Outreach
Cold Outreach Without Being Spammy: A Guide for Web Agencies and Freelancers
Outreach becomes spam when it is irrelevant, careless with the recipient's time, or hard to stop. It stays respectful when you contact a small number of well-chosen businesses, say something true and specific, identify yourself plainly, make it easy to say no, and stop when someone does. The law sets a minimum. Your reputation sets a much higher bar.
This guide is about that higher bar. It covers how to recognise spammy habits in your own outreach, what the rules say for email, calls, texts and LinkedIn, how to build a list you can defend, how much is too much, and how to write a short outreach policy you can hold yourself to. It sits alongside the guide to cold email templates, which covers the wording of the message itself.
Spam is a feeling before it is a law
Think about the last cold message you disliked. It probably did not break a rule. It was irrelevant, clearly sent to thousands of people, addressed to no one in particular, or impossible to get off. Recipients judge on those things, and so do mailbox providers.
The table sets a spammy habit beside its respectful equivalent.
| Dimension | Spammy | Respectful |
|---|---|---|
| Who you contact | Anyone on a purchased list | A business you checked and can explain contacting |
| Relevance | The same message to everyone | One specific observation about this business |
| Honesty | Vague claims, fake familiarity, invented urgency | Plain statements you can back up |
| Who you say you are | A sender name that hides the business | Your real name, business and address |
| Frequency | Chasing every few days without end | One or two follow-ups, each with something new |
| Opting out | Hard to find, ignored or punished | One clear line, honored the same day |
| Replies | Pushing after a no | Thank them and stop |
| Volume | As many as your tool allows | As many as you can research well |
If you would not be comfortable explaining a message to the person who received it, do not send it.
The legal floor
Rules differ by channel and by country. This section covers the United States in outline and is not legal advice.
| Channel | What to know |
|---|---|
| The CAN-SPAM Act covers commercial email, and the FTC states that the law makes no exception for business-to-business email. You need accurate headers, a truthful subject, a physical address and a working opt-out honored within 10 business days. The cold email guide explains each requirement | |
| Phone calls | The FTC's Telemarketing Sales Rule exempts most business-to-business calls, with an exception for certain office supplies. Exemptions can be narrower than they look, and state laws and mobile numbers can change the answer, so take advice before you cold call |
| Text messages | Cold texting is regulated more strictly than email. Leave it out unless a lawyer has cleared your approach |
| LinkedIn's help centre says it does not permit bots, crawlers or browser extensions that scrape or automate activity, and members who use them risk restrictions or a shutdown | |
| Outside the US | Some countries require consent before commercial email. Check the rules where your recipients are |
Mailbox providers apply a rule of their own on top of the law. Google's email sender guidelines tell bulk senders (5,000 or more messages a day to Gmail) to keep their user-reported spam rate below 0.1% and never let it reach 0.3%. You will not send that volume, but the thresholds show how little tolerance there is.
Source: Google email sender guidelines. Share of messages users report as spam, for senders of 5,000 or more messages a day to Gmail.
A rate of 0.1% means one complaint in a thousand messages. Small sends make complaints more visible, not less: two people marking a batch of fifty as spam is a rate of 4%.
Build your list respectfully
Good outreach starts with the list, because the list decides who you disturb.
- Contact businesses you have looked at. Each business on your list should be there because you saw something specific.
- Use public, role-based business contacts. An owner or manager's business address is fine. Do not go looking for private individuals' personal details.
- Record the source and the date. If someone asks how you found them, you should be able to say.
- Collect only what you need. A name, a business address and a note about the finding is enough. More data is more to protect.
- Do not buy or scrape lists carelessly. Bought lists tend to be stale and untargeted, and scraping can break a platform's terms. The tools guide covers what is and is not safe.
- Remove people promptly. Keep a do-not-contact list from day one, and check every batch against it.
If you need a way to build a list that you can explain, the prospecting method starts from the business and its website, so that every contact has a reason behind it.
How much is too much
Cadence is where good intentions slip. Set a limit before you start, when you are calm, not in the middle of a slow month.
Here is a starting policy. It is a suggestion to adapt, not a rule from any regulator.
| Element | A respectful starting point |
|---|---|
| Daily volume | Small enough that you can read every message before it goes |
| First touch | One message, one finding |
| Follow-ups | One or two, spaced a few days apart, each with something new |
| Total touches | Three at most, then stop |
| After a no | Stop immediately and record it |
| After silence | A final, polite note, then leave them alone for a good while |
| New sending domain or account | Start small and increase gradually, watching for complaints |
Restraint helps you as well. Sending fewer messages to better-chosen businesses generally means more relevant replies and fewer complaints. It also protects the domain you send from, which is worth more than any single campaign.
Personalization that is useful and not creepy
Personalization should show you looked at their business, not that you have been watching them. Use a simple test: is this information the business itself published, and is it relevant to what I am offering?
| Fine | Creepy |
|---|---|
| "On your homepage I couldn't find a way to book from my phone." | "I saw from your personal social media that you were on holiday." |
| "You have strong Google reviews from many customers." | "I noticed your daughter's school." |
| "Your listing shows a different phone number from your site." | Any detail about the owner's private life |
| "I looked at Cedar Ridge Plumbing's site on my phone." | "I have been following you for months." |
Never claim to have done things you have not. Do not say you visited in person, spoke to someone there or know the business personally. It is dishonest, and it is the easiest way to lose trust.
Etiquette by channel
Each channel has its own norms. Use the one that matches the relationship.
| Channel | Good practice | Avoid |
|---|---|---|
| Short, specific, plain signature with address and opt-out | Attachments in the first message, hidden sender names | |
| A brief, personal note, sent by hand | Automation tools, long pitches in connection requests | |
| Phone | A short introduction, a clear reason, and a fast exit if it is a bad time | Calling outside normal hours, calling mobile numbers without advice |
| Contact form | One clear message with your real details | Repeated submissions |
| In person | Introduce yourself and listen | Handing over a pitch while the owner serves customers |
Handling no, silence and anger
You will hear a range of replies. Here is how to handle each.
| Reply | What to do |
|---|---|
| No thanks | Reply once with thanks, add them to the do-not-contact list, and stop |
| Please remove me | Honor it the same day and confirm briefly |
| Silence | One polite follow-up, then a final note, then leave it |
| An angry reply | Do not argue. Apologise, confirm you have removed them and stop |
| A vague maybe | Ask when it would be sensible to follow up, and follow up exactly then |
A short reply to a request to stop is enough.
Subject Re: Couldn't find how to book on your phone
Hi Dana, thanks for letting me know. I've removed you from my list and won't email again. Sorry for the interruption, and best of luck with the business.
Sam
Signals that you are drifting into spam
Replies are not the only number that matters. Watch these as well.
| Signal | What it may mean | What to do |
|---|---|---|
| Spam complaints, even one or two in a small batch | The message or list is off | Pause, look at who complained, and fix the targeting |
| Unsubscribe or "stop" replies rising | Too frequent, or not relevant | Reduce frequency and tighten the list |
| Bounces | Stale or guessed addresses | Clean the list and stop guessing addresses |
| Angry replies | You misjudged the tone or the audience | Read them, learn, and adjust |
| Few replies of any kind | Weak relevance or weak message | Improve the finding and the offer before you send more |
Set your own tripwires in advance. For example, decide that any spam complaint pauses sending until you have reviewed the batch. A rule you wrote in advance is easier to follow than one you make up when a campaign is going badly.
Write your own outreach policy
Turn these principles into a short checklist that you keep next to your sending tool.
A personal outreach policy
- I only contact businesses I have researched and can explain contacting
- I use public, role-based business contacts and never private details
- Every message contains one true, specific observation
- My real name, business and postal address are in every email
- Every email has a clear opt-out and I honor it the same day
- I send at most three touches, spaced out, each adding something new
- I stop the moment someone says no
- I keep a do-not-contact list and check every batch against it
- I never claim things I have not done or seen
- I review complaints, opt-outs and bounces after every batch
Using automation without losing the human
Tools can help with research and drafting, but the judgment about who to contact, what to say and when to stop should stay with you. SiteOpportunity is built around that. It prepares an editable draft from the verified findings in its analysis and holds it to a set of rules: no claiming to have visited or spoken to the business, no pretending to be a customer, no guaranteed results, no mocking the site, and hedged wording when its confidence is low. It does not send anything. You read the draft, change it and send it yourself. The features page shows how a draft is built, and the pricing page covers what is included in each plan.
Curious how evidence-based drafts read before you send anything? Try a free search
Questions about respectful outreach
Is cold emailing a local business legal?
In the United States, commercial email to businesses is covered by the CAN-SPAM Act, which requires accurate headers, a truthful subject line, a physical address and a working opt-out. You do not need prior consent, but you must follow those rules. This is not legal advice.
How many follow-up emails is too many?
As a starting policy, one or two follow-ups, each adding something new, and no more than three touches in total. Stop immediately if someone says no or asks to be removed.
Can I text or cold call local business owners?
Rules are stricter than for email. Most business-to-business calls are exempt from the federal telemarketing rule, but state laws and mobile numbers can change that, and cold texting is tightly regulated. Get advice before you do either.
Is it acceptable to automate LinkedIn outreach?
LinkedIn does not permit bots, crawlers or browser extensions that automate activity on its site, and members who use them risk restrictions. Send LinkedIn messages by hand.
What should I do when someone asks to be removed?
Honor it the same day, reply once with thanks, add them to your do-not-contact list, and never contact them again. It is both good practice and a legal requirement for email.