Article
Cold Email vs Spam: 2026 Best Practices for Inbox Success
martal.ca
Quoted on this wiki
Every place a page here uses this source, in the order the words come in it.
Is cold email still legal? “In the United States, yes. CAN-SPAM permits commercial email without prior consent, and the Federal Trade Commission states that the law makes no exception for business-to-business mail, so every requirement applies to B2B outreach.” What did the anti-abuse industry decide about cold email?
Canada: CASL “CASL requires consent, express or implied, before you send commercial email to a Canadian recipient.” Express consent means the person actively agreed. Implied consent covers a narrower set of situations: an existing business relationship, or a business address published conspicuously without a statement refusing unsolicited mail, where your message relates to the person’s role. Cold prospecting into a purchased Canadian list falls outside both.
Canada’s Anti-Spam Legislation is the strictest of the three regimes, and it inverts the American default. CASL requires consent, express or implied, before you send commercial email to a Canadian recipient. “Implied consent covers a narrower set of situations: an existing business relationship, or a business address published conspicuously without a statement refusing unsolicited mail, where your message relates to the person’s role.” CASL also requires clear sender identification and an unsubscribe mechanism honored within 10 business days, and it is worth keeping records of when and how consent was obtained. As law firm Borden Ladner Gervais sets out in its review of CASL enforcement, penalties reach up to $1 million CAD per violation for individuals and $10 million for organizations, and the Canadian regulator has issued multi-million dollar penalties in practice.
Express consent means the person actively agreed. Implied consent covers a narrower set of situations: an existing business relationship, or a business address published conspicuously without a statement refusing unsolicited mail, where your message relates to the person’s role. Cold prospecting into a purchased Canadian list falls outside both. “CASL also requires clear sender identification and an unsubscribe mechanism honored within 10 business days, and it is worth keeping records of when and how consent was obtained.” Because of this, many teams reach Canadian prospects through calls and LinkedIn outreach first and reserve email for contacts who have engaged. That constraint shapes campaign design more than it limits it. Working with Berger-Levrault, a France-based HR and ERP software provider entering North America, we built outbound sequences into both the US and Canada using email, calls and LinkedIn in combination, with channel mix varying by jurisdiction. The program delivered over 85 MQLs a month and 12 sales-ready leads, five of which produced tangible traction and two of which were significant enough on their own to justify the full campaign investment.
Write an honest subject line. A cold email subject line that overstates or misleads will earn opens and complaints in roughly equal measure. Straightforward and specific outperforms clever, and it keeps you inside CAN-SPAM’s requirement that subjects reflect content. “A strong cold email introduction establishes relevance in the first sentence. Company boilerplate belongs lower down, if at all.” Keep the format plain. Mostly plain text with minimal formatting outperforms a designed cold email template for this use case. Heavy HTML, image-heavy layouts and large attachments all raise filter scrutiny and read as marketing rather than correspondence.
Content will not rescue a broken setup, but it will break a working one. The goal is a message a professional would plausibly send to another professional. “Effective cold email personalization references something specific and verifiable: a technology in their stack, a role they are hiring for, an expansion they announced, a problem typical of their segment.” Write an honest subject line. A cold email subject line that overstates or misleads will earn opens and complaints in roughly equal measure. Straightforward and specific outperforms clever, and it keeps you inside CAN-SPAM’s requirement that subjects reflect content.
Use a subdomain of your real domain. Send from something like sales.yourcompany.com rather than a separately registered lookalike. Reputation stays contained, and the relationship to your business is verifiable. “Publish DMARC at a minimum policy of p=none and make sure alignment passes.” Ramp volume gradually. Start at 20 to 50 messages a day and increase steadily over four to six weeks, watching bounce and complaint rates as you go. Avoid warm-up services that simulate opens and replies. M3AAWG names artificial engagement simulation as particularly egregious, and it is the kind of signal providers have become good at detecting.
Use a subdomain of your real domain. Send from something like sales.yourcompany.com rather than a separately registered lookalike. Reputation stays contained, and the relationship to your business is verifiable. “SPF lists which servers may send for your domain, DKIM signs messages so tampering is detectable, and DMARC tells receivers how to handle mail that fails.” Ramp volume gradually. Start at 20 to 50 messages a day and increase steadily over four to six weeks, watching bounce and complaint rates as you go. Avoid warm-up services that simulate opens and replies. M3AAWG names artificial engagement simulation as particularly egregious, and it is the kind of signal providers have become good at detecting.
Value to the recipient. Cold email: addresses a problem the recipient plausibly has. Spam: promotes the sender’s offer with no reference to the reader’s situation. “Personalization. Cold email: built from real details such as a company’s tech stack, funding round, hiring pattern, or recent announcement. Spam: merge tags, broken fields, or generated variation that changes the wording without changing the relevance.” Sender identity. Cold email: a real person at a real company, sending from a domain that plainly belongs to that company. Spam: obscured or spoofed headers, throwaway domains, free webmail accounts.
Unsolicited bulk email (UBE) is the industry-standard definition of spam: mail sent without verifiable permission, as part of a batch of substantively identical messages. “Sender reputation is the score mailbox providers assign a domain and IP based on authentication, complaint rates, bounces, and recipient engagement.” Spam complaint rate is the share of delivered messages that recipients manually report as spam.
Why do relevant-looking emails still get reported? “Because relevance is judged by the recipient, not the sender.” How much spam is out there?
Is cold email still legal? “In the United States, yes. CAN-SPAM permits commercial email without prior consent, and the Federal Trade Commission states that the law makes no exception for business-to-business mail, so every requirement applies to B2B outreach.” What did the anti-abuse industry decide about cold email?
What actually separates cold email from spam? “Consent and scale, not tone or effort.” Did the rules change going into 2026?
Which single metric decides whether you keep sending? “Your spam complaint rate.” Why do relevant-looking emails still get reported?
Which single metric decides whether you keep sending? “Google sets 0.1% as the working target and 0.3% as the ceiling, and crossing it costs you access to mitigation until you hold below 0.3% for seven consecutive days.” Why do relevant-looking emails still get reported?
What actually separates cold email from spam? “The definition blocklist operators use is unsolicited bulk email, so a polished, personalized message still counts as spam if it went to a list that never agreed to receive it.” Did the rules change going into 2026?
What did the anti-abuse industry decide about cold email? “In November 2025, M3AAWG, whose members include Google, Microsoft, Apple and Yahoo, published a position naming deceptive delivery as abusive: lookalike domains, extra sending accounts used to dodge volume limits, and artificially simulated engagement.” Which single metric decides whether you keep sending?
Segment by problem, not by industry alone. A CFO and a VP of Sales at the same company have different problems, and a message that addresses neither specifically will be read as a broadcast. Effective lead segmentation groups contacts by the problem you are addressing. “Contacts who have not engaged in six to twelve months should be revalidated before further outreach.” Across wildly different industries, deal sizes and buying cycles, the pattern is consistent: teams that cut list size and raise verification standards see complaint rates fall and reply rates rise at the same time. It is the least glamorous fix available and reliably the most effective one.