Start with people you know.
Your first customers are probably one introduction away. Work that list before you open a prospecting tool.
Max Kolysh, a YC Visiting Partner, asked dozens of YC founders how they found their first ten customers. The first two or three came, “almost without exception,” from people the founders already knew or were one introduction away from. His reason: an early buyer is betting on a new company, so they need to trust the founder, and the people who already know you trust you most. 1
Customers one through three almost always come from your personal network.
The founder stories Lenny Rachitsky collected say the same. Gusto’s first ten “came from friends we knew who were just starting their businesses in California.” Amplitude’s first few were “connections through investors and other folks at YC.” 6 Prospecting tools, Kolysh says, “only start to matter once you have 10 to 20 quality customers.” 1 Work through your network in this order:
- People who know your work: former colleagues and managers, classmates, friends in the industry.
- Your investors and the companies they’ve backed, and your accelerator batch.
- Second-degree LinkedIn connections. Look at who your connections know and ask for introductions; one YC founder got introductions to about half the customers she closed during her batch this way. 1
- Tools that search your extended network in plain words, such as Happenstance, a YC company. 1
Make each introduction easy to say yes to. Kolysh’s rule: tell the connector who you want to meet, why that person would care, and what to say in the forwarded email. 1 Kazanjy suggests a subject like “Intro to <target contact’s name>?” and a note written so they can just hit forward. 9 Here’s the pair I’d send:
Decide who needs it first.
Write one sentence about who has the problem, then pick the group that needs a fix right now.
Pete Koomen, a YC General Partner and Optimizely’s co-founder, says to begin with a sales hypothesis: “customer X has problem Y, and our product will help them solve it.” A good one “makes prospecting easy by clarifying who you should be talking to.” 4 Optimizely’s was that marketers at small and medium tech, media and e-commerce companies wanted to run A/B tests but couldn’t without writing code.
When it comes to customers most founders don’t realize that they get to choose customers as much as customers get to choose them.
So choose on urgency, not market size. Paul Graham’s question for startup ideas works for lists too: “who wants this right now?” 11 YC’s partners put it in numbers: “recruiting 10 customers who have a burning problem is much better than 1000 customers who have a passing annoyance.” 10
Watch for the trap Koomen calls out: talking to whoever will take the call. It “selects for the people who are easiest to talk to, not the people who will be great customers.” 4 Other startups are the classic case. Gustaf Alströmer, a YC General Partner, calls them “the easiest category” to sell to 12, while other partners warn that “just because you get someone early doesn’t mean they’ll stick.” 13 My test either way: does this group have the problem today?
| Vague | Sharp enough to list |
|---|---|
| Small businesses that need marketing help | Owners of dental practices with two to ten locations in Texas who pay an agency for Google Ads and can’t tell which ads bring in patients |
| Sales teams that want better data | VPs of Sales at US Series A software companies with three or more account executives, hiring their first RevOps lead because the forecast is a guess |
| E-commerce brands | Finance leads at 50- to 250-person US Shopify brands who just posted an accounts payable job because supplier invoices are still matched by hand |
Tom Blomfield, a YC General Partner and Monzo’s co-founder, tells founders to “disqualify customers who just aren’t ready, able, or willing to buy your product.” 14 Most of that can happen before the first call. Keep a group only if:
- They have the problem today, not someday.
- Fixing it is someone’s job, and that person has “the budget and decision-making authority to buy your product,” in Koomen’s words. 4
- They’re already trying to fix it with a spreadsheet, a hire or a tool they complain about.
- You can spot them from the outside, by a sign you can search for.
- You could find 50 of them this week.
Narrow it until you can list it.
Add one filter at a time until you could name 30 companies today, and the person at each one who owns the problem.
Sometimes the right unscalable trick is to focus on a deliberately narrow market.
A narrow group is small enough to list in full, and more of the people on it need you now. Written down, it’s your ICP, short for ideal customer profile: the kind of company, and the person in it, who need you most. Build it from things you can see from outside, so each step is a filter you can search on.
- Software companies
- Series A SaaS in the US
- …with 3+ account executives
- …hiring their first RevOps lead
- Their VP of Sales
The best profiles combine size, team and a live sign of need. Pete Kazanjy, who founded TalentBin (later bought by Monster), describes a strong account as “a ~100-person organization with three recruiters and twenty open engineering requisitions.” 16 Christina Gilbert, a YC Visiting Partner and OneSchema co-founder, shows headcount working as a sign with compensation-planning software as her example: companies under about 100 people aren’t setting pay levels yet, companies over about 500 already have pay bands, so a company crossing 100 is the one to call. 3
Then choose the person. Write to the one whose job the problem is, not the one who’s easiest to reach.
If the person in question can say, ‘Well, that’s not really my job,’ then you know you have the wrong person.
Titles are where lists most often go wrong. Gilbert describes a founder selling infrastructure meant for senior engineering leaders whose list was full of developer-relations, go-to-market and customer success managers; hundreds of messages got no replies. 3 To find the right title, look at your deals: who pushed the last one to close, who signed, who paid. With no customers yet, ask who has the most to gain. Her example: a chief security officer could be fired over a breach, so device-monitoring software matters to them; an engineering manager would rather not be monitored.
Find a reason to write now.
A sign you can see, with a link, tells you who needs it this month and gives your first line a reason to exist.
Gilbert calls these intent signals: clues that a company needs what you make, like a job post or fast growth. 3 Kazanjy builds his whole list from them, “a set of characteristics that indicate potential demand for your solution.” 16 My rule: nobody gets a first message without a sign, the date you saw it and the link.
| Sign | Where to find it | A first line it gives you |
|---|---|---|
| Hiring for the job that owns the problem | Their careers page; Sales Navigator’s “Job opportunities” filter 17; Apollo; TheirStack | “Saw you’re hiring your first RevOps lead. Is the forecast still built in a spreadsheet?” |
| Fresh funding | Crunchbase; the company’s news page | “Congrats on the Series A. Are you adding reps this year?” |
| A new leader | Sales Navigator’s “Changed jobs” filter (last 90 days) | “You started as VP of Sales in September. What are you changing first?” |
| A tool they use | BuiltWith or Wappalyzer; job posts that name the tool; Apollo | “Your job post asks for Salesforce experience. Who keeps the data clean today?” |
| A public complaint | LinkedIn posts, Reddit threads, forums, reviews they’ve written | “Read your post about reps skipping CRM updates. That’s exactly the problem I work on.” |
| Asking for recommendations | LinkedIn and X posts, Reddit, Slack and Discord groups | “You asked for a forecast tool that doesn’t need reps to type. I built one. Can I show you?” |
| Using a competitor | The competitor’s customer page; G2 and Capterra reviews | “Looks like your team uses [competitor]. What would you change about it?” |
| A past user changed jobs (once you have customers) | Your customer list; their LinkedIn profile | “Congrats on the new role. Want the same setup you had at your last company?” |
YC companies built their first cold lists from signs like these:
- Retool filtered Crunchbase by “when was the last time the company fundraised and what verticals they’re in,” kept operations-heavy startups, skipped SaaS companies because they “don’t build that many internal tools,” and emailed “the CTO and VP of operations.” 6
- Vanta “emailed anyone who’d ever said the word ‘compliance’ on Bookface in the prior decade.” Bookface is YC’s internal forum. 6
- Optimizely used BuiltWith to see whether prospects ran “analytics tools and JavaScript frameworks,” signs that a company cared about its website. 4
Every product has signals like this. Your job is to discover yours.
Look where your buyers spend the day.
Work out where your buyer lives, then search by title, size and sign, not by industry alone.
Kolysh’s first question, before any tool or channel: “Where does your target customer actually spend their time?” A sales leader lives in LinkedIn and email. A truck dispatcher, a property manager or an insurance agent mostly doesn’t. One YC founder spent months on email and LinkedIn selling into a legacy industry, then went to a trade show and “closed more in three days than he had in three months of sending cold emails.” 1
| Your buyer | Where they are | How to build the list |
|---|---|---|
| Sales, marketing, finance or operations leaders | LinkedIn, email, industry newsletters | Apollo or Sales Navigator, by title, company size and a sign |
| Developers and technical teams | GitHub, Hacker News, X, Discord and Slack communities | People discussing the problem in public. GitHub’s rules forbid using its data for cold email. 19 |
| Local businesses: dentists, restaurants, shops, contractors | Google Maps, Yelp, the phone, their front door | Google Maps or Yelp by category and area; on Yelp, sort by number of reviews to find the busiest 16 |
| Consumers and online sellers | Reddit, Facebook groups, Discord, YouTube comments | Threads where people complain about the problem; answer as a person 1 |
| Buyers in older industries: insurance, logistics, property, schools | Trade shows, small conferences, associations, the phone | The attendee list, emailed ahead to book 15-minute meetings 1 |
| Other founders | Your batch, your investors’ portfolios, founder communities, X | Your network first: Brex recruited its first ten customers from its YC batch 12 |
For buyers at a desk, two tools do most of the work. Apollo “was the most common starting point” for the founders Kolysh asked 1, and Koomen says many in YC’s Winter 2024 batch used Apollo and LinkedIn Sales Navigator. 4 Apollo is a database of people and companies that also finds emails; Sales Navigator is LinkedIn’s paid search, with no emails. Two searches to copy:
- In Apollo: job titles “VP Sales” and “Head of Sales,” seniority VP, 51 to 200 employees, United States, plus a tool your buyers use, such as Salesforce. Kazanjy’s similar search (Salesforce users with 100 to 200 staff in the San Francisco Bay Area) found about 300 accounts. 16 The free plan covers basic filters; advanced filters and signals need a paid plan. 20
- In Sales Navigator: paste ("VP Sales" OR "Head of Sales" OR "VP of Sales") NOT (assistant OR intern) into the search bar, add headcount 51–200 and your region, then narrow to people who changed jobs in the last 90 days or posted in the last 30, or to companies with open jobs. 17
That’s Boolean search: exact phrases in quotes, AND, OR and NOT in capitals, parentheses to group, and no * wildcards, which LinkedIn doesn’t support. 21 A search shows at most 2,500 people, so split big ones by region or size. 22 Save each search, and LinkedIn emails you new matches every week. 23
Search widely, but reveal contact details only for people you’ll actually write to: in Apollo an email costs 1 credit and a phone number 8. 20 Check every company by hand before it goes on the list. Gilbert’s warning: search Sales Navigator for tech companies and you’ll often get IT consultancies. 3
Find emails, then check every one.
Run a few finders in turn, verify every address before you send, and keep bounces under 2%.
A bounce is an email that can’t be delivered, and too many of them hurt your sending reputation for everything after. Amazon’s email service tells its senders, “For best results, you should maintain a bounce rate below 2%”; it reviews accounts at 5% and may pause sending at 10%. 7 Hunter’s data from its own users puts the average bounce rate at 3.6%, mostly from unverified contact details, so the average sender in that data is already over the line. 26 My rule: nothing goes out unverified.
Start with your database.
Reveal the email in Apollo, or whichever database you searched. Some will come back empty or unverified.
Fall through to finders that charge only for results.
Run the empty ones through Hunter, Findymail or FullEnrich, in turn. Each charges only when it finds an address, so trying a second finder doesn’t double your bill.
Verify every address.
Put the whole list through a verifier such as MillionVerifier or ZeroBounce, including addresses a finder says it checked. Mark each one verified, risky or dropped.
Set catch-alls aside.
A catch-all domain accepts mail for any address, so no checker can confirm the person exists. ZeroBounce says these can’t be validated “without sending a real email and waiting for a bounce,” and suggests a separate group, knowing some will bounce. 27 Send them last, in a small batch, and stop if bounces climb.
Record where each one came from.
Note the tool, the date you checked and the result. You’ll need the source for the EU rules below, and it shows you which tool’s data bounces.
| Result | What it means | What to do |
|---|---|---|
| Valid | The mailbox exists | Send |
| Invalid | No such mailbox | Drop it |
| Catch-all | The domain accepts everything, so the person can’t be confirmed | Mark it risky; send last, in a small batch |
| Unknown | The mail server didn’t give an answer | Drop it, or check again in a few days |
| Role address (info@, sales@) | A shared inbox, not a person | Find the person instead; ZeroBounce marks these do-not-mail. 27 The exception is a small local business whose only address is info@. |
| Spam trap or abuse | An address flagged for catching or reporting senders | Drop it now |
Guessing is fine if you check. Aaron Epstein, a YC General Partner, points out that if everyone at a company is first name dot last name, you can probably guess anyone’s address there. 2 Run guesses through the verifier like everything else.
Your list is your CRM.
Start in a spreadsheet: one row per person, a reason to write and a next step. Move to a CRM when the sheet starts slowing you down.
A CRM (customer relationship management tool) is where you track every person, conversation and next step. You don’t need one on day one. Gustaf Alströmer, who helped start Airbnb’s growth team, says to start simple, with columns for “industry, the company, the title, the name, the email, maybe the LinkedIn,” then move to “a simple sales CRM software that tracks these conversion rates automatically.” 12 Kazanjy says the same: “just use a Google Sheet as your initial repository of prospects.” 16
| Name | Role | Company | Why now (source) | Fit | Status | Next step | |
|---|---|---|---|---|---|---|---|
| Dana Reyes | VP Sales | Northwind | Hiring a first RevOps lead (job post, Oct 14) | A | Verified | Meeting booked | Call Thu 10:30 |
| Omar Haddad | Head of Sales | Brightline | Raised a $14M Series A (Oct 2) | A | Verified | Replied | Send two times |
| Priya Raman | VP Revenue | Kestrel | Posted about messy CRM data (Oct 19) | A | Risky | Sent | Follow up Oct 31 |
| Leo Martins | Sales Director | Tally | New in the role since September | B | Verified | Ready to write | Draft message |
Add these columns too. Each answers a question you’ll ask later:
| Column | Why you want it |
|---|---|
| Group | Which test group they’re in, so you can compare groups and never mix them |
| Warm path | Who could introduce you, so introductions go out first |
| LinkedIn link | One click to their profile before you write |
| Source and date checked | Where the contact came from and when you verified it. The EU requires you to tell people the source. 28 |
| Country | Email rules differ by country |
| Touches and last touch | How many times you’ve written, and when |
| Reply type | Interested, not now, wrong person or no: what you’ll rewrite your target from |
| Opt-out date | So nobody hears from you again after asking you to stop |
Give every row a stage, and every stage a next step. Kazanjy wants stages with “crisp definitions,” and “At each stage, there should be an explicit next step.” 29 These are the stages I’d use:
- To research
- Ready: email found and verified
- Contacted
- Replied
- Call booked
- Qualified, or not a fit (write down why)
- Trial or proposal
- Won or lost
Kazanjy himself is “split on the necessity of using a full-blown CRM” for a sole founder. 9 I’d move when two of you work the same list, or when you can’t see every lead’s next step at a glance. Attio and HubSpot both have free plans (see the tools below).
Test small groups, then read the replies.
Run two to four groups of 100 to 200 people, look only for big differences, and let the replies rewrite who you target.
Work backward from what you need. Alströmer’s rule: “you cannot close five customers from 10 leads.” His example funnel starts with 500 messages and ends with about 10 calls and 2 customers. It’s an illustration, not a benchmark, but it shows the scale. 12
For a first test, Kazanjy aims for “a targeted list of 50–100 prospect accounts.” 16 With one to three people at each, that’s roughly 100 to 200 people per group. Run two to four groups, each a different kind of company or a different sign, and keep them in separate lists so you can compare them. Small and specific tends to win: in Hunter’s data from its users’ 2025 emails, sequences sent to 21 to 50 people averaged 6.2% replies, against 2.4% for 500 or more. 26
Be honest about what 100 people can tell you. Replies are rare, so small numbers swing a lot:
| People in the group | Replies | Real reply rate, probably between |
|---|---|---|
| 100 | 3 | 1.0% and 8.5% |
| 200 | 6 | 1.4% and 6.4% |
| 500 | 15 | 1.8% and 4.9% |
So read only big gaps: 8 replies against 1 is probably real, 4 against 3 is noise. Zero is different. If your real rate were 3%, the chance of no replies at all from 200 well-targeted, delivered emails is about 0.2%, so zero from 150 to 200 means something is wrong.
Even just two to three replies on 100 emails is a great place to start iterating.
Count positive replies and calls booked, never opens: Apple Mail loads tracking pixels on its own, which is why Smartlead’s benchmark of its customers’ emails leaves open rates out. Vendors’ published reply-rate averages run from 0.74% (Smartlead’s median sender) to 4.5% (Hunter’s users), so your own groups are the only benchmark that counts. 30 26 Then let the replies rewrite your target:
- Tag every reply: interested, not now, wrong person (ask who is right), no, unsubscribe, bounced.
- Compare the groups. Then compare the interested people with each other: title, company size, sign, place.
- Ask everyone who books a call what made them answer. Gilbert asks “what got your attention about my message” and reuses their words, because “Your customers are always going to write better copy than you do.” 3
- Write down every objection, word for word.
- Rewrite your one-line target, drop the weakest group, add one new group, and run the next 100.
Know the rules before you write.
Writing to people at work is allowed in many places, with conditions. This is a plain-words summary, not legal advice.
| Where | The basics in plain words |
|---|---|
| United States (CAN-SPAM) | Business email is covered: “The law makes no exception for business-to-business email.” Use an honest From line and subject, make clear it’s a sales message, include your postal address and a clear way to opt out, and honor opt-outs within 10 business days. 31 |
| European Union (GDPR) | Direct marketing “may be regarded as carried out for a legitimate interest,” weighed against what people would reasonably expect. 32 Tell people where you got their details “at the latest at the time of the first communication.” 28 If someone objects, stop for good. 33 Check each country’s own email rules before you write to people there. |
| United Kingdom (PECR and UK GDPR) | “You can email or text any corporate body,” but “Sole traders and some partnerships are treated as individuals,” so they need consent. Say who you are, give a working opt-out address and keep a do-not-email list. 34 |
| Canada (CASL) | You need consent. A published work address with no note refusing unsolicited messages counts as implied consent only when your message “is relevant to the person’s business, role, functions or duties.” 35 |
Those rules turn into a few columns. Keep them filled in for every row:
- Country.
- Where you found the contact, and when.
- Why you can write: for example, “published work address, relevant to their role.”
- Opt-out date, plus a do-not-contact list you check before every send.
Run the one-week playbook.
Five working days from a blank page to your first 20 messages, then a week of follow-ups and reading. Copy it into your calendar.
Block the time first. Gilbert’s fix for founders who never get to outbound is a plan on the calendar: how many messages a day, how long each one takes, and exactly when you’ll send them. 3
Day 1. Write the sentence and pick your groups.
Write “[who] has [problem], and we help them [result].” List two to four groups that might fit and rank them by who needs it now. For each, note the title that owns the problem, the sign you’ll look for and where those people spend their day.
Day 2. Work your warm list.
Go through former colleagues, friends in the industry, investors, your accelerator batch and second-degree LinkedIn connections. Put everyone who fits in the sheet with their warm path, and send intro asks with a note they can forward.
Day 3. Build the cold list from signs.
Take your top two groups. Search Apollo or Sales Navigator by title, size, place and sign, check each company’s website by hand, and stop at 50 companies a group with one to three people each. Note each person’s reason to write now, with the link and the date, wherever you find one.
Day 4. Find and check emails.
Run the finders in turn, verify every address, set catch-alls aside and drop the ones that fail. Fill in country, source and stage, then grade each lead: A has a clear sign and the right title, B fits but shows no sign yet (hold it until one appears), C is a maybe.
Week 2. Follow up, read, adjust.
Follow up three or four times over a couple of weeks. 1 Write the next 80 messages the same way and tag every reply. When a group passes 100, compare it with the others, rewrite your sentence, drop the weakest group and add a new one.
Before anything goes out, check each row:
- There’s a reason to write now, with a link.
- Their title owns the problem.
- The email is verified, or marked risky and held back.
- Country and source are filled in.
- The message is under 75 words, with one ask.
- You’d be glad to get it. Koomen’s rule: “only send emails that you yourself would be excited to read.” 4
The tools.
Raw tools you drive yourself, with each one’s free tier and price as listed in October 2026. For your first 20 customers, a spreadsheet, Apollo’s free plan and one verifier go a long way. I’d skip packaged AI SDR products (software sold as an AI sales development rep that builds the list, writes and sends for you) for now. Jason Lemkin, SaaStr’s founder, who runs more than 20 AI agents, says they “will not discover your ideal customer profile”; his advice is to “Get your playbook right with humans. Prove it works.” 8 A YC partner on YC’s Office Hours put it the same way: they “tend to work well when they’re plugged into a sales process that’s already working well.” 36
- Apollo
Your first cold list: people and companies by title, seniority, size, place, technology and hiring, with email lookup and a basic sequencer. The most common starting point among the YC founders Kolysh asked.
Free: 900 credits a seat a year (about 75 a month). Paid from $49 a seat a month, billed yearly (Oct 2026)
- LinkedIn Sales Navigator
Finding people by title and seniority, narrowed by signs such as a job change in the last 90 days or a post in the last 30, with weekly alerts on saved searches. No emails.
No free plan listed. Core $119.99 a month or $1,079.88 a year; Advanced $159.99 a month (US, Oct 2026)
- Crunchbase
Companies that just raised money, with alerts. It’s how Retool built its first list.
Paid plans; Pro includes alerts and exports of up to 2,000 rows a month (Oct 2026)
- BuiltWith
Lists of companies whose websites run a given tool. It’s how Optimizely found prospects.
Free for single-site lookups; lists from $295 a month (Oct 2026)
- TheirStack
Hiring signs from job posts, and the tools each company uses.
Free to start; 1,000 company credits for $109, one-time; API from $49 a month (Oct 2026)
- Exa
Finding companies and people you can describe but not filter, in plain English, such as “Series A fintechs hiring their first compliance lead.” Websets checks each result against your description.
Free: $10 of search credits a month and 25 results per Webset; search from $4 per 1,000 requests (Oct 2026)
- Hunter
Finding a work email from a name and company, and checking it. You pay only for emails it finds.
Free: 50 credits a month; Starter $49 a month, or $34 a month billed yearly (Oct 2026)
- Findymail
Email finding that returns only verified addresses, with credits refunded if bounces run over 5%.
10 free credits at signup; Starter $99 a month for 5,000 finds and 5,000 checks (Oct 2026)
- Prospeo
Finding work emails and mobile numbers; a common extra step when your main finder comes back empty.
Paid plans (Oct 2026)
- FullEnrich
One lookup that tries 25+ sources in turn. You pay nothing when it finds nothing.
Free: 50 credits; Pro $55 a month for 1,000 credits; an email costs 1 credit, a mobile number 10 (Oct 2026)
- MillionVerifier
Cheap checks for a whole list, including catch-all addresses at no extra cost.
100 free credits; 50,000 checks for $89; credits never expire (Oct 2026)
- ZeroBounce
Checking addresses with clear result codes. It flags catch-alls and doesn’t charge for unknowns.
Free: 100 checks a month with a business email; pay as you go from $39 for 2,000 (Oct 2026)
- Google Sheets
Your first CRM: one row per person, the columns that matter and a next step for each.
Free (Oct 2026)
- Attio
A modern CRM for when the sheet gets crowded, with discounts of up to 80% for eligible startups.
Free for up to 3 seats and 50,000 records; Plus $35 a seat a month billed yearly, $44 monthly (Oct 2026)
- HubSpot free CRM
A free CRM with deal stages and email tracking for a small team.
Free for up to 2 users and 1,000 contacts, no time limit; Starter $20 a seat a month, with a limited-time offer showing (Oct 2026)