Cold outreach versus marketing email: law, domains and targeting

Fibvo editorial · 2 February 2026 · 5 min read

A business development executive buys a database of logistics managers, uploads it to the newsletter platform and sends a sales pitch to everyone on it. Within a fortnight, newsletter clicks fall and a regular customer asks why your invoice went to spam. Cold outreach and marketing email can look alike in an inbox, but they sit under different rules and carry different risks. Treating them as one channel damages both.

Two kinds of email with different jobs

Marketing email goes to people who asked for it or already have a relationship with you: subscribers, customers and people who made an enquiry. It is usually sent through an email platform, with an unsubscribe link.

Cold outreach goes to people who have not heard from you before. In B2B it is written to a named person because of their role, such as the logistics head at a pharmaceutical exporter, with a specific reason to think your service is relevant. Done properly, it reads like a short, plain-text sales letter to one person or a small group with the same problem.

A cold contact who replies with interest is still not a newsletter subscriber. The two lists stay separate unless the person chooses to join.

Where the recipient is decides the rules

This is general guidance, not legal advice; check with a lawyer before starting outreach in a new market.

• India: there is no dedicated anti-spam law for email, but a named person's work email address counts as personal data under the DPDP Act, whose notice and consent duties are being phased in under the DPDP Rules 2025. The Act excludes data that people have made public themselves, but a purchased database or a guessed address is not that. Unlike GDPR, it has no general legitimate-interest ground for marketing, so consent is the safe basis to plan for.
• United States: CAN-SPAM is an opt-out law. It permits unsolicited commercial email without prior consent, provided the headers and subject line are accurate, the message is identified as commercial, it includes your physical postal address, and opt-outs are honoured promptly, within ten business days at most.
• Canada: CASL requires consent, express or, in limited cases, implied. Implied consent can cover a business address published openly, such as on a company website without a statement refusing unsolicited messages, where your email relates to the person's role.
• United Kingdom: unsolicited marketing email to corporate addresses is allowed if you identify yourself and offer an opt-out, but sole traders and some partnerships are treated as individuals and need consent.
• European Union: GDPR works alongside each country's ePrivacy rules, so the position varies. Germany, for example, expects prior consent even for business contacts, while others permit relevant B2B email under GDPR's legitimate interests basis. You must tell people where you obtained their details, at the latest in your first message.

Why outreach needs its own sending domain

Even well-targeted cold email draws more ignored messages and more spam reports than email people asked for. Mailbox providers track reputation largely by domain. If outreach, newsletters and staff email all go out from yourcompany.com, a bad week of outreach can push quotations and invoices into spam.

• Staff email, quotations and invoices stay on your main domain.
• Marketing email goes through your email platform, authenticated on your main domain or a subdomain of it.
• Cold outreach goes from a separate but clearly related domain, with its own mailboxes and its own SPF, DKIM and DMARC records, warmed up gradually before any campaign.
• The outreach domain redirects to your main website, and every email carries your real company name, a real person's name and your postal address.

A separate sending domain protects your invoices from your outreach; it must never hide who is writing.

Using lookalike domains to disguise the sender, or rotating through new domains to escape complaints, is the behaviour spam filters are designed to catch.

A reason to write that the recipient would accept

The test is whether you could tell the recipient exactly why they received the email, with a reason other than being on a list. 'You manage imports for a company that brings temperature-sensitive goods through Nhava Sheva, and we run reefer container services on that route' passes. 'You work in logistics' does not.

• Build small lists by hand from places where people present themselves professionally, such as company websites, industry directories and exhibitor lists, and note where each contact came from.
• Verify addresses before sending instead of guessing a pattern and absorbing the bounces.
• Open with their situation, not your company history.
• Do not fake familiarity. A subject line starting with 'Re:' when there was no earlier message misleads the reader, and in the US a deceptive subject line breaches CAN-SPAM.
• Follow up two or three times at most, several days apart, then stop. Make it easy to say no, and treat a no as ending contact from everyone in your team.
• Keep daily volume per mailbox modest, so each message remains one a person wrote and can answer.

Judge outreach by replies and meetings, not opens

Count replies and meetings booked, not opens or emails sent. Open figures are unreliable, as some mail apps load images automatically and others block them. A campaign that reaches many people and hears back from few has a targeting problem, and more volume only harms your domain.

Keep one shared opt-out record across every outreach domain, mailbox and salesperson, and check each new list against it before anything is sent. When someone replies with interest, move the conversation to your normal company email and log it in your CRM.

---

Written by Fibvo — Bengaluru and Erode, India — working with clients in other time zones. Questions, or think we have it wrong? Tell us.