Cold outreach that works for small business.
Most owners think cold outreach means buying a list and blasting templates. The version that actually books meetings in 2026 is narrow, researched, and tool-disciplined.
We've run outbound for our own business and for clients in home services, accounting, and B2B services. The pattern is the same every time. The owner tries blasting 5,000 contacts, watches their domain reputation tank, gets two angry replies and zero meetings, then concludes cold outreach is dead. It isn't. The blast approach is dead. What replaced it is a much narrower, much more boring discipline that, done right, books two to five qualified meetings a week from a list of 200 names.
This playbook covers the four things that actually decide whether your outbound works: where you get names, how you verify them, what you say, and how you stay out of spam. We also cover what to measure, because the metric most operators stare at (open rate) has been broken since 2021 and is actively lying to them.1
Sourcing: stop buying the list, start building the list
The single biggest mistake in SMB outbound is starting with a 10,000-row purchased list. Those lists are stale, shared across every other buyer, and stuffed with role accounts (info@, sales@, contact@) that hurt your sender reputation the moment you mail them.
The version that works is the opposite. Start with a tight definition of who you want to reach (industry, headcount band, geography, role), then build the list from primary sources. For B2B services, that's Apollo or LinkedIn Sales Navigator filtered hard on seniority and headcount. For local service businesses (HVAC, dental, restaurants, real estate), it's Outscraper or a similar Google Maps scraper that returns the business, owner name if listed, and a public email.
A good first list is 200 to 500 names you could actually describe by hand. If you can't say "these are owner-operated HVAC companies in three Texas metros with 5 to 25 trucks," your list is too broad and your copy will be too generic to land. Narrow beats big at every stage of SMB outbound.
Verification: 5 percent bounce kills your domain
Every list, even a hand-built one, has dead emails in it. Mailing them is the fastest way to wreck a sending domain. Mailbox providers (Gmail, Outlook, Yahoo) treat a high bounce rate as a strong negative signal. Google's published sender requirements put the spam complaint ceiling at 0.3 percent and require SPF, DKIM, and DMARC for any sender doing meaningful volume.2 Bounce rate sits in the same category. Keep it under 2 percent or your inbox placement collapses across your whole list, not just the bad addresses.
The fix is one extra step. Before any cold campaign, run the list through MillionVerifier, BillionVerify, NeverBounce, or ZeroBounce. Drop anything flagged invalid or risky. Treat "catch-all" results as a separate, smaller-volume bucket. The verification cost is roughly a penny per email and saves you a domain rebuild that costs weeks.
If a verifier returns "unknown" for a large slice of your list, that's a signal the source is low quality. Go back to sourcing.
Copy: 50 words, named business, single ask
The copy rules for SMB outbound are short and unglamorous.
Keep the email under 75 words, ideally closer to 50. Owners read on their phones between jobs and meetings. If they have to scroll, you've lost them. Lead with one sentence that names their business and shows you actually looked. "Saw Bright Roofing is doing the new builds out by 290" beats "Hi [first name], I help roofing companies scale" every single time.
Make one ask, not three. The ask is almost always a 15-minute call or a yes-or-no on a single question. Multi-CTA emails read as a pitch deck and convert worse than a clean one-liner.
Drop the marketing voice entirely. No "revolutionize," no "unlock," no "in today's fast-paced market." Write like a person texting another person. Read it out loud. If it sounds like a brochure, rewrite it. The bar is whether a busy owner would reply to a friend who sent the same words.
Personalization is not a token swap. {{first_name}} and {{company}} merge fields don't count. Real personalization is one custom sentence per email, generated from something specific you can see (their website, a recent review, a job listing, a press mention). If you can't write that sentence in under 30 seconds per prospect, your list is wrong or your research process is wrong.
Deliverability: the boring infrastructure that decides everything
You can have the best copy and a perfect list and still land in spam if the sending setup is wrong. Three things matter, in order.
First, authentication. Set SPF, DKIM, and DMARC on the sending domain before you send a single email. Gmail and Yahoo have required all three for bulk senders since February 2024, and Microsoft followed.2 Most cold outbound tools (Instantly, Lemlist, Smartlead) walk you through this in setup. Don't skip it.
Second, domain separation. Never send cold outbound from your primary domain. Buy a lookalike (yourbusiness.co if you own yourbusiness.com, or yourbusiness-team.com) and send from that. If the cold domain gets burned, your real email keeps working. Most operators run two or three secondary domains in rotation once volume passes 100 emails a day per inbox.
Third, warm-up and volume discipline. A new sending inbox needs two to three weeks of automated warm-up (back-and-forth replies with other warm-up inboxes) before it can safely send 30 to 50 cold emails a day. Push volume harder and the inbox burns. The Postmark and Mailgun deliverability teams have written extensively on warm-up and sender reputation; the operational rules are not controversial.3 They're just often ignored.
Measurement: open rate is dead, reply rate is the only signal
Apple Mail Privacy Protection (rolled out in 2021 and on by default for the majority of iOS Mail users) pre-loads every tracking pixel in every email regardless of whether the recipient opens it.1 That means your "47 percent open rate" includes a large pile of fake opens from Apple's relay servers. Gmail's image proxy does something similar. Open rate as a metric is no longer measuring what you think it's measuring.
Two metrics still work. Reply rate (any human response, positive or negative) tells you whether the copy and targeting are landing. A healthy SMB cold campaign sees 3 to 8 percent reply rate. Below 2 percent, fix the copy or the list. Above 10 percent, you're probably onto something and should scale that segment.
The only revenue metric is qualified meetings booked. Replies that turn into a scheduled 15-minute call with someone who could actually buy. Everything upstream of that (sends, opens, even raw replies) is process metrics. The number that goes in the deck is meetings.
Key takeaways
- Start narrow. 200 hand-built names beat 5,000 purchased ones, every time.
- Verify every list. Under 2 percent bounce rate or your domain reputation collapses.
- Write 50-word emails with one named specific and one ask. Marketing voice loses.
- Set SPF, DKIM, DMARC. Send from a secondary domain. Warm up new inboxes for two to three weeks.
- Stop watching open rate. Apple broke it in 2021. Reply rate and meetings booked are the only honest numbers.
- If your reply rate is below 2 percent, the answer is almost never "send more." It's "send to fewer people, better."
Sources
- Apple, "Mail Privacy Protection." apple.com/legal/privacy/data/en/mail-privacy-protection. Pre-loads remote content for all messages, neutralizing open-tracking pixels.
- Google Workspace Admin Help, "Email sender guidelines." support.google.com/a/answer/81126. SPF, DKIM, and DMARC required for bulk senders; spam-rate ceiling of 0.3 percent; effective February 2024.
- Postmark, deliverability and authentication guides. postmarkapp.com/blog. Practitioner coverage of warm-up, list-unsubscribe headers, and post-2024 Gmail and Yahoo sender requirements.