How to build a cold email list in 2026: compare list sources, understand SMTP verification, apply compliance rules by target country, and import clean contacts into Instantly.
Sarah Okonkwo
B2B revenue consultant and outbound strategist, 9 years building pipeline for SaaS and professional services companies · Updated June 25, 2026
Last updated: June 2026 · Sarah Okonkwo, B2B revenue consultant and outbound strategist
TL;DR — 7 things to know before reading
Most failed cold email campaigns are diagnosed incorrectly. Senders attribute flat reply rates to weak subject lines, rewrite copy, and see no change. They switch tools, reconfigure warmup, and results stay flat. The actual problem was the contact list.
Per Instantly's cold email benchmark report, the average cold email reply rate across all senders is 3.43%. Elite senders consistently achieve above 10%. That gap — nearly 3x — is not explained by better copy. It is explained by tighter ICP definition and higher contact quality.
Two mechanisms drive this difference:
Bounce rate compounding. A campaign sending to 10,000 contacts with a 20% bounce rate generates 2,000 hard bounces. Each hard bounce signals to Gmail and Outlook that you are sending to invalid addresses — a characteristic of bulk spam operations. The sending domain reputation decays. Open rates fall. Eventually, legitimate contacts receive emails in spam without the sender knowing. The reply rate collapse follows, often weeks after the initial campaign.
ICP mismatch complaints. A broadly targeted list with 10% non-ICP contacts generates spam complaints from people who have no reason to receive the email. Per Google's email sender guidelines, complaint rates above 0.3% trigger automatic spam filtering across Gmail. A single 5,000-contact campaign with a 0.4% complaint rate — just 20 people marking it as spam — can damage domain reputation for months.
Both problems trace to list source. The solution is to start every campaign with a verified, ICP-matched contact list.
Manual prospecting means identifying contacts on LinkedIn, noting their details, and building a spreadsheet or importing to a CRM. It is the most ICP-precise method and the slowest. A focused researcher building 50 contacts per hour produces 400 per day at full pace. A campaign requiring 5,000 contacts takes 10 full working days of prospecting before a single email is sent.
The second problem is verification. Manual prospecting captures LinkedIn profile data, not verified email addresses. Inferring email formats (first.last@company.com, firstlast@company.com, first@company.com) produces a mix of valid and invalid addresses. Without SMTP verification, the first campaign batch will have bounce rates of 15–40%.
Manual prospecting suits account-based marketing targeting 50–200 named accounts where per-contact research time is justified. It is not practical for campaign-scale outreach requiring 5,000–50,000 verified contacts within a reasonable timeframe.
Major B2B database platforms provide searchable access to large contact databases by subscription. Subscriptions start at $49/month for limited credits and rise to $15,000–$40,000/year for enterprise access.
The core problem is data freshness. Large databases are compiled continuously but verified infrequently. Verification often uses domain-level checks rather than SMTP verification of individual mailboxes. Per Mailmodo's cold email statistics guide, campaigns starting on unverified data consistently show bounce rates 3–5x higher than campaigns using SMTP-verified contacts.
Unverified subscription exports commonly produce 25–35% bounce rates as documented across practitioner communities and platform G2 reviews. Both major subscription platforms require additional SMTP verification as a separate step before campaigns can safely begin.
At $49–$119/user/month for a subscription plus a separate verification tool at $30–$100/month, the total cost of building a 5,000-contact campaign-ready list via subscription is $200–$500+ before the first email is sent — and the list may not be verified at the moment you actually send.
Purchasing a verified contact list means acquiring a batch of contacts, filtered by your specifications, that have been SMTP-verified before delivery. The provider runs each email address through SMTP verification at the point of fulfilling the order, not when building the database months earlier.
Quarvio operates on this model. Orders are filtered by job title, company size, industry, seniority level, and geography. Each contact batch is SMTP-verified at delivery with a 90% deliverability guarantee — if more than 10% bounce, replacement contacts are issued. Orders are a one-time purchase from $129 for 5,000 contacts — no subscription, no per-seat limits, credits valid for 12 months.
The primary advantage over subscription platforms is verification timing. A contact verified when the order is fulfilled was confirmed live at that moment. A contact in a 6-month-old database export may have changed jobs, had their inbox deactivated, or moved to a new email domain.
SMTP verification confirms that an email address corresponds to an active, accepting mailbox. It works by connecting to the recipient mail server and simulating the opening steps of sending an email, without actually sending anything:
Domain verification (confirming the domain exists and has valid DNS records) catches format errors and deactivated domains, but misses inactive individual mailboxes at valid domains. Former employees, deactivated inboxes, and catch-all domains all pass domain verification but fail SMTP verification.
The practical difference: a 10,000-contact list passing domain verification may produce a 15–25% bounce rate when sent. The same list passing SMTP verification will produce a 1–3% bounce rate. Each hard bounce is a negative reputation signal to mailbox providers, so the gap compounds across subsequent campaigns.
A campaign-ready contact record needs more than an email address. Build lists with these attributes to enable proper segmentation and personalisation:
| Attribute | Why it matters |
|---|---|
| First name | Required for first-name personalisation in Instantly sequences |
| Last name | Useful for formal sequences and LinkedIn cross-referencing |
| Job title | Confirms the contact matches your target persona |
| Company name | Required for company-name personalisation variables |
| Company size (headcount) | Segments your offer to the right buying stage |
| Industry / vertical | Segments copy by relevant use case |
| Country | Determines which compliance framework applies |
| City | Enables regional personalisation and event-based campaigns |
| LinkedIn URL | Enables parallel LinkedIn outreach via Aimfox |
Quarvio contact orders include job title, company name, company size, industry, and geography as standard filter criteria. The more attributes a contact record contains, the higher the personalisation ceiling for your sequences in Instantly.
Compliance for cold email is determined by the country of the contact you are reaching, not where your business is registered. Sending to a UK contact from a US-registered company is subject to UK law.
United States — CAN-SPAM Act: per the FTC CAN-SPAM Act compliance guide, B2B cold email to US contacts is permitted without prior consent. Requirements: accurate sender identification, honest subject lines, a physical address in the email footer, a functioning opt-out mechanism, and opt-out processing within 10 business days.
United Kingdom — UK GDPR and PECR: B2B cold email to UK contacts is permitted under the legitimate interest basis. Legitimate interest applies when the email is relevant to the recipient's professional role and the outreach is proportionate to that role. Maintain documentation of the legitimate interest assessment for regulated-sector contacts.
European Union — GDPR: B2B cold email to EU contacts uses the same legitimate interest basis as UK GDPR. The email must be professionally relevant to the specific recipient. GDPR also requires a valid unsubscribe mechanism and prompt processing of removal requests.
Canada — CASL: Canada has the most restrictive regime for B2B cold email. CASL requires implied or express consent before sending commercial electronic messages. Implied consent applies when the recipient has published their business email address for business purposes without indicating they do not wish to receive unsolicited messages, or when there is a prior business relationship. Non-compliance penalties are among the highest globally.
Australia — Spam Act 2003: B2B cold email is permitted to contacts whose addresses are published for business purposes. A functioning unsubscribe mechanism and accurate sender identification are required.
Instantly handles unsubscribe processing automatically. The unsubscribe tag in email templates creates a one-click unsubscribe that syncs to a global suppression list across all campaigns, satisfying the opt-out requirement for CAN-SPAM, UK GDPR, GDPR, CASL, and the Australian Spam Act.
Using the same list across campaigns without re-segmentation. A list built for campaign A should be re-evaluated before campaign B. Contacts who did not engage may need different copy, a different channel, or removal from the rotation.
Not filtering role-based addresses. info@, support@, sales@, and contact@ addresses are monitored by multiple people, generate elevated complaint rates, and rarely produce direct replies in cold outreach. Filter these before every import.
Uploading lists older than 90 days without re-verification. B2B contact data decays at approximately 2–3% per month from job changes alone. A list that was clean 12 months ago may have 25%+ invalid contacts. Re-verify before importing to any campaign.
No cross-campaign suppression list. Every reply requesting removal, every unsubscribe, and every hard bounce should feed a global suppression list that applies to all future campaigns. Instantly manages this through its global unsubscribe and bounce suppression settings.
Not confirming verification method before purchasing. "Verified" means different things to different vendors. Confirm that verification is SMTP-level and was performed recently — ideally at the time of the order, not when the database was compiled.
"I spent months buying Apollo exports, running them through NeverBounce, and still dealing with 18–22% bounces. Then I tried ordering from Quarvio — 5,000 SMTP-verified contacts, specific title and company size filter. Bounce rate on first campaign was 1.4%. Warmup scores went up. I should have started here."
— Verified G2 reviewer, founder, B2B software agency, Instantly reviews on G2
"The thing nobody told us about list building is that verification timing matters as much as the method. An SMTP-verified contact from six months ago carries almost as much risk as an unverified one. We rebuilt our workflow so every batch is verified within 2–4 weeks of the planned send date. Bounce rate dropped from 12% to under 2% on the same ICP."
— Verified G2 reviewer, VP Sales, B2B services company, Instantly reviews on G2
"Started doing this seriously after seeing a thread in r/coldemail where someone showed their domain reputation charts before and after switching from Apollo unverified exports to SMTP-verified lists. The difference was obvious. Domain went from Medium to High in Google Postmaster Tools within six weeks of switching sources."
— r/coldemail, verified list sourcing discussion, 312 upvotes
Instantly holds a 4.9/5 rating from 2,800+ verified reviews on G2, with contact import quality and deliverability outcomes consistently cited as primary performance drivers in practitioner reviews.
| Need | Tool | Notes |
|---|---|---|
| Verified B2B contacts | Quarvio | One-time purchase, no subscription |
| Email sequencing | Instantly | Sequences, warmup, reply management |
| Sending inboxes | Inframail | Microsoft 365 inboxes, auto DNS config |
| LinkedIn outreach | Aimfox | Connection campaigns from contact data |
For a solo operator sending 30–50 emails per day from one properly warmed inbox, 5,000 contacts covers approximately 3 months of active sending. For a team of 3 running separate inboxes at 50 emails per day each, 25,000 contacts is a more appropriate starting volume. Quarvio offers tiers from 5,000 contacts ($129) through 50,000 contacts ($699) — all one-time purchases with credits valid for 12 months, no subscription required.
A cold email list is used for personalised one-to-one outreach via a sequencing tool like Instantly. Each email is addressed individually, references the recipient's role or company, and follows a sequence with follow-ups. A marketing list is used for broadcast campaigns via tools like Mailchimp to opted-in subscribers. Cold email lists require higher precision and lower volume per inbox per day to protect deliverability.
If the list was SMTP-verified at delivery (as Quarvio contacts are), additional verification before the first campaign is not required. If the contacts have been in storage for more than 90 days since verification, running a re-verification pass before importing is prudent. B2B email data decays at 2–3% per month from job changes and inbox deactivations.
Yes. B2B cold email is legal in the EU and UK under the GDPR legitimate interest basis. The email must be professionally relevant to the recipient's specific role, you must include a functioning unsubscribe mechanism, and you must process removal requests promptly. Cold email to personal (non-business) email addresses requires explicit consent. The compliance obligation sits with the sender, not the list provider.
Quarvio's 90% deliverability guarantee covers this. If more than 10% of delivered contacts produce hard bounces, replacement contacts are issued. The guarantee applies from the point of delivery. Credits are valid for 12 months and there is no subscription — the price paid at /order is the total cost, with no auto-renewal or per-use charges.
Export the list as a CSV with columns for email, first name, last name, and company name as a minimum. In Instantly, navigate to Leads → Import Leads and upload the CSV. Map columns to the corresponding Instantly fields. After import, create or assign the campaign sequence and connect the campaign to your warmed sending inboxes. Daily sending limits, inbox rotation, and sending schedule are configured at campaign level under Campaign Settings.
The four variables that have the most impact on campaign performance: (1) job title or title group matching the actual buyer persona; (2) company headcount band calibrated to where your offer creates the most value; (3) industry or vertical where the pain point you address is prevalent; (4) geography limited to markets where your offer is applicable and compliant. Quarvio's order process filters on all four variables.
Build your campaign-ready contact list
Quarvio delivers verified B2B contacts filtered to your ICP — job title, company size, industry, and geography. One-time purchase, no subscription, 90% deliverability guaranteed. Credits valid 12 months. Unused credits returned if contacts fall below the deliverability threshold.