Most cold outreach fails because it is written like marketing: a list of features, a logo, three links, the same text for everyone. The recipient treats it as a newsletter they never signed up for, and so does the spam filter. Below: what the first message should do instead, what personalisation really means, and where the legal lines sit in the US, UK and Czechia.
What makes outreach cold?
Outreach is cold when the recipient has never interacted with you: no form filled in, no earlier conversation, no introduction. They did not ask to hear from you. That one fact shapes everything else. You have a few seconds of attention, no trust to spend, and a filter that cannot easily tell an unknown sender from a phishing attempt.
Warm outreach is different: the person attended your webinar, replied before, or was introduced by someone they know. The same message that works warm often fails cold, because it assumes context the recipient does not have.
What should the first message do?
The first message should give one reason to talk today and ask for one small next step. Leadspicker's writing guidance reduces it to three rules: have a reason for writing to this person today, personalise with something real, and aim for the meeting, not the deal. The product is mentioned in passing, as context, not as the subject.
If you cannot say in one sentence why you are writing to this person now, you are not ready to send. A reason might be a new hire in their team, an expansion into a new market, or a technology they just adopted. The ask should be a short call, not a demo request or a purchase.
- Reason for today: one sentence on why now.
- One real detail: something specific about them or their company that shows you looked.
- One sentence on the product: context, not a pitch.
- One ask: a short call or a reply, nothing bigger.
- Plain text: no images, no logo, at most one link.
- Relevant role: the person can act on the problem you describe.
- Opt-out without a footer link: the FTC and ICO texts require a working way to opt out; a plain sentence such as "reply 'no' and I will not write again" meets that without a tracked link.
The regulators' own texts are the reference for the legal limits: the FTC's CAN-SPAM Act Compliance Guide, the ICO's guidance on electronic mail marketing and ÚOOÚ's FAQ on Act 480/2004. On writing, Gong Labs (2023, vendor data from more than 30,000 emails) is the clearest public evidence that one-to-one personalisation raises replies.
What does personalisation mean here?
Personalisation means a detail that could only apply to this recipient. "Hi {{first_name}}" is a mail merge, not personalisation. A sentence about the role they are hiring for, or the tool their team moved to last quarter, is. The detail has to be true and recent, or it reads as a template with a variable in it.
It pays off. Gong Labs analysed more than 30,000 cold emails in 2023 and found that one-to-one personalisation more than doubled reply rates among non-managers. The practical way to do it at scale is to write the message once by hand and generate only the one clause that must differ per recipient. Leadspicker's guidance is that a fully generated message is recognisable on first read, and once it is recognised the message is dead.
What are the legal limits in the US, UK and Czechia?
The rules differ by country, and none of them is a blanket permission. This section quotes the regulators; it is not legal advice.
- United States: the FTC's CAN-SPAM guide states there is no exception for business-to-business email. Every message needs an opt-out, and opt-outs must be honoured within 10 business days.
- United Kingdom: the ICO's PECR guidance allows marketing email to corporate subscribers without prior consent, provided you identify yourself and offer an opt-out. Sole traders and some partnerships are treated as individuals and need consent.
- Czechia: the data protection authority ÚOOÚ, in its FAQ on Act 480/2004, says the law does not distinguish between types of recipient, and that an address being publicly listed does not by itself permit sending commercial messages to it.
In each of these texts, relevance to the recipient's role is part of the assessment, which is another reason to keep the list narrow.
How does cold outreach differ from cold email and cold calling?
Cold outreach is the umbrella term. Cold email and cold calling are two of its channels, and a message on a social network is a third. The rules on this page apply to all of them: a reason, a real detail, a small ask. What differs is the mechanics. Email depends on domain reputation and deliverability. A call depends on a direct number and a good opening line. Most teams combine channels in a sales cadence, so that one person sees a consistent story across two or three touches.
Leadspicker's guidance is to write the message once by hand and use AI only for the one personalised clause, never for the whole message, because native speakers spot generated text immediately.
Frequently asked questions
Is cold outreach the same as spam?
No, but it becomes spam when it is sent widely to people it does not concern. A relevant, plain, one-to-one message to someone whose role it fits is outreach. The same text sent to thousands of unrelated addresses is spam in practice, whatever the law says.
How long should a cold message be?
Short enough to read in one glance on a phone: a reason, one detail, one sentence on the product and a question. If it needs scrolling, cut it.
Can AI write cold outreach?
AI can write the personalised fragment, such as one opening line about the company. It should not write the whole message, because fully generated text is recognisable on first read and loses the reader.
- FTC, CAN-SPAM Act: A Compliance Guide for Business
- ICO, Electronic mail marketing (PECR guidance)
- ÚOOÚ, Často kladené otázky k zákonu č. 480/2004 Sb.
- Gong Labs, 4 data-backed ways to increase your email reply rate (2023)
- GTM playbook for 2026 by Leadspicker, chapters: Writing cold outreach that works; Spintax; AI personalisation