Cold email agency: what you are actually buying, the deliverability work that decides results, and how to judge one
A cold email agency builds the list, the domains, the sequences and the inbox hygiene behind outbound. Here is what belongs in scope, the sender rules every provider now has to meet, and the questions that separate an operator from a sender.
Published by AI Knows Us · Updated 12 October 2026
A cold email agency runs outbound email on your behalf: it defines the target list, provisions and warms the sending infrastructure, writes the sequences, sends at a controlled rate, handles replies or hands them to your team, and reports on meetings booked. The part buyers underrate is infrastructure. Most of the difference between an outbound programme that books meetings and one that disappears is authentication, domain hygiene and sending discipline, not clever subject lines.
That is also the honest way to judge a proposal. A firm that talks only about copy and volume is selling you sends. A firm that opens with domains, authentication, list verification and reply handling is selling you delivered mail, which is the only kind that can convert.
What belongs in the scope of work
- Target definition. Named segments, firmographic filters, the job titles to approach and the ones to avoid, and an exclusion list of current customers, open deals and partners.
- List build and verification. Sourced contacts, verified addresses, catch all handling, and a documented bounce threshold at which sending pauses.
- Sending infrastructure. Secondary sending domains, mailboxes per domain, authentication records, warm up schedule and daily caps per mailbox.
- Sequences. Usually three to five short messages, each with one idea and one ask, plus the rule for when a sequence stops.
- Reply handling. Who reads replies, how fast, what counts as a qualified reply, and who books the meeting.
- Suppression and compliance. Unsubscribe handling, regional rules, and a record of consent basis where one is required.
- Reporting. Delivered, replied, positive replies, meetings booked, pipeline created. Opens are the weakest number on that list and should never be the headline.
The sender requirements any agency has to meet
Receiving providers tightened their rules and the bar is now published rather than guessed at. Google's email sender guidelines, checked on 12 October 2026, state that since 1 February 2024 every sender to Gmail accounts must set up SPF or DKIM authentication, keep valid forward and reverse DNS records for sending domains or IPs, use a TLS connection, keep the spam rate reported in Postmaster Tools below 0.3 percent, format messages to RFC 5322, and not impersonate Gmail From headers.
Google's same guidance sets extra requirements for senders of more than 5,000 messages a day to Gmail accounts: SPF and DKIM both, a DMARC record for the sending domain where the policy may be set to none, alignment of the From domain with either the SPF or the DKIM domain, and one click unsubscribe with a clearly visible unsubscribe link in the body for marketing and subscribed messages. Google also notes that sending to personal Gmail accounts requires a DKIM key of at least 1024 bits, with 2048 recommended.
Ask any agency to show you these records for the domains they will send from, before the first campaign. It is a five minute check and it is the single most predictive thing you can inspect. The full guidance is published at Google's email sender guidelines.
Legal footing, by market
Cold email is lawful in many markets and tightly conditioned in others, and the agency should know which regime applies to each segment of your list.
- United States. The CAN-SPAM Act permits unsolicited commercial email with conditions: accurate header and From information, a subject line that is not deceptive, identification of the message as an advertisement, a valid physical postal address, a working opt out mechanism, and prompt honouring of opt outs.
- European Union and United Kingdom. Marketing to individuals generally requires consent, while business addresses are treated differently in several member states, and GDPR obligations on lawful basis, data minimisation and the right to object apply to the list itself as well as the sending.
- Everywhere. Honour opt outs immediately, keep a permanent suppression list that survives a change of platform, and keep the record of where each contact came from.
Ask the agency to name the basis for each market in writing. A firm that waves this away is handing you the risk.
How to judge a cold email agency
| What to ask | A strong answer sounds like | A warning worth acting on |
|---|---|---|
| Whose domain do we send from? | Separate sending domains, never your primary, with authentication set up and a warm up period | Sending from your main domain on day one |
| How many sends per mailbox per day? | A conservative daily cap per mailbox, scaled by adding mailboxes rather than raising the cap | A large daily number from a single mailbox |
| How is the list verified? | Named verification step, bounce threshold, and sending pauses when it is breached | Volume promised with no mention of bounces |
| What do you report weekly? | Delivered, reply rate, positive reply rate, meetings held, pipeline | Open rate as the headline metric |
| What happens to replies? | A named person, a response time, and a qualification definition agreed with you | Replies land in a shared inbox nobody owns |
| What do you commit to? | Volume, process, response times and reporting cadence | A promised number of meetings before they have seen your list or your offer |
On that last row: a firm that quotes you a meeting count before it knows your market is quoting a sales line, not a forecast. Treat it the way you would treat a ranking guarantee from an SEO.
Pricing, and what moves it
Three structures are common: a monthly retainer covering infrastructure, list and sending; a retainer plus a fee per qualified meeting; and a smaller setup fee followed by a per mailbox monthly cost. Retainers are cleaner to manage and align the agency with process quality. Pay per meeting looks attractive and tends to widen the definition of a meeting, so if you use it, define qualification tightly in the contract and keep the right to reject.
Separate the costs that are yours whatever happens: domains, mailboxes, enrichment credits and the sending platform. Owning those accounts yourself means a change of agency does not cost you your infrastructure or your suppression list. Where outbound is one part of a wider plan, the trade offs against inbound are set out in inbound and outbound marketing, and the list health practices carry over from email marketing deliverability.
Cold email agency questions, answered straight
Is cold email still effective?
It works where the offer is specific, the list is narrow and the sending is clean. It stops working when any of the three is loose, which is most of the time, and that is why programmes with the same budget produce wildly different outcomes.
Should I use my main domain?
No. Send from separate domains that mirror your brand, keep them authenticated and warmed, and keep your primary domain for mail your customers and partners rely on.
How long before an outbound programme produces pipeline?
Expect the first weeks to go on infrastructure and warm up, with real volume after that and a meaningful read once a few hundred contacts have been through a full sequence. Judge the first month on process quality and deliverability, not on meetings.
What reply rate is good?
Set your own baseline from your first full sequence and improve against it, segment by segment. Published benchmarks span such a wide range of list quality and offer strength that they are of little use as a target.
In house or agency?
An agency is worth it for infrastructure and process you do not want to learn, and for getting started quickly. Bring it in house once the motion works, the messaging is settled and the volume justifies a dedicated person, and keep the accounts in your name so that move is simple.
What single change improves results most?
Narrow the list and rewrite the first line so it is obviously about the recipient's situation. A tighter segment with a specific observation beats a bigger list with a better template.
The check a prospect runs after your email lands
A cold email asks a stranger to take you seriously, so the first thing a good prospect does is look you up. That check has changed shape. Instead of clicking through to your site, many of them now paste your company name into an assistant and ask what it is and whether it is any good, and they get a short description assembled from third party sources: directories, review sites, news, comparison pages. If that description is vague, out of date or confuses you with a similarly named company, your sequence is working against a bad reference before the reply is written. AI Knows Us tests what assistants say about a company by name, shows where the description came from, and points at the sources worth correcting. It is a quick thing to fix and it makes every email after it land better.