Cold email is one of the few B2B channels that reaches accounts which would never have gone looking for you. It is also the channel with the widest gap between common practice and what the law in a given market actually permits. Anyone running cold email into Europe in particular needs both halves of the picture: what makes a message work, and what the rules where your recipient sits actually say.
In this guide we start with the legal frame, because it is stricter in parts of Europe than most guides admit. Then we cover the anatomy of a cold email that gets answered, concrete example structures, how long a follow-up sequence should be, and the mistakes that show up most often in practice.
The Legal Frame: Is B2B Cold Email Allowed?
The honest answer is that it depends entirely on where your recipient is, and the differences are larger than most senders assume.
In the United States, CAN-SPAM works on an opt-out model. Unsolicited commercial email is permitted provided the message identifies itself honestly, discloses its commercial nature, gives a valid physical address, and honors opt-out requests promptly. No prior consent is required.
In the European Union, the starting point is the opposite. The ePrivacy rules treat unsolicited electronic marketing mail as requiring prior consent, with a narrow exception for existing customers who were told at the point of collection that they could object at any time. Member states implement this differently, and some allow more room for business-to-business contact than others.
Germany sits at the strict end, and it is worth understanding why, because it is the case senders most often get wrong. German competition law distinguishes between channels. For phone outreach it explicitly separates consumers, who require express prior consent, from other market participants, where presumed consent can be enough. For email it draws no such distinction: express prior consent is required regardless of whether the recipient is a consumer or a business. So the B2B latitude that exists for calling does not carry over to email. Austria is similarly strict.
There is also a second, independent layer. Consent rules govern whether you may send the message. Data protection law, the GDPR in the EU, governs whether you may process the contact's personal data at all, and requires its own lawful basis. Satisfying one does not satisfy the other.
None of this is legal advice. If you are running cold email at any real volume into Europe, have your targeting, your record keeping, and your opt-out handling reviewed by a lawyer in the relevant jurisdiction. Practically, the risk is reduced by tight relevance, an unsubscribe path that works immediately, and a maintained suppression list, not by volume.
Anatomy of a Cold Email That Works
A cold email has three parts that decide whether it gets a reply. Everything else is packaging.
Subject Line
The subject line decides only whether the message gets opened, and it should not try to sell. What works best is short and plain, looking like internal correspondence rather than a campaign: two to four words, no exclamation marks, no emoji, no promise. A subject that names something specific about the company beats any general benefit phrasing. Open rate is a poor success measure here, since image proxying at the major mail providers distorts it.
Personalization at the Account Level, Not the Name Level
A first name in the opening line is not personalization, it is a mail merge field, and recipients recognize it instantly. A message becomes relevant through a reference at company level: a job posting that implies a specific initiative, a system migration, a funding round, a new market, a role that was just filled.
How much that difference matters shows in our own campaigns: with a broad audience definition, reply rate was 2.7%, while a comparable campaign with a tightly defined ICP approached over LinkedIn instead of email reached 5.6%, at similar effort per contact. Those figures come from an anonymized internal DACH B2B campaign. The conclusion for cold email is the same: your hit rate is created in account selection, not in phrasing. More on that in our pillar article on B2B customer acquisition, and the selection criteria in the guide to defining an ICP.
Call to Action
The most common mistake at the end of a cold email is asking for too much. "Do you have 30 minutes Thursday for a demo?" asks someone who does not know your company to make a calendar decision. A question that can be answered in one sentence works better, especially one that yields real information, such as whether the topic falls within their remit at all. The meeting request then follows in the reply, not in the first message.
Cold Email Examples
The patterns below are deliberately given as structures rather than copy-paste templates. A template used verbatim loses the one thing that makes it work, which is the specific reference.
Pattern one, referencing a visible initiative. Subject: two words naming the topic. First sentence: the trigger you observed, stated plainly and without flattery. Second sentence: what problem you suspect that creates, framed as a question rather than an assertion. Third sentence: an observation from comparable situations, with no numbers you cannot support. Closing sentence: the remit question.
Pattern two, referencing a role change. When a position has just been filled, the first weeks are the window in which processes actually get questioned. The message names the change, names a decision that typically comes up in that window, and asks whether it is coming up this time. No product, no benefit list.
Pattern three, the curiosity follow-up. In our campaigns, a low-commitment message built on curiosity rather than sales pressure has repeatedly produced more meetings than the original pitch message. It works because it contains no renewed request, just one short, concrete thought.
Follow-Up Sequences: How Many Emails Make Sense?
There is a solid reference point from our own campaigns: around 60% of all replies come on the first message, not on the follow-ups. That is inconvenient for the reflex of simply sending more. The biggest effect comes from the first message, and each additional one contributes a smaller share.
Practically that means two to three messages in total, each carrying genuinely new content rather than a reminder about the previous one. "Just following up" is not content, it is a request for attention with nothing offered in return. Better is one new thought per message, and a clear final note that closes the sequence politely instead of extending it indefinitely.
Equally important is a stop criterion for the campaign itself. We stop and rebuild a campaign when 500 contact attempts have produced no single interested reply and fewer than 3% negative reactions. The signal is not rejection, it is indifference: the audience or the message does not fit, and more volume only amplifies the error.
Common Cold Email Mistakes in B2B
- The first message sells instead of asking a question that can be answered in one sentence.
- Personalization stops at the first name and the rest is identical for every recipient.
- Numbers and references are asserted without being verifiable, which backfires with experienced recipients.
- The sequence consists of reminders about the previous email rather than new thoughts.
- Unsubscribes and negative replies never reach a suppression list, so the same contacts get written to again next quarter. This is also the most common trigger for legal complaints.
- The channel runs in isolation, even though combining it with LinkedIn changes reply rates noticeably. How the two work together is covered in our article on LinkedIn outreach.
Frequently Asked Questions About B2B Cold Email
Is B2B cold email legal?
It depends on the recipient's jurisdiction. In the US, CAN-SPAM permits unsolicited commercial email on an opt-out basis, provided the message is honest, identifies itself, and honors opt-outs. In the EU the default is prior consent, with a narrow existing-customer exception. Germany and Austria are notably strict and, unlike their rules for phone outreach, draw no business-to-business exception for email. This is not legal advice, so have your specific practice reviewed by a lawyer in the market you are contacting.
How many follow-up emails make sense in a cold email sequence?
Two to three messages in total. In our own campaigns around 60% of replies arrive on the first message, so additional follow-ups contribute little quickly. More important than the count is that each message carries a new thought rather than a reminder about the last one.
What separates cold email from newsletter marketing?
The legal basis and the purpose. A newsletter goes to people who signed up and maintains an existing relationship. Cold email approaches accounts with no relationship yet. The consent and record-keeping requirements differ accordingly, which is also why newsletter copy does not work in cold outreach.
How do you tell whether the audience or the copy is the problem?
By the kind of reaction you get. Substantive rejections mean the audience fits and the message misses. No reaction at all, not even negative, usually means the account selection is wrong. Indifference is the clearer of the two signals.
The Channel Is Decided in Selection, Not in Phrasing
B2B cold email works when three things come together: a tightly defined account selection, a genuine trigger behind every message, and a compliant process with a suppression list and an opt-out that actually functions. If you want to build this channel or have an existing campaign reviewed, talk to our team.
Keep Reading
How to combine the channel with LinkedIn is covered in our article on LinkedIn outreach. The full channel mix is in our pillar article on B2B customer acquisition.
How would this work in your team?
In a free 30-minute call we look at what it would look like on your stack.
Nicolas Schell is co-founder and CEO of Scalantec. Before Scalantec he worked at McKinsey and Celonis. Today he and his team build outbound and RevOps systems for B2B companies, and he organizes Clay Club Berlin.