 2.
When they reply, answer fast. In Smartlead’s data, 64% of replies arrive within an hour 13. Gilbert wants founders to be “like a heat-seeking missile” once someone replies, because “time kills deals.” 1 My rule: answer within the hour during your workday.
Know the legal basics.
Business email is regulated too. Here’s the short version by region; it isn’t legal advice.
| Where | Law | What it means for a cold email |
|---|---|---|
| United States | CAN-SPAM | No exception for business email. Accurate From and subject lines, identify it as an ad, include your postal address, give a clear way to opt out and honor it within 10 business days. The FTC’s guide lists penalties of up to $53,088 per email 17. |
| United Kingdom | PECR and UK GDPR | “You can email or text any corporate body,” but sole traders and some partnerships count as individuals, so consent rules apply to them. Don’t hide who you are, and give an address for opting out. The guidance is under review 35. |
| European Union | GDPR, plus national rules | If you got their address from anywhere but them, your first email must come with a privacy notice that says where you got it 36. Stop as soon as someone objects 37. National rules for business email differ, so check the country first. |
| Canada | CASL | You need consent. A published work address counts only if your email is relevant to their role and they haven’t said they don’t want unsolicited messages 38. |
In every cold email, wherever you send it:
- Your real name and company.
- Your company’s postal address.
- A plain way to opt out, and a do-not-email list you check before every send.
- A note in your sheet of where you found each address.
- A subject line that matches the email. No fake “Re:” on a first email; the law bars deceptive subject lines 17.
The tools.
The raw tools, what each is for, and the price listed in October 2026. At founder scale, your own mailbox and a verifier are enough; the rest is for campaigns.
- Instantly
Sending from many inboxes, with warm-up built in and unlimited email accounts
Growth $47 a month; Hypergrowth $97 a month; about 20% less yearly (Oct 2026)
- Smartlead
High-volume sending with unlimited mailboxes; also resells inboxes and placement tests
Base $39 a month for 6,000 sends; Pro $94 a month (Oct 2026)
- Google Workspace
Inboxes in your own name on Google. Its terms ban unsolicited mass email, so keep volume low
Business Starter $7 per user a month (Oct 2026)
- Microsoft 365
Outlook inboxes in your own name; Abraham finds Outlook trickier to tune than Google 4
Paid plans
- Zapmail
Google or Microsoft inboxes, fresh or pre-warmed, with a few free placement tests each month
From $39 a month for 10 inboxes; pre-warmed from $6 per inbox (Oct 2026)
- Infraforge
Private sending infrastructure, with pre-warmed inboxes available
About $4 per inbox a month (Oct 2026)
- ScaledMail
Google and Outlook inboxes in bulk, with the daily cap per inbox spelled out
Google $3.50 per inbox a month; Outlook $50 a month per domain for 25 inboxes (Oct 2026)
- MillionVerifier
Cheap checks on every address before you send
100 free credits; 50,000 checks for $89, and credits never expire (Oct 2026)
- ZeroBounce
Verification with clear results, flagging catch-all addresses so you can send them separately
100 free a month with a business domain; from $39 for 2,000 (Oct 2026)
- Scrubby
Checking the catch-all and “unknown” addresses other verifiers can’t confirm
200 free credits; paid plans (Oct 2026)
- GlockApps
Inbox placement tests: where a test email lands at each provider. Treat the results as direction, not a verdict 4
Free with 2 tests; Essential $59 a month, billed yearly (Oct 2026)
- Apollo
Finding people and their work emails; the most common starting point among the YC founders Kolysh surveyed 6
Free plan with about 75 credits a month; Basic $49 per seat a month, billed yearly (Oct 2026)