Usually, no. Leave links out of the first cold email unless one link makes the next step easier for the prospect, or proves something the email cannot prove in a sentence. Once the prospect replies, send whatever they ask for. At that point a link is an answer to a request.
That default holds for B2B outbound in 2026. It rests on what Gmail and Microsoft publish rather than on forum rules. Neither company says "no links in cold email." Both say plenty about links, images and files that look risky, and both scan what you send before your prospect sees it.
This guide puts the official guidance for links, images, attachments and HTML in one table. It then separates deliverability risk from reply-rate cost and gives you a rule for the first email and the ones after it.
Why the first cold email rarely needs a link
The first email has one job, which is to start a conversation. The reply is the conversion. A click is a detour. The prospect leaves your message for a page that competes for their attention, and the moment where they might have typed "sure, tell me more" passes.
My view on first emails: short, human ones beat robotic templates. Add a homepage link, a logo, a PDF and a booking button, and a note from one person starts to look like a campaign. A busy founder skims that kind of email and archives it.
So the safe first-touch default is plain text. Write a few sentences with one reason to talk and one question. If the copy needs work before you touch formatting, start with how to write a cold email that actually gets replies.
This default is a starting position. A link belongs in the email when the prospect would lose something without it, and the decision rule further down says when that happens.
What do Gmail and Outlook actually say about links and attachments?
Google and Microsoft change their guidance without notice, so check the live page before you rely on a detail.
Gmail's sender guidelines say body links "should be visible and easy to understand," and that a reader should be able to tell what happens before clicking. The same page asks for content that is accurate and not misleading. It sets no limit on the number of links.
Gmail's help page on blocked files and messages says Gmail blocks messages carrying executable files or certain links. It sometimes blocks messages for content, images or links it believes could spread a virus. Google says it updates the blocked types often.
Microsoft's page on blocked attachments in Outlook calls file attachments one of the most common routes for viruses. For files Outlook blocks, Microsoft suggests putting the file on OneDrive or SharePoint and sending a link to it.
Corporate Microsoft 365 mailboxes often add one more check. Microsoft's Safe Links feature scans inbound email for known malicious URLs and can rewrite supported links so they are verified again when clicked. A rewritten link points to a safelinks.protection.outlook.com address. The recipient's security policy causes that rewrite, so it does not mean your email in particular was flagged.
Here is the same guidance side by side.
| Element | What the official pages say | What they do not say | First-touch default |
|---|---|---|---|
| Links | Gmail: visible, easy to understand, no surprise on click. Gmail may block certain links. Defender scans links and may rewrite them | How many links are safe, or whether links lower replies | Zero, or 1 that clearly earns its place |
| Images | Gmail may block messages with images that could carry a virus | That ordinary images send cold email to spam | Skip, unless the image is the proof |
| Attachments | Gmail blocks executables. Outlook blocks many file types and calls attachments a common virus route. Microsoft suggests a OneDrive or SharePoint link instead | Anything about PDFs in sales email | Skip until the prospect asks |
| HTML formatting | Nothing specific in these pages | That HTML by itself hurts inbox placement | Plain text |
The official layer is about safety and clarity. It says nothing about cold email strategy. Rules like "one link means spam" or "HTML always fails" go further than these sources do. Here is the narrower reading. Anything that might carry harm gets scanned and can be blocked, and every extra object gives a filter one more thing to judge.
A second piece of folklore mixes two different rules. The same sender guidelines page also requires one-click unsubscribe and a visible unsubscribe link for marketing and subscribed messages from bulk senders. That rule covers promotional mail, not whether a sales link belongs in a first cold email.
Whether your outreach needs an opt-out line depends on the law in your prospect's country, which is a separate question from formatting. This is not legal advice.
Do links hurt deliverability or reply rates?
The evidence is mixed, and it is thinner than most ranking pages suggest. The official pages describe scanning and blocking. None of them measures what one ordinary link does to inbox placement for a well-configured sender.
Blog posts that quote reply lifts or drops from links also fall short. Those posts rarely show a source, sample size or method. A number with no method should not decide anything that puts a sending domain at stake.
Two questions get blended here, so take them one at a time.
The deliverability side
A link points to a domain, and that domain's reputation travels with your email. A clean link to your own site carries little risk. A shortened URL, a redirect chain or a domain with a poor history is harder for both reader and filter to judge. Gmail's clarity rule works against anything that hides where it leads.
Click tracking adds a second layer, because it reroutes each link through a tracking domain. That mechanic needs its own explanation, and does open tracking really hurt cold email deliverability covers the wrapping and domain side.
The reply side
A link changes what the reader can do next. With no link, the reader can reply or ignore. With a link they get a third choice: click, browse and leave without writing back. For an email whose goal is a meeting, that is a cost, even when the click shows up as engagement in your dashboard. Calls come out of conversations, and clients come out of calls. A click starts neither.
When do images and HTML help, and when do they hurt?
Plain text is the safer first-touch format, because it looks like what it is: one person writing to another. A designed HTML email with a header, brand colors and buttons looks like a newsletter, and readers file it as one.
The part founders miss is the signature. A designed signature with a logo, a headshot, a banner and 4 social icons adds several images and links to every email, before you write a word. For a first touch, put your name, title and company in text.
HTML is worth it only when it gives the reader something plain text cannot, such as a small table of results for their exact segment. Bold, colors and a logo do not pass that test.
Images follow the same logic. Skip them unless the image is the proof, like a screenshot of a result the prospect would recognize at a glance. Even then, ask whether it belongs in the first email or in your reply once they say yes.
None of the official pages treats an ordinary image as an automatic spam trigger. The main reason to leave images out is attention, and Gmail's scanning note is a smaller second reason.
Should you ever attach a file to a cold email?
Skip it in the first touch, because an attachment asks a stranger to open a file from a sender they have never heard of. Some file types are blocked outright on both platforms, as the table shows. Even an allowed PDF adds friction, because the reader has to download it, open it and decide whether it was safe.
The better path matches what Microsoft recommends for blocked files: host the file and send a link. Put the case study, deck or one-pager on a web page or cloud drive. Share that link after the prospect shows interest.
The exception is narrow. Attach the file when the prospect asked for it, or when it is the next step they agreed to, such as a proposal after a call. You are answering a request then, so send it in whatever format they prefer.
How should a founder decide between plain text and a link?
Use one rule. If the link is not needed for the prospect to understand the offer or trust the sender, remove it.
| Situation | What to do |
|---|---|
| The link goes to your homepage "for context" | Remove it, and put the context in the email |
| The email already has proof, a clear ask and a reason you wrote | Remove any extra link or file, because it only competes with the ask |
| The proof only works as a URL, like a public case page in the prospect's niche | Keep 1 link, written as a full, readable address |
| A deck, file or video the prospect has not asked for | Move it to the reply thread as a hosted link |
| A follow-up in the sequence that goes out before any reply | Treat it as cold and apply the same rules |
| The prospect replied and asked for detail | Send links and files freely |
What separates a first touch from a follow-up is the reply. Email 3 to someone who has never answered is still a cold email.
If a link stays, make it pass Gmail's own test. Write the domain out in full. Say in the sentence what the page shows, so nobody clicks blind. Use no shorteners and no "click here."
What works better than stacking links and files?
Trust has to come from the email and the person sending it, not from a page behind a click.
Put the proof in the message itself. A past client, a result and the kind of company it was for fit in two lines, and the prospect never has to leave to find them. One specific line about the problem you solved, for what kind of company, does more than a link to a page of logos.
Then make the sender easy to check, because prospects look you up before they answer. My rule here is blunt: a strong profile can carry a weak message, but a perfect message from a ghost profile goes nowhere.
Sequence choice does the rest. We usually open on LinkedIn with email follow-ups behind it, so a cold inbox is not where the relationship starts. I call those warm emails.
By the time one lands, the prospect has already looked up the sender and quietly sized them up. My rule: the email should never be the first touchpoint. A prospect who has already seen your profile does not need your homepage to decide whether you are real.
This only works when the profile does its job. As I put it in a 2023 post, strangers "will judge you based on your LinkedIn profile." When all they find is a title and a photo, you lose them in 2 seconds. Fix the profile before you lean on LinkedIn-first.
What is the simplest safe setup before you worry about links?
Formatting comes last, because copy will not rescue a weak list or sender. Gmail's sender guidelines, linked above, also ask for authenticated mail and a low spam rate in Postmaster Tools. Unauthenticated mail can land in spam or be rejected.
Run this checklist before the first send:
- Send from a separate domain, never from your main company domain.
- Set up SPF, DKIM and DMARC (the DNS records that prove the mail really comes from your domain) before you send at any volume.
- Check your spam rate every week in Google Postmaster Tools, Google's free dashboard for senders.
- Keep the body short and in plain text, with a text-only signature.
- Make one clear ask, and make it a reply.
- Default to zero links, and allow 1 only if it passes the rule above.
- Leave out images and attachments in the first touch.
- Read the email as the prospect would, and ask whether a stranger would believe one person wrote it to them.
The full walkthrough is in domains, inboxes and the boring part of cold email. If you would rather have senior people run the setup and sending for you, see our cold email agency service, where we handle domains, authentication, warmup, monitoring and dedicated sending IPs.
Where else do links sneak into a cold email?
Is a link in the signature safer than one in the body?
Only a little. A filter reads the whole message, signature included, so a signature link still counts as a link. Its advantage is placement. It sits away from your question and does not compete with the reply you want. If you keep one, make it your plain company domain and drop the social icons and banners.
Are URL shorteners fine in cold email?
Leave them out. A shortened link hides its destination, so it fails Gmail's clarity standard covered earlier. It also routes through a shared domain that other senders use too. If the link matters, write the real address in full. If it does not matter enough to show in full, cut it.
Should the first email include a calendar link?
Usually not. A calendar link asks a stranger to commit 30 minutes before they have said a word to you, and it adds a link to a message that works best without one. Ask a plain question instead, such as whether a short call makes sense this month. Send the calendar once they say yes.
First emails landing in spam with a link or attachment as the suspect? Walk me through the message on a call and I will have a look.
Questions founders ask about links in cold emails
Is cold email still worth sending in 2026?
Yes, as long as it reaches a narrow list with a reason to write to each person. Outreach that stops performing usually fails on targeting or sender setup rather than on the channel itself. Treat it as one part of a multichannel sequence, judge it on booked meetings instead of opens, and rewrite any message that reads like bulk promotion before you add volume.
How can I test whether a link changes my reply rate?
Run a split test where the only difference is the URL. Divide one prospect list randomly into two halves, send identical copy from the same mailbox pool, and add the URL to one version only. Measure positive replies and ignore clicks. Keep both versions running until each half has reached enough people for the gap to mean something, then keep whichever version produced more conversations.
Should I add my LinkedIn profile URL to my signature?
It is rarely needed. Prospects who want to check you will search your name, so make that search easy: use the same full name, job title and company that appear on your profile. A matching name does the verification work without adding another URL for filters to scan. Add the profile address only after someone asks where to find you online.
What should I send when a prospect replies asking for more information?
Answer their question in a few lines first, then share one resource that matches their industry or company size. A short summary inside the reply lets them decide whether opening the page is worth their time. Pick a single case study over a full deck, mention what they will find on it, and close by proposing two time slots for a call.
How do I check where a message with a URL lands before launching?
Send the final version to test inboxes you own on free Gmail plus Outlook, including a work mailbox on Microsoft 365 if you can get one. Look at which folder it reaches, then open the message headers to confirm each authentication protocol shows a pass. Repeat this check whenever you change the URL, the signature or the sending domain. If the version with the link lands in a worse folder than the version without it, cut the link and let the reply do the work.