What Is Cold Email? Definition, Example and the Line to Spam

A cold email is a first message sent to one specific person who has never heard from you, for a reason tied to that person, with a request they can refuse. It is not spam, which sends one text to a list, and not a newsletter, which goes to people who signed up. In the US it is legal without prior permission if you identify yourself and honor opt-outs; in the UK, Canada and the EU it depends on who owns the address.

The definition, and the three checks hidden inside it

The phrase covers everything from a founder writing to five potential partners to a bot pushing forty thousand messages a day, and the definition that circulates does not separate the two. Wikipedia calls it "an unsolicited e-mail that is sent to a receiver without prior contact"; ActiveCampaign's glossary says "an unsolicited message sent to someone you've never contacted before". Both sentences also describe spam.

The version I use adds three checks: two you can run on the message in front of you, one on your list.

First, one named person and a reason that fits only them: their job post, their pricing page, the PDF menu on their site. If the reason fits the business next door too, it is not a reason.

Second, a sender the reader can identify and refuse: your real name, what you do, how to reach you, and one line that makes "no" easy and that you will honor.

Third, a list you built by hand. Every address is on it because you decided it should be. A file you bought fails this check before you write a word.

Meet all three and you have a cold email, whether you are selling, hiring, asking for advice or applying for an internship. Miss the first or the third and you have spam, even where the law lets you send it. The line between the two is not the tool or the count: it is whether you chose the person and could say why.

A complete example, then the same offer as spam

Both messages below are fictional, with a fictional sender. Sam builds websites for restaurants and noticed that a bistro's online menu is a scanned PDF that phones cannot search.

Subject: Your menu PDF on phones

Hi Lena,

Your autumn menu on the site is a scanned PDF. On a phone it opens
at full width and the prices are unreadable until you zoom.

I build restaurant sites. I can turn that menu into a plain web page
that loads fast and stays readable on a phone, using the PDF you
already have. I would send you a working draft first, so you can
judge it before deciding anything.

Would a draft be useful this month?

If not, tell me and I will not write again.

Sam Ortega
Web developer, Ortega Sites
[Your postal address, if your country requires one]

To adapt it, replace the observation, the offer and the signature with true details, keep the refusal line, and add what your country requires, such as the postal address and the ad disclosure listed for the US below. Now the same offer, written the way most "cold email" actually arrives:

Subject: Quick question

Hi there,

I came across your business and was impressed by what you are doing.
We help restaurants like yours grow their online presence and get
more customers. Would you be open to a quick 15-minute call this week?

Best,
The Growth Team

Run the checks. The first email names a thing only Lena's site has; the second could go to any restaurant on earth. That is the swap test: change the recipient's name, and if the email still reads fine, it was never about them. The first has a person and a way out; the second has a team and a calendar. The first can only be produced one at a time, because someone had to open the site; the second exists to be sent in bulk.

Cold Email Format: 13 Named Parts, One Job Each takes a similar message apart line by line, and Cold Email Subjects Are a Filter, Not a Hook explains why "Quick question" is the weakest line in the second one.

“

The line between cold email and spam is not the tool or the count: it is whether you chose the person.

”

Is cold email legal? What four texts say

I read these texts on September 13, 2026. I am not a lawyer; this is what they say for the US, the UK, Canada and the EU. Check your own country if it is not on the list.

In the United States, the FTC's CAN-SPAM compliance guide does not require permission before you write. It requires accurate headers, a subject that reflects the content, a clear statement that the message is an ad, your valid physical postal address (a registered PO box is allowed) and a visible way to opt out, honored within 10 business days. "Each separate email in violation of the CAN-SPAM Act is subject to penalties of up to $53,088", and the law covers all commercial messages, not only bulk sends.

In the United Kingdom, regulation 22 of PECR forbids unsolicited marketing email to individual subscribers without prior consent, with a soft opt-in for people whose details you collected during a sale. An address that belongs to a company is a corporate subscriber and falls outside that rule; a sole trader is an individual under the regulation's own definition. Regulation 23 applies to everyone: no concealing who is sending, and a valid address where the reader can ask you to stop.

In Canada, CASL requires consent, express or implied. Section 10(9) counts consent as implied when the recipient has "conspicuously published" the address you are writing to, without a statement refusing unsolicited messages, and the message is "relevant to the person's business, role, functions or duties". Section 11 gives you 10 business days to honor an unsubscribe.

In the EU, recital 47 of the GDPR says "the processing of personal data for direct marketing purposes may be regarded as carried out for a legitimate interest". That is the data-protection side only. Each member state has its own rule on unsolicited email, and I did not read them all, so treat the UK text as one national example, not the EU answer.

Mailbox providers add a rule no law writes down. Google's sender guidelines ask senders to authenticate with SPF or DKIM and to keep the spam rate in Postmaster Tools "below 0.10%", never reaching "0.30% or higher". That rate is the share of inbox-delivered messages that recipients mark as spam. A legal email that a hundred people flag is spam in the only place that decides whether your next one lands.

The one thing to do before you buy any tool

Write the first ten by hand. Choose each recipient yourself, write the reason line for each, and send from an address a reply can reach. Only then decide whether you need software, and what for. A tool can send ten hand-written emails; it cannot make a bought list pass the first check. Once volume is free, the list starts choosing the recipients and a merge tag stands in for the reason.

Two things a tool can do later without breaking the checks: send from a separate, warmed-up domain, which a service like Mailivery handles, so a flagged batch stays away from your main address; and a follow-up written after the first message with one new fact, which Follow Up Cold Email: Stop Sending Reminders covers.

What to stop calling cold email

Stop calling a bought list with merge tags cold email. In the US it may be legal once you add the address and the opt-out; it still fails the first and third checks, and Gmail scores it by how people react.

Stop calling emails to your own customers cold email. They know you, so these are marketing emails, and in the UK and Canada they run on a different rule, the soft opt-in or the existing relationship, with its own conditions.

Stop treating a job or internship request as a different animal. A student writing to an engineer at a company they admire is sending a cold email, and the same three checks apply: name what you saw, say who you are, make "no" free.

Before you send the first one, answer out loud: why this person, and not the shop next door? If the answer takes more than a sentence, you have not found your recipient yet. You have found a list.