Cold email vs warm email: when to use each

Cold email vs warm email is a question of consent and context. Cold email goes to strangers who never asked to hear from you: B2B prospects, journalists, potential partners. Warm email goes to people who opted in through a signup form, a purchase, or a lead magnet. The two use different tools, follow different laws, and get judged on different numbers.

The mistake that costs teams the most is assuming one set of instincts transfers to the other. It doesn't, and the penalty for guessing wrong runs from a dead campaign to a blocklisted domain.

Cold email vs warm email: the actual difference

A cold email is a one-to-one message sent to someone with no prior relationship to you or your company. A warm email goes to a subscriber who gave you permission, usually through a form, a checkbox, or a purchase. The sending infrastructure, the expected volume, and the legal framework all diverge from there.

People conflate the two because they look identical in a Gmail inbox. Underneath, cold email is closer to a prospecting call than to a newsletter; warm email is closer to an ongoing customer relationship. That difference is why sending cold email from your newsletter ESP (Mailchimp, Klaviyo, Mailneo) usually gets your account suspended within a few sends. Every mainstream ESP bans unsolicited sending in its terms, and the reason is structural: one blocklisted IP damages every other sender in the same shared IP pool.

Cold outreach still works as a channel, and it has gotten considerably harder to do well as inboxes have filled up. Both things are true at once.

When cold email is the right call

Cold email works when you have a narrow, verifiable list and a reason each recipient would care, ideally tied to something specific about their company or role. It fails when you buy a list, spray 50,000 contacts, and hope a fraction of a percent converts.

Reasonable use cases:

• B2B outreach to a prospect list you built by hand from LinkedIn, Crunchbase, or a paid database, targeting decision-makers who match your ICP
• Partnership pitches (podcast appearances, co-marketing, integrations) where you've done the homework on why the match makes sense
• Press and PR outreach with a specific reporter angle
• Recruiting for a role where you identified the candidate individually
• Re-engaging a dormant business contact you actually met

Skip cold email entirely for consumer products, mass announcements to people who never gave you an address, anything sourced from a data broker, and EU recipients without a defensible legitimate-interest basis.

The outbound stack looks nothing like a newsletter stack. Operators run cold campaigns through dedicated sequencing tools on secondary sending domains (get.yourcompany.com rather than your main domain), with warmed inboxes and hard per-inbox daily caps; 20 to 40 messages per inbox per day is the range most teams settle on. Before you ramp anything, work through the domain warm-up guide; it applies to both motions but it is non-negotiable for outbound.

Cold subject lines have their own grammar, since the job is to not look like spam rather than to be clever. The B2B cold subject line collection and our cold outreach swipe file are both worth a pass before you write your own.

When warm email is the right call

Warm email is what most people mean by email marketing. It goes to your list: newsletter subscribers, customers, trial signups, cart abandoners, win-back targets. Everyone on it gave you explicit or implied consent, so you can send at real volume, use tracking, and segment on behavior.

That covers newsletters, transactional messages, lifecycle automations, promotional campaigns to existing customers, and content nurture sequences. If you're still building the list, our guide to the first 1,000 subscribers covers acquisition, and how to avoid the spam folder covers the part that decides whether any of it lands.

Warm sending is also where subject lines start doing real work, because you're earning a click from someone who already recognizes the sender. The newsletter subject line examples and the subject lines deep-dive both target that case.

The legal rules diverge by country

This is the part most people get wrong. "It's legal in the US" is not a defense if your recipient lives in Frankfurt.

CAN-SPAM (United States)

CAN-SPAM is an opt-out regime. Under FTC guidance, cold email to US recipients is legal provided you use accurate From, Reply-To, and routing headers, write a subject line that isn't misleading, identify the message as an ad where required, include a physical postal address, and honor opt-outs within 10 business days.

There is no opt-in requirement. You can legally cold email a stranger, which is why the channel exists at scale in the US at all. Our CAN-SPAM glossary entry has the compliance checklist.

GDPR and ePrivacy (European Union)

The EU inverts that. Under the ePrivacy Directive and the GDPR, unsolicited commercial email to individuals requires prior consent. For B2B contacts at corporate addresses, most member states allow a soft opt-in or legitimate interest basis, provided you offer an easy opt-out and don't process personal data beyond what the outreach needs.

That exception is narrower than outbound vendors like to suggest. Emailing the CMO of a company you could plausibly partner with is usually fine; buying a file of 50,000 European marketing managers and blasting it is not. Maximum penalties under the GDPR reach €20 million or 4% of global annual turnover, whichever is higher.

CASL (Canada)

CASL is the strictest of the three and the one teams most often forget. It's an opt-in regime for commercial electronic messages, so cold email to Canadians without express or implied consent is simply illegal. Implied consent exists for six months after an inquiry and two years after a purchase; beyond that you need express opt-in. Maximum penalty is CA$10 million for a business. See the CASL glossary entry for the detail.

If you send across regions, treat GDPR and CASL as the ceiling rather than CAN-SPAM as the floor. Our opt-in entry covers the consent models each one recognizes.

The two use completely different scoreboards

Judging a cold campaign by newsletter metrics, or the reverse, is how teams conclude a channel "doesn't work" when the real problem was the benchmark.

A cold campaign at a 5% reply rate is good; a newsletter at a 5% open rate is dead. Run the two through the reply rate calculator and the open rate calculator separately and never in the same report.

Cold opens in particular have been unusable for years. Apple Mail Privacy Protection pre-fetches the tracking pixel for every Apple Mail recipient whether or not they read the message, which means a cold open rate mostly measures how many Apple users are on your list. Replies are the only cold number worth optimizing. On the warm side, weight click rate over opens for the same reason, and watch spam complaint rate as your early-warning gauge. If you want sector-level context for the warm numbers, the industry benchmarks break them out by vertical.

Writing a cold email that gets a reply

The shortest version: specific recipient, specific reason, specific ask, kept short. Long cold emails do not out-argue their way into a reply; they get skimmed and deleted.

A structure that works:

1. First line names something specific about the recipient (a post they wrote, a launch, a funding round). Not flattery.
2. Second line connects that specific thing to a problem you've seen in similar companies.
3. Third line offers one sentence on why you're relevant.
4. Fourth line is a low-commitment ask. "Worth 15 minutes next week?" beats "let's book a 30-minute demo."
5. Signature carries your real name, real title, and one link that proves you're a person.

The things that reliably kill replies are easier to list than the things that create them. Long subject lines. "Quick question" and "just following up," both of which modern classifiers treat as outbound tells. Image attachments in a first touch. More than one link. Templated personalization that shows its seams, the Hi {firstName}, I saw {company} is in {industry} pattern that every recipient has now seen a hundred times.

Deliverability is where cold outreach actually dies, though, and the mistakes there are less forgiving than a weak first line. Sending from your primary domain means one complaint contaminates the domain your invoices go out on. Skipping warm-up means a brand-new domain pushing 50 messages on day one, which reads as exactly what it is. Missing SPF, DKIM, or DMARC now fails Google and Yahoo's bulk sender requirements outright; the DMARC explainer covers the record you need. And buying broker lists produces bounce rates that trip filters within hours, which is worth checking against the bounce rate calculator before you scale a source rather than after.

Once a domain lands on a major blocklist, recovery takes weeks and sometimes means starting over on a fresh domain. That asymmetry is the whole argument for keeping cold and warm sending on separate infrastructure: the warm program has years of reputation in it, and the cold program is the one placing bets. Don't let the bets ride on the asset.