Cold Email Cheat Sheets
Thought Leader Frameworks & Copywriting Science Adapted for Solanasis
Version: 1.2 Date: 2026-03-25 Purpose: Quick-reference cheat sheets distilling the best techniques from top cold email thought leaders and copywriting science, adapted for Solanasis verticals. Keep this open alongside the Cold Email Master Playbook. Sources: Alex Berman (Experiment 27), Kyle Coleman (Clari), Will Allred (Lavender), Justin Michael (BASHO), Sam Nelson (Agoge/SDRLeader), Heather Morgan (SalesFolk), Jack Reamer (SalesBread), Becc Holland (Flip the Script), Sujan Patel (Mailshake), HubSpot, Woodpecker, Gong.io (85M emails), Reply.io, Digital Bloom (10K emails)
1. Alex Berman’s 3-Line Cold Email
Alex Berman (founder, Experiment 27) built a $500K agency using this ultra-short format. His rule: if your email is longer than 3 lines, it’s too long. The logic: busy executives scan, they don’t read. Three lines is scannable in 2 seconds.
| Line | Purpose | Rule |
|---|---|---|
| Line 1: Compliment or Observation | Show you know them. Something specific to their company. NOT “I love your work.” | Must reference something you can only know by researching THEM |
| Line 2: Case Study or Credential | One sentence of proof. What you did for someone similar. | Include a specific result if possible (number, outcome) |
| Line 3: CTA | One question. Low friction. | NEVER “Can we schedule a 30-minute call?” — too much commitment |
Assembled Solanasis 3-Line Emails
Attorney:
Saw that [Firm Name] handles estate planning for high-net-worth families in Colorado — sensitive work with real ABA 1.6(c) exposure. We just helped a similar-size firm document their data protection posture in 10 business days — the deliverable doubled as malpractice insurance documentation. Worth a conversation?
Foundation:
[Foundation Name]‘s work in [cause area] caught my attention — managing $[X]M in assets with a lean team is no small feat. We help foundations like yours verify that backup systems actually restore (two-thirds fail the first test) and produce a board-ready report in 10 days. Would a quick look at the scope be useful before your next board meeting?
CPA:
I noticed [Firm Name] handles tax preparation for [client types] in [City] — that means WISP and FTC Safeguards obligations that most firms haven’t fully addressed. We run a 10-day review that produces the exact documentation the IRS and FTC require. Penalties can reach $100K/violation for gaps. Worth a 15-minute call to see where things stand?
SMB:
Saw that [Company Name] is growing fast in [industry] — 80% of cyber incidents hit companies under 1,000 employees, and growth usually means systems haven’t caught up. We run a 10-day Resilience Checkup: real restore test, security baseline, 90-day roadmap. Most clients find it pays for itself in the first issue it catches. Worth a quick call?
MSP:
[Company Name] serves [N] clients in [City] but doesn’t list security assessments in your offerings — that’s a revenue gap we can close together. We assess. You implement. Clean handoff, 15% referral fee, and your clients get documented proof of resilience. Worth 15 minutes to see if the model fits?
2. Kyle Coleman’s Curiosity-Based Framework
Kyle Coleman (SVP Revenue Growth, Clari; formerly Figma) advocates for “curiosity-driven” cold emails. His principle: don’t pitch — provoke curiosity. The prospect should think “I need to know more” rather than “this person is selling me something.”
The Formula
| Element | What It Does | Example |
|---|---|---|
| Observation | Show you noticed something specific about their business | ”I noticed [Firm Name] doesn’t list a CISO or IT director on your team page.” |
| Insight | Share a non-obvious insight related to that observation | ”Firms your size typically outsource security but rarely test whether the outsourced setup actually works.” |
| Question | Ask a genuine question (not a rhetorical setup for your pitch) | “How do you currently validate that your backups and security posture are solid?” |
| Bridge | One sentence connecting your question to what you do | ”We help firms answer that question definitively in 10 business days.” |
| CTA | Low friction | ”Worth exploring?” |
Why It Works for Professional Services
Attorneys, CPAs, and executives are trained skeptics. A pitch triggers their defenses. A genuine question triggers their analytical instinct — they want to answer it, even internally. That mental engagement is the foot in the door.
Solanasis Curiosity Emails
Attorney:
I noticed [Firm Name]‘s team page lists estate planning as a core practice area but doesn’t mention a technology director or security contact.
Most firms in that position rely on an MSP for day-to-day IT but have never tested whether their client data is actually recoverable under the “reasonable efforts” standard in ABA Rule 1.6(c).
How does your firm currently validate that? Genuine question — I’m curious how estate firms your size handle it.
We help firms answer that question in 10 business days. Worth a conversation?
CPA:
I noticed [Firm Name] handles tax preparation but your site doesn’t mention your Written Information Security Plan.
The IRS made WISP mandatory for every tax preparer, but most small firms have a template from years ago that wouldn’t survive FTC scrutiny (penalties up to $100K/violation).
Where does your firm’s WISP currently stand? I’m genuinely curious — it’s the most common gap we see.
We validate WISPs against actual IRS and FTC requirements in 10 days. Worth a quick call?
3. Lavender Data: What the Numbers Say
Will Allred (co-founder, Lavender.ai) built the leading email coaching AI. Lavender has analyzed millions of cold emails. These are their published findings — not opinions, but data.
Email Length
| Length | Reply Rate Impact | Recommendation |
|---|---|---|
| Under 25 words | Too short — feels abrupt | Breakup emails only |
| 25-50 words | Highest reply rate zone | Use for follow-ups (Email 2-4) |
| 50-100 words | Optimal for Email 1 | Your “hook” email. Enough to make the case, short enough to scan. |
| 100-150 words | Slightly lower replies | Only for Tier 1 with heavy personalization |
| 150+ words | Reply rate drops sharply | Never. If you need this many words, your pitch isn’t clear. |
Reading Level
| Grade Level | Reply Rate Impact | Why |
|---|---|---|
| 3rd-5th grade | Highest reply rates | Simple language = fast comprehension = lower cognitive load to reply |
| 6th-8th grade | Good | Acceptable for professional services (lawyers, CPAs) |
| 9th+ grade | Declining | Sounds academic or pompous. Nobody wants to work hard to read a cold email. |
How to check: Paste your email into hemingwayapp.com. Aim for grade 5 or below.
Personalization Impact
| Personalization Level | Reply Rate Boost | Time Investment |
|---|---|---|
| No personalization (generic template) | Baseline | 0 min |
| Name + company only | +5-10% | Automated |
| Industry + role reference | +15-20% | 30 sec (AI-generated) |
| Custom first line (website/news research) | +30-40% | 2-3 min (AI-assisted) |
| Custom first line + trigger event | +50-80% | 3-5 min |
Other Lavender Findings
- First-person pronouns (“I,” “we,” “our”) should be less than 50% of pronouns. Flip the ratio: more “you” and “your.”
- Questions in email body: 1 question = optimal. 2 questions = slight decline. 3+ questions = reply rate drops (too much work for the reader).
- Exclamation points: 0-1 per email. More than that feels like spam or desperation.
- Mobile formatting: 40%+ of executives read email on mobile. If your email is wider than 40 characters per line, it wraps awkwardly. Short paragraphs, short sentences.
4. The PAS Framework (Problem → Agitate → Solve)
The most proven copywriting framework for cold email, especially for compliance-driven verticals.
The Formula
| Step | What to Write | Word Budget |
|---|---|---|
| Problem | Name the specific problem they probably have | 1 sentence (15-20 words) |
| Agitate | Make the problem feel urgent or expensive — consequences of inaction | 1-2 sentences (20-30 words) |
| Solve | How you fix it — outcome, not features | 1-2 sentences (20-30 words) |
| CTA | Low-friction ask | 1 sentence |
PAS Applied to Each Vertical
Attorney PAS:
Most estate firms haven’t formally documented “reasonable efforts” under ABA Rule 1.6(c). (Problem) Malpractice carriers are now asking cybersecurity questions during renewal — firms without documentation face higher premiums or denied coverage. (Agitate) We produce that documentation in 10 business days: maturity scorecard, risk register, 90-day action plan. (Solve) Worth a conversation? (CTA)
CPA PAS:
Most small CPA firms have a WISP that was created from a template and never updated. (Problem) The FTC Safeguards Rule requires a “living document” with specific controls — penalties reach $100K per violation. The IRS can revoke your PTIN for non-compliance. (Agitate) Our 10-day review validates your WISP against actual IRS and FTC requirements and produces the documentation to prove it. (Solve) Would 15 minutes be useful to see where [Firm Name] stands? (CTA)
Foundation PAS:
Two-thirds of restore tests fail on the first attempt — most foundations have never tested theirs. (Problem) If donor records or grant data are lost, every dollar spent recovering is a dollar not going to [cause area]. After Blackbaud exposed 13,000 nonprofits, boards are asking these questions. (Agitate) We run a 10-day assessment with a real restore test and deliver board-ready reporting. (Solve) Would a quick look at the scope be useful? (CTA)
SMB PAS:
Most companies your size have backups but have never tested a real restore. (Problem) The average breach cost for companies under 500 employees is 137-$427 per minute. (Agitate) Our 10-day Resilience Checkup includes a real restore test, security baseline, and a prioritized 90-day plan. (Solve) Worth 15 minutes to see if it’s relevant? (CTA)
5. The BAB Framework (Before → After → Bridge)
Best for painting a picture of the improved state. Use when the prospect’s current pain isn’t urgent enough for PAS — they need to see the “after” to want it.
The Formula
| Step | What to Write | Example |
|---|---|---|
| Before | Their current reality (the problem they live with) | “Right now, if your systems went down, your team would scramble.” |
| After | The improved state (what life looks like after your service) | “After a 10-day Resilience Checkup, you’d have a tested restore process and a board-ready report.” |
| Bridge | How you get them from Before to After | ”That’s exactly what we do for [vertical] — tight scope, 10 days.” |
When to Use BAB Instead of PAS
- When the problem isn’t painful enough to agitate (foundations with good funding)
- When you’re painting a positive vision instead of poking a wound
- For Email 3 (fresh angle after the pain-focused Email 1)
- For MSPs and Brokers where the “after” is revenue/partnership (positive framing)
6. The QVC Framework (Question → Value → CTA)
Best for: Short follow-up emails (Email 2, Email 3) where you’ve already introduced yourself. Total target: 25-50 words.
The Formula
| Step | Rule | Example |
|---|---|---|
| Question | One provocative, relevant question | ”When was the last time your firm tested a full backup restore?” |
| Value | One sentence connecting your service | ”That test is the centerpiece of our review — and two-thirds of firms find issues.” |
| CTA | Ultra-short | ”Worth a call?” |
QVC Follow-Ups by Vertical
Attorney QVC:
Has [Firm Name] ever documented its cybersecurity posture for malpractice renewal? Carriers are starting to ask — we help firms produce that documentation in 10 days. Worth a call?
CPA QVC:
Quick question: is [Firm Name]‘s WISP a living document or a template from a few years ago? That’s the gap the FTC is targeting. We validate and fix it in 10 days. Worth a quick chat?
Foundation QVC:
If [Foundation Name]‘s systems went down tomorrow, how long before [program area] records are recovered? Most foundations don’t know. We test that — real restore, 10 days. Worth a look?
SMB QVC:
If your systems went down tomorrow morning, how long before you’re back up? And how do you know? We test that in 10 days. Worth a quick call?
7. Subject Line Formulas (Top 10)
Based on data from Lavender, HubSpot, Woodpecker, and Reply.io. Ranked by average open rate performance.
| # | Formula | Example | Open Rate Impact |
|---|---|---|---|
| 1 | [Specific topic] at [Company] | “Client data protection at [Firm Name]“ | Highest — specific + personalized |
| 2 | Question about [their thing] | “Quick question about your firm’s WISP” | High — creates curiosity gap |
| 3 | [Name], [short value hook] | “[Name], 10 days to board-ready reporting” | High — personal + specific |
| 4 | Idea for [Company] | “Revenue idea for [Company Name]“ | High for MSP/partnership emails |
| 5 | [Mutual person] mentioned you | ”Sarah at [Firm] suggested I reach out” | Very high (only use with real referrals) |
| 6 | [Number/stat] + [topic] | “66% of law firms lack an IR plan” | Good for data-driven prospects (CPAs, analysts) |
| 7 | Saw [something specific] | “Saw [Company]‘s expansion to [City]“ | Good — shows research |
| 8 | For [Name] — [deliverable] | “For [Name] — resilience snapshot” | Moderate — implies value |
| 9 | Re: [original subject] | “Re: Client data protection at [Firm]“ | Works for Email 2 (same thread). NEVER for Email 1. |
| 10 | One-word | ”Backups?” / “WISP?” / “Resilience?” | Hit or miss — test cautiously |
Subject Line Length Data
| Length | Performance |
|---|---|
| 1-3 words | High open rate but low reply (curiosity without context) |
| 4-7 words | Sweet spot — specific enough to signal value, short enough to scan |
| 8-12 words | Declining — gets truncated on mobile |
| 13+ words | Poor — inbox preview cuts it off |
8. The “Never Send” List
These words, phrases, and patterns kill reply rates, trigger spam filters, or destroy credibility. Avoid them in both subject lines and body text.
Phrases That Kill Reply Rates
| Phrase | Why It Fails | Say Instead |
|---|---|---|
| ”I hope this email finds you well” | Generic. Signals mass email. | Skip the pleasantry. Start with personalization. |
| ”I’d like to introduce myself” | Self-centered. They don’t care about your introduction. | Lead with their problem or something about their company. |
| ”I wanted to reach out because…” | Passive, wordy. | ”I’m reaching out because…” or skip entirely. |
| ”We are the leading provider of…” | Nobody believes this. | Show proof (case study, stat) instead of claiming. |
| ”Just checking in” | Empty follow-up. Adds no value. | Add a new data point, question, or angle. |
| ”Touching base” | Same as above. | Same fix. |
| ”I understand you’re busy, but…” | Acknowledges you’re an interruption. | Don’t apologize for emailing. Just be valuable. |
| ”No worries if not interested” | Gives them permission to ignore you. | ”If this isn’t a priority right now, happy to be a resource whenever." |
| "Would love to pick your brain” | Asks for their time with nothing in return. | Offer value first: “I put together [resource]. Happy to share." |
| "As per my last email…” | Passive-aggressive. | ”Following up on [topic] — one new data point:“ |
Spam Trigger Words (Top 30)
| Word/Phrase | Alternative |
|---|---|
| ”Free" | "Complimentary” or “no-cost” (or better: don’t offer free things in cold email) |
| “Guarantee" | "Our clients typically find…" |
| "No obligation" | "No pressure" |
| "Act now" | "Would [specific day] work?" |
| "Limited time” | Reference their actual deadline (renewal, tax season) |
| “Click here" | "Here’s the link: [full URL]" |
| "Buy now” / “Order now” | Never applicable to Solanasis |
| ”Risk-free" | "10-day scope, fixed fee, no ongoing commitment" |
| "100% satisfied" | "Most clients find it pays for itself…" |
| "Dear friend” / “Dear Sir/Madam” | Use their actual name |
| ”Congratulations” | Only if genuinely warranted |
| ”You’ve been selected” | Never |
| ”This is not spam” | Guarantees it gets flagged as spam |
| ”Urgent” | Describe the actual consequence instead |
| ”Opportunity" | "Would it make sense to…“ |
9. Follow-Up Templates by Situation
After No Reply (Email 2)
Hi [First Name],
Following up on my note about [topic]. One thing I should have mentioned: [one new data point or angle they care about].
Worth a quick call?
Dmitri
After “Send Me More Information”
Happy to — here’s our one-pager: [link or attachment in reply]
Quick question so I can tailor the conversation: what’s the one thing about your [IT setup / compliance posture] that you’d most want us to look at?
After “Not the Right Time”
No problem at all — timing matters. Can I follow up after [their natural milestone: tax season, renewal, board meeting, Q3]?
In the meantime, I’ll send the one-pager so you have it whenever the timing is right.
After “How Much Does This Cost?”
Great question. Our 10-Day Resilience Checkup runs 19,500 depending on company size. 50% upfront, 50% on delivery.
[For under 10 users: 7,500 | 51-150: 19,500]
Most clients find it pays for itself in the first issue it catches. Want to see what we’ve found at firms like yours?
After Long Silence (Re-Engagement, 60-90 Days Later)
Hi [First Name],
We connected briefly back in [month]. I’m not following up on that — just wanted to share something relevant: [new data point, industry event, blog post, or trigger event].
If [topic] ever becomes a priority for [Firm Name], I’m still an easy call.
Dmitri | 303-900-8969
After a Referral
Hi [First Name],
[Referrer Name] at [Referrer Company] suggested I reach out — they thought our work might be relevant for [Firm Name].
We help [vertical] firms [one-sentence value prop]. [Referrer Name] can share their experience if useful.
Would 15 minutes make sense?
10. Personalization Tiers: What to Write for Each Level
| Tier | First Line | Rest of Email | Time | Use When |
|---|---|---|---|---|
| Tier 1 | Reference their website, recent news, LinkedIn post, 990 data, specific program, or industry event | Standard template for their vertical | 3-5 min | Tier 1 prospects (managing partners, EDs at $10M+ foundations) |
| Tier 2 | Reference a trigger event: job change, funding, compliance deadline, industry breach | Standard template | 1-2 min | Tier 1-2 prospects with known triggers |
| Tier 3 | Reference their industry + role + typical challenge | Standard template | 30 sec | Tier 2 prospects |
| Tier 4 | Mail merge: “Hi {{first_name}},” + template | Standard template | 0 sec | Tier 3 prospects |
Tier 1 First Lines by Vertical
Attorneys:
- “I noticed [Firm Name] has been serving [City] families for [N] years — that’s a lot of trust documents and beneficiary records.”
- “Saw your colleague [Name]‘s article in the CBA Journal about [topic] — it got me thinking about the data protection side.”
- “[Firm Name]‘s focus on [estate planning / elder law / trusts] means you’re handling some of the most sensitive data in professional services.”
Foundations:
- “I read [Foundation Name]‘s latest report on [program area] — impressive reach for a team of [N].”
- “Your 990 shows $[X]M in assets managed — that’s significant donor trust data for a lean operation.”
- “[Foundation Name]‘s work in [cause area] clearly has generational impact — protecting the infrastructure behind that work matters.”
CPAs:
- “I noticed [Firm Name] handles both tax preparation and [wealth management / small business] accounting — that’s two separate sets of compliance obligations.”
- “With [N] CPAs listed on your team page, [Firm Name] is in the size range where the FTC is focusing enforcement.”
- “Post-tax-season is when most firms we work with finally tackle the WISP — figured the timing might work.”
SMBs:
- “Saw that [Company Name] recently expanded to [location/size] — growth like that usually means systems haven’t caught up yet.”
- “I noticed [Company Name] serves [regulated industry] clients — that comes with data protection obligations most [industry] companies haven’t formalized.”
- “Congrats on the growth at [Company] — [N] employees means you’re past the point where IT can run on duct tape.”
11. CTA Formulas That Convert
Ranked by Effectiveness
| # | CTA | Best For | Why It Works |
|---|---|---|---|
| 1 | ”Worth a conversation?” | Email 1 (any vertical) | Ultra-low friction. Asks about value, not time. |
| 2 | ”Would a 15-minute call make sense?” | Email 1 (formal verticals) | Specific duration reduces perceived commitment |
| 3 | ”Worth a quick call?” | Follow-ups | Even shorter. Respects their inbox fatigue. |
| 4 | ”How about [Tuesday] at [2 PM]?” | After positive signal | Specific ask = higher conversion (Blount principle) |
| 5 | ”Can I send you the one-pager?” | Breakup emails, soft replies | Zero commitment. Keeps door open. |
| 6 | ”Would it make sense to see what the assessment covers?” | Prospects unfamiliar with you | Asks about relevance, not commitment |
| 7 | ”Is this something [Firm Name] would want to tackle before [deadline]?” | Trigger-event emails | Ties to their calendar |
CTA Anti-Patterns
| Never Say | Why |
|---|---|
| ”Can I get 30 minutes of your time?” | Too long for a first cold interaction |
| ”When are you free this week?” | Open-ended. Makes them do the work. |
| ”Let me know your thoughts.” | Vague. No specific action. |
| ”I’d love to learn more about your business.” | Self-centered. They’re not here to educate you. |
| ”Would you be open to a quick chat to explore synergies?” | Buzzword soup. |
12. Quick Reference: 10 Cold Email Rules
Print this. Tape it next to your screen. Read it before every send session.
| # | Rule |
|---|---|
| 1 | Under 100 words. Email 1. Under 75 for follow-ups. Under 50 for breakups. |
| 2 | One question per email. Multiple questions = lower reply rates. |
| 3 | Plain text only. No images, logos, HTML, tracking pixels, or attachments. |
| 4 | Personalize the first line. Everything after is template. The first line is what they actually read. |
| 5 | End with a question. Questions create obligation to respond. Statements don’t. |
| 6 | Never “just checking in.” Every follow-up must add new value: new data, new angle, new question. |
| 7 | 4 emails max. After 4 touches with no reply, stop. Re-engage in 60-90 days with a fresh angle. |
| 8 | Reply within 2 hours. When they respond, speed wins. |
| 9 | Write for mobile. Short paragraphs, short lines, scannable in 5 seconds. |
| 10 | The breakup email works. Don’t skip Email 4. It triggers loss aversion and often gets the highest reply rate. |
13. Justin Michael’s BASHO Sequence
Justin Michael (author, Tech-Powered Sales) developed BASHO for ultra-personalized multi-touch sequences. The principle: every email in the sequence must reference something new that you researched. No generic follow-ups.
The Rules
| Rule | What It Means |
|---|---|
| Hyper-personalize every touch | Each email references a different research finding — 990 data, LinkedIn post, news article, website page |
| Pattern interrupt | First sentence must break their autopilot scan. Something unexpected or specific. |
| Multi-channel stacking | Email → LinkedIn view → Call → LinkedIn message → Email. Never the same channel twice in a row. |
| The “because” thread | Every follow-up starts with “because” + new reason: “I’m following up because I noticed [new research finding]…” |
BASHO Applied to Solanasis (Attorney Tier 1)
Email 1: “I noticed [Partner Name]‘s article in the CBA Journal about estate planning complexity — the data protection obligations behind that work are exactly what ABA 1.6(c) targets. We help firms document ‘reasonable efforts’ in 10 business days. Worth a conversation?”
Email 2 (Day 4): “Following up because I saw [Firm Name] recently added [new associate / expanded practice areas] — growth like that usually means more client data but the same IT setup. That’s the gap we test.”
Email 3 (Day 8): “One more reason I reached out: 66% of law firms your size lack a formal incident response plan (ABA TechReport). We build the documentation and test the restore in 10 days. Worth a quick call?“
14. Sam Nelson’s Agoge Sequence
Sam Nelson (founder, SDRLeader) developed the Agoge Sequence at Outreach.io, generating $1M+ pipeline. The principle: give massive value before asking for anything. Each touch educates.
The 6-Touch Structure
| Touch | Type | Purpose |
|---|---|---|
| 1 | Education — share a genuine insight (not a pitch) | |
| 2 | Connect + engage on their content | |
| 3 | More value — relevant data, article, or case study | |
| 4 | Call + VM | First phone touch (they’ve seen your name twice) |
| 5 | The “by the way” — after 3 value touches, now mention what you do | |
| 6 | Breakup | Graceful close with offer to be a resource |
Agoge Applied to Solanasis (Foundation)
Email 1 (value-only): “Hi [Name], I was reviewing [Foundation Name]‘s 990 and your $[X]M in assets under management. I put together a quick checklist of the 5 operational resilience gaps we see most often at foundations your size. Happy to send it — no strings.”
Email 2 (Day 5, more value): “Following up with one data point: after Blackbaud exposed 13,000 nonprofits ($56M in settlements), foundation boards are asking about disaster recovery verification. Here’s what they’re specifically asking for: [2-3 bullet points]. Thought it might be useful for your next board prep.”
Email 3 (Day 10, the “by the way”): “By the way — this is exactly what we do at Solanasis. 10-day assessment, real restore test, board-ready report. If [Foundation Name] ever needs to answer the ‘are we actually resilient?’ question, we’re a good fit. Worth exploring?“
15. Heather Morgan’s Game Theory Framework
Heather Morgan (SalesFolk founder) applies game theory to cold email: every email is a move in a game where the prospect’s default action is “ignore.” Your job is to change their payoff matrix — make replying feel more valuable than ignoring.
The Principles
| Principle | Application |
|---|---|
| Asymmetric information | You know something they don’t. Lead with insight, not pitch. |
| Loss aversion > gain seeking | ”What you might be missing” > “What you could gain” |
| Social proof as signaling | Mentioning peers creates FOMO without being pushy |
| Reciprocity | Give value first (checklist, insight, stat) → they feel obligation to respond |
| Specificity as credibility | ”$5,000 for 10 days” is more believable than “affordable pricing” |
Game Theory Applied (CPA)
I’ve been reviewing CPA firms in [City] that handle both tax prep and [wealth management / small business accounting].
Here’s what surprised me: 8 out of 10 firms I’ve talked to have a WISP that was created from a template and never updated. The FTC Safeguards Rule requires a living document — penalties reach 50K/day for ongoing non-compliance.
I’m genuinely curious: is [Firm Name]‘s WISP current? Not trying to scare you — just a pattern I keep seeing. We validate WISPs in 10 days if it ever becomes a priority.
16. Sujan Patel’s 4-Line Email
Sujan Patel (co-founder, Mailshake) advocates for the 4-line email: the minimum viable cold email. His data shows shorter emails consistently outperform longer ones.
The Formula
| Line | Purpose | Rule |
|---|---|---|
| Line 1 | Context — why you’re emailing them specifically | Max 15 words |
| Line 2 | Value — what you do, in outcome terms | Max 20 words |
| Line 3 | Proof — one data point or social proof | Max 15 words |
| Line 4 | CTA — one question | Max 10 words |
4-Line Applied to Each Vertical
Attorney: “I work with estate planning firms on ABA 1.6(c) data protection documentation. We produce the deliverable in 10 business days — flat fee. Three Colorado firms completed theirs this quarter. Worth 15 minutes?”
SMB: “I help [industry] companies your size test whether their systems are actually resilient. Real restore test, 10 days, prioritized action plan. 80% of cyber incidents hit companies under 1,000 employees. Worth a quick call?“
17. Hook Type Performance Data
Which opener type you choose matters more than most people think. This data changes how you write your first line.
| Hook Type | Reply Rate | Example | When to Use |
|---|---|---|---|
| Timeline | 10.01% | “With malpractice renewals coming up in Q3…” | Compliance deadlines, board meetings, tax seasons, renewal cycles |
| Numbers | 8.57% | “66% of law firms lack an IR plan…” | Data-driven prospects (CPAs, analysts, tech-savvy owners) |
| Social proof | 6.53% | “Three Colorado estate firms completed this last quarter…” | When you have real peer examples |
| Problem | 4.39% | “Most firms haven’t tested their backups…” | Generic fallback — use only when no timeline or numbers fit |
Source: Digital Bloom, 10,000+ cold email study, 2025
Key insight: Default to timeline hooks whenever possible. They outperform the traditional “problem hook” by 2.3x.
Appendix: Framework Decision Tree
Which framework for which situation?
Is this Email 1? ──→ Yes ──→ Is the pain compliance-driven?
├─ Yes ──→ PAS (Problem → Agitate → Solve)
└─ No ──→ Is the prospect a partnership target?
├─ Yes ──→ AIDA (Attention → Interest → Desire → Action)
└─ No ──→ BAB (Before → After → Bridge)
Is this a follow-up? ──→ Yes ──→ QVC (Question → Value → CTA)
Is this a breakup? ──→ Yes ──→ 3-Line (Berman) or Patel 4-Line
Is this to a C-suite exec? ──→ Yes ──→ 3-Line (Berman) for any email number
Is the prospect cold but you have a trigger? ──→ Kyle Coleman Curiosity Framework
Is this Tier 1 with heavy personalization budget? ──→ BASHO Sequence (Justin Michael)
Want to lead with value, not pitch? ──→ Agoge Sequence (Sam Nelson)
Need to overcome "ignore" default? ──→ Game Theory (Morgan): lead with insight + loss aversion
Hook Type Quick-Pick (for any framework)
| Situation | Best Hook Type | Reply Rate |
|---|---|---|
| Compliance deadline approaching | Timeline | 10.01% |
| Have a compelling stat | Numbers | 8.57% |
| Have real peer examples | Social proof | 6.53% |
| No deadline, no peers | Problem | 4.39% |
16. The Problem-First / Timeline-Hook Framework (2026 Research)
Added in v1.2. Based on March 2026 research from instantly.ai, Lavender, Gong, Digital Bloom, and practitioners like Jesse Ouellette and Kyle Coleman. Full research: Cold Email Research. Full template set: Problem-First Templates.
The Core Principle
Relevance beats personalization. Timeline hooks (referencing specific deadlines or events) get 2.3x more replies and 3.4x more meetings booked than generic problem hooks (Digital Bloom, 10K emails).
Jesse Ouellette (LeadMagic): “I actually don’t think any personalization works… what we find works is when you call something out.”
The 4-Line Format
| Line | Purpose | Word Budget |
|---|---|---|
| 1. Timeline/Trigger Hook | Reference a deadline, enforcement action, or stat relevant to their segment | 15-25 words |
| 2. Bridge | Connect the hook to a risk they haven’t addressed | 15-20 words |
| 3. Mechanism | What we do + the outcome (not features) | 15-20 words |
| 4. Interest CTA | Single, low-friction ask | 5-10 words |
Total: 50-80 words. No exceptions.
Assembled Examples (One Per ICP)
Government Contractor:
CMMC Phase 2 hits November 2026. C3PAOs are already booking 6-9 months out, and 99% of the defense industrial base isn’t assessment-ready.
We help small contractors build their SSP, close NIST 800-171 gaps, and get assessment-ready — typically in 90 days.
Is CMMC readiness on your radar right now?
Healthcare SMB:
OCR had 21 enforcement actions in 2025 — every one of the first 10 settlements had the same gap: failure to conduct a thorough risk analysis.
We run HIPAA-aligned security assessments for practices your size. 10 business days, fixed fee, produces the documentation OCR expects.
Is this a priority for your practice right now?
CTA Options (Interest-Based)
Per Gong’s analysis of 304K emails, interest CTAs outperform meeting-request CTAs for cold outreach:
| Use This | Not This |
|---|---|
| ”Is this on your radar?" | "Can we schedule 30 minutes?" |
| "Is this a priority right now?" | "How about Thursday at 2?" |
| "Worth a quick conversation?" | "Let me show you a demo" |
| "Still relevant?” (follow-ups) | “Just checking in” |
Subject Line Rules
- 2-4 words, lowercase — highest B2B open rates (46%)
- Internal-email feel, not marketing-email feel
- Examples: “cmmc phase 2 readiness” / “quick hipaa question” / “reg s-p deadline” / “cyber insurance renewal”
- Avoid: ALL CAPS, exclamation marks, emojis, spam triggers (“free,” “exclusive,” “act now”)
When to Use This Framework vs. Others
| Situation | Use |
|---|---|
| Email 1 to any ICP with a compliance deadline | Problem-First (this framework) |
| Email 1 where you have a specific case study | Alex Berman 3-Line |
| Follow-up needing to provoke curiosity | Kyle Coleman Curiosity |
| Follow-up needing urgency | PAS (Problem-Agitate-Solve) |
| Partnership conversation (MSPs, brokers) | AIDA |
| Ultra-short follow-up (Email 3-4) | QVC |