Google made cold email a lot harder to get away with badly. Since 1 February 2024, any sender pushing more than 5,000 messages a day to Gmail addresses has had to authenticate their domain properly or risk rejection — and as of November 2025, Gmail tightened enforcement further, moving non-compliant senders from temporary delays to outright permanent rejection.

At the same time, the average cold email campaign is getting worse replies than ever. So is cold email outreach still worth doing for an Auckland business in 2026? Yes — but only if it’s built properly, on the right infrastructure, inside New Zealand’s actual spam law. Here’s what the service is, what changed, and how to judge whether yours is working.

First, what cold email outreach actually is

Cold email outreach is the practice of contacting people who haven’t asked to hear from you, to generate a genuine business conversation — a meeting, a demo, a quote. Done properly it rests on three pillars:

  • List and targeting — a tight, accurate list of the people who actually have the problem you solve, not a scraped database of everyone with a job title.
  • Deliverability infrastructure — domains, authentication and sending patterns built so the message lands in the inbox, not spam.
  • Message and offer — a short, relevant email that earns a reply because it’s obviously about them, not a template with their first name dropped in.

Unlike paid ads, cold email doesn’t cost per lead in the same way — you’re not bidding against competitors for a click. The trade-off is that it’s earned through craft, not budget: get any one of the three pillars wrong and the other two don’t matter.

The 2026 reality: reply rates are down, and deliverability rules got stricter

Start with the honest number. Belkins’ 2025 cold outreach data, drawn from 7,530,489 cold emails sent across its client campaigns and measured strictly as replies divided by total emails sent (not opens), found an average reply rate of just 0.45% — 34,393 replies in total, with auto-replies and bounces excluded. That’s a much harder number than the open-rate-based “5-8%” figures still floating around in older cold email advice.

There’s a useful detail buried in the same data: company size matters more than most people think. Very small companies (0-10 employees) replied at 0.72% — more than three times the rate of large enterprises (10,000+ employees) at 0.22%. Smaller, better-targeted lists consistently outperform large, generic ones. That’s a strong argument for Auckland SMEs doing this well: you’re competing on relevance, not volume.

Layer on top of that the deliverability side. Google’s official bulk sender guidelines require anyone sending 5,000+ daily messages to Gmail to run SPF and DKIM plus a DMARC policy, support one-click unsubscribe with a visible link, and keep spam complaint rates below 0.30% (Google recommends staying under 0.10%). Most cold email senders sit under that 5,000-a-day bulk threshold individually, but Gmail and Yahoo’s spam filters have become dramatically less forgiving across the board since enforcement tightened again in November 2025. A cold domain with no authentication, sent from a shared inbox at high volume, is now one of the fastest ways to land in spam — or get blocked outright.

The practical fix isn’t complicated, but it does take discipline: run cold outreach from a separate sending domain (not your primary company domain), warm that domain up gradually before sending at volume, and put SPF, DKIM and DMARC in place from day one rather than retrofitting them after deliverability has already collapsed. None of that is optional any more. It’s the baseline cost of getting a message read at all, whatever the message says.

The legal side: New Zealand isn’t a free-for-all

Cold email in New Zealand sits under the Unsolicited Electronic Messages Act 2007, administered by the Department of Internal Affairs’ Anti-Spam Compliance Unit — and the maximum penalty for non-compliance is a fine of up to $500,000. B2B outreach is generally allowed, but it has to sit on one of three forms of consent (as Sprintlaw NZ summarises it):

  • Express consent — someone has actively opted in.
  • Inferred consent — you have an existing business relationship and the message is relevant to it.
  • Deemed consent — the recipient’s business address is conspicuously published (a website, a professional directory), there’s no stated objection to unsolicited messages, and your message is relevant to their role or business.

That last category is what makes B2B cold email to a published work email generally lawful in New Zealand — provided every message clearly identifies the sending business, gives accurate contact details, and includes an unsubscribe option that’s clear, functional and genuinely easy to use. Scraping personal addresses, disguising who you are, or ignoring an opt-out request is where businesses get into real trouble.

Why most cold email campaigns underperform

When we look at a cold email programme that “isn’t working,” it’s almost always one of these:

  • Sending from the main company domain. No dedicated sending domain and warm-up means one bad campaign risks the domain your invoices and real correspondence rely on.
  • A wide, shallow list. The Belkins data is blunt about this: broad targeting drags reply rates down, not up.
  • Generic, self-focused copy. “We help companies like yours” isn’t a reason to reply. A specific, researched reason to reach out to this person is.
  • No authentication set up. Skipping SPF, DKIM and DMARC is now one of the fastest routes to the spam folder, not a shortcut.
  • Ignoring the legal basics. No clear business ID, no working unsubscribe, or messages sent with no defensible consent basis — all avoidable, all real risk.

How to judge whether your cold email is working

Reply rate alone can mislead. Use these instead:

  • Reply rate against a realistic benchmark — sitting anywhere near or above that 0.45% strict average is respectable; well below suggests a targeting or deliverability problem, not a copy problem.
  • Positive reply rate, not just any reply — an “unsubscribe” counts as a reply but not as progress.
  • Meetings and demos booked, the number that actually matters commercially.
  • Domain and spam-rate health in tools like Google Postmaster Tools, tracked over time, not checked once.
  • Complaint rate staying comfortably under Google’s 0.30% ceiling — closer to the recommended 0.10% is safer.

How BeyondClix approaches cold email outreach

We treat cold email as infrastructure first, copy second. That means dedicated sending domains, proper SPF/DKIM/DMARC and warm-up before a single prospecting email goes out, tightly built lists over broad ones, and messaging built around a genuine, specific reason to reach that person — inside a consent basis that holds up under the Unsolicited Electronic Messages Act. We report on replies that actually convert, not vanity opens.

If your outbound is landing in spam, getting ignored, or you’re not sure it’s legally sound, that’s worth a proper look. Explore our full range of services, or get in touch with the BeyondClix team for a straight assessment of where your outbound stands.

Frequently asked questions

Is cold email legal in New Zealand?

Yes, for B2B outreach done properly. The Unsolicited Electronic Messages Act 2007 allows messages sent under express, inferred, or deemed consent — deemed consent covers a published business address where there’s no stated objection and the message is relevant to that person’s role. Every message still needs clear sender identification and a working unsubscribe. Non-compliance carries a fine of up to $500,000, enforced by the Department of Internal Affairs.

What’s a good cold email reply rate in 2026?

Belkins’ 2025 analysis of 7.5 million cold emails, measured strictly as replies divided by total sent, found an average of 0.45%. Anywhere near or above that is solid; small, well-targeted campaigns can do meaningfully better — very small companies (0-10 staff) in the same dataset replied at 0.72%, more than three times the rate large enterprises got.

Why is my cold email going to spam?

Almost always missing or incomplete authentication. Google’s bulk sender rules require SPF, DKIM and a DMARC policy for high-volume senders, and enforcement tightened further from Gmail in November 2025. Sending cold outreach from your main company domain without warm-up, or from a domain with no authentication at all, is the fastest way to end up in spam or blocked outright.

Should I buy an email list for cold outreach?

No. Bought lists are usually broad, inaccurate, and poorly matched to consent requirements — exactly the combination that drags reply rates down and creates legal exposure under New Zealand’s spam law. A smaller, researched, relevant list consistently outperforms a large purchased one.

How is cold email different from email remarketing?

Cold email reaches people who’ve never engaged with your business, aiming to start a conversation. Email remarketing (nurture and re-engagement sequences to existing leads or customers) targets people already in your funnel. Most Auckland businesses need both: cold email to create new pipeline, remarketing to convert and retain what’s already there.

Sources

Published by BeyondClix — a full-service digital marketing and growth agency in Auckland, New Zealand.

Want this run for your business?

Talk to our CEO. We will show you where the money is leaking and what we would do about it.

Talk to our CEO→ Contact our team for more info