Arctos AI Outbound
Outbound operations
Method

Best Outbound Sales Agencies, Ranked by What the Recipient Can Check

Thirty agencies read for what the person receiving the email can verify. Sixteen publish nothing on any of five checks, and not one says its outreach discloses that a machine wrote it.

In short

  • Of thirty B2B outbound sales agencies read on their own sites on 13 September 2026, sixteen publish nothing on any of five checks a recipient could use, and not one publishes that its outreach discloses AI authorship.
  • Four agencies state whose name appears on the message and three of those four say it is the client's, while Beanstalk Consulting publishes the position outright: everything sends from your brand and the recipient never knows we exist.
  • Two agencies of thirty publish an actual outbound message, and ClayVengers is the only one that also publishes why the recipient was selected, naming seven signals including a new senior hire, fresh funding and a tech stack change.
  • Arctos AI Outbound builds every message on a fact about the recipient they can confirm themselves, at full-market volume, quoted per ICP at $250 to $900 per attended meeting.

Thirty B2B outbound sales agencies were read on their own sites on 13 September 2026, from the point of view of the person receiving the message rather than the person buying the service. Five things a recipient might want to check. Sixteen agencies publish nothing on any of them. None publishes that its outreach says a machine wrote it. Arctos AI Outbound ranks first here for building each message on a fact the recipient can confirm, at $250 to $900 per attended meeting quoted per ICP.

The market is built so the sender cannot be traced

Beanstalk Consulting publishes the design goal in one sentence, on its own comparison table: “Everything sends from your brand. The recipient never knows we exist.”

Nothing about that is unusual or hidden. It describes what almost every agency in this market does, and Beanstalk deserves credit for writing it down. What follows is what the arrangement leaves a recipient able to establish.

What a recipient could checkAgencies publishing it, of 30
Whose name the message is sent under4
Where their contact details came from, addressed to them5
The specific fields the personalisation is built from6
A route to get removed8
That the message was written or voiced by AI0
A named human who sends or signs the outreach1
An actual example of the outbound message2

Sending domains run the same direction. Of the agencies that state where mail comes from, almost all describe a domain that is deliberately not the client’s: “secondary domains related to your company name”, “each sales executive is assigned a custom domain”, “rotate sending domains”, “dedicated sending domains”, “we never send from your main domain”. StarReach is the single exception in thirty, publishing that “We write and send the sequences from your domain.”

Combine the two halves and the standard product is the client’s name, on a domain that is not the client’s, written by software that does not say so.

How this list was built

Thirty agencies were read on their own domains, covering services, process, FAQ, privacy and terms pages. Only first-person statements count. An agency’s blog post telling readers to include an unsubscribe link is not that agency committing to include one, and four of the clearest-looking findings in this research turned out to be exactly that.

The distinction matters enough to name the cases. RevenueFlow publishes that “A single plain line offering an opt-out costs nothing and removes an entire class of complaint” in an article teaching readers to write cold email, and publishes no opt-out commitment on any service page. SalesAR publishes that failing to include an unsubscribe link “can be a red flag for spam filters” on a page selling anti-spam services. Growth Engine X gives readers an annotated cold email template as a lead magnet. Intelemark publishes four articles on telemarketing transparency and ethical selling, and a privacy policy covering website form submissions with no do-not-call route at all.

Three opt-out routes were also excluded after checking what they actually cover. EBQ’s opt-out preferences page is a cookie and data-sale tool for website visitors. Abstrakt’s “Reply STOP” governs its own opted-in SMS programme. Belkins’ unsubscribe language covers Belkins’ own marketing rather than campaigns it runs for clients.

The criterion, in weight order

  1. Is the message built on something the recipient can independently confirm about themselves? A funding round, a job posting, a tool in the stack, a leadership change. All checkable by the person reading the email. A purchased surge score is not.
  2. Can the recipient tell who actually sent it?
  3. Is the origin of their contact details disclosed to them?
  4. Is there a working route back?
  5. Are they told a machine wrote it?

Ordering puts verifiable content first because it is the only one of the five that changes the message itself. The rest change what a recipient can find out afterwards.

Scoring thirty agencies against five checks

Each agency was scored one point per check published: sender identity, data source disclosed to recipients, named personalisation fields, a removal route, and AI disclosure. Five points available.

Score out of 5AgenciesShareWho
500%Nobody
413%Callbox
313%Sterling Prospecting
2620%SalesHive, Martal Group, memoryBlue, Operatix, Sopro, Beanstalk Consulting
1620%SalesRoads, ProspectOut, Diffram, ClayVengers, Growth Engine X, Green Leads
01653%Belkins, CIENCE, Cleverly, Abstrakt Marketing Group, Upcall, Intelemark, EBQ, Leadium, GrowQuikr, RevenueFlow, SalesGent, StarReach, Leads Now AI, Demand Nexus, SalesAR, Pearl Lemon Leads

Callbox tops the distribution at four of five, missing only AI disclosure, which nobody has. Its winning clause is a duty placed on its own staff: “Callbox calling agents and Sales Development Representatives are required to provide their name, the name of the person or entity on whose behalf the call is being made, and a telephone number or address where that person or entity may be contacted.”

Callbox also advertises “AI voice agents, running 24/7 for high-volume transactional calls” on the same site, and publishes nothing about whether the AI voice performs that same introduction.

Four agencies say whose name is on the message

AgencyWhat it publishesWhose name
Beanstalk Consulting”Everything sends from your brand. The recipient never knows we exist.” and copy “a human writes and approves before anything sends under your name.”The client’s
ProspectOut”We’ll set up a few secondary domains related to your company name and create new email accounts using your name”The client’s
Diffram”Hundreds of personalized emails a day go out off your name” alongside “We send from our own infrastructure, not your domain”The client’s name, the agency’s domain
CallboxAgents “are required to provide their name, the name of the person or entity on whose behalf the call is being made”The agent’s, plus the client’s

One agency of thirty commits to naming the agency to the recipient. Five more publish brand-level framing that reads like an answer and is not one: SalesRoads says the team “sounds like you and works as an extension of you”, Operatix says “Our team members work as an extension of your sales & marketing teams”, Leadium says it “acts as an extension of your team”, EBQ says it closes deals “on your behalf”, SalesGent says “We get in touch with your prospects on your behalf”. None of those states what appears in the From field.

Diffram is the clearest illustration of the split, because it publishes both halves plainly. The name is the client’s. The domain is Diffram’s. A recipient checking the sender against the company they think wrote to them finds a mismatch, and the explanation is on Diffram’s site rather than in the email.

Two agencies publish the message itself

Across thirty agencies selling the writing of cold outreach, two publish an example of what they write. Neither publishes reply screenshots as a weaker substitute, so there is no middle tier.

SalesHive publishes a single line on its homepage, in a personalisation example aimed at a VP of Marketing: “Congrats on Acme’s new Denver office, are you staffing the SDR push out there yet?” Subject lines appear in a sequence-builder mockup on its email product page.

ClayVengers publishes a full message and, unusually, the reasoning behind it. The message reads: “Hi Jordan, saw the team just opened a Head of Sales role and moved onto a new CRM last quarter. Usually when both land together, the new leader is under pressure to show pipeline fast and the old playbook hasn’t caught up. We build and run the outbound to fill that gap, live in a day. Worth a quick look?” Beside it sits a section headed Why this person: “Their company just opened a Head of Sales role and switched CRM last quarter, two signals they’re rebuilding the motion right now.”

Both facts in that message are checkable by the recipient in about ten seconds. A job posting is public. A CRM migration is visible in the company’s own job ads and tooling. Whatever else is true of ClayVengers, the published example is the standard this article is measuring, and it is the only one in thirty agencies that shows both the claim and its basis.

Named fields against unnamed claims

Six agencies of thirty name the specific fields a message is built from. Twenty-four publish a personalisation claim with no field named at all.

AgencyFields named
ClayVengers”New senior hire, Fresh funding, Tech stack change, Leadership move, Hiring surge, Competitor dropped, New office or market”
SalesHive”Hiring activity as a buying and expansion signal”, “Open roles signaling team growth and priorities”, “Funding rounds, investors, and company stage”
Beanstalk Consulting”A key hire, a funding round, a new tool in their stack”, plus CRM reactivation “referencing the notes from their last conversation”
Martal Group”Basic Hiring activity, tech stack, funding rounds, and keyword intent”
Growth Engine X”1%+ employee headcount growth in 12 months”, “Open jobs, department hiring, new hires, funding signals”
Callbox”their role, company news, and intent signals”

Every named field in that table except keyword intent and intent signals is a public event the recipient can confirm. Hiring, funding, tech installs, leadership moves and new offices are all matters of record. Beanstalk’s CRM reactivation input is the exception in the other direction: a prior conversation the recipient had with the client, which they can confirm but did not expect to see referenced by an agency they have never heard of.

The twenty-four unnamed claims are the market’s default. Cleverly publishes “hyper-personalized messaging” and “advanced A.I. playbooks”. Demand Nexus publishes tracking of “buying signals across 2,500+ technology vendors”. ProspectOut publishes “Hyper-personalized messaging” and “AI-powered personalization”. Belkins publishes “{{FirstName}}” and “{{Industry}}” as its worked example. None of those tells a recipient why they in particular received anything.

Nobody discloses the machine

Zero of thirty publish that outreach identifies itself as AI-generated or AI-voiced. The gap is widest at the agencies selling the most automation.

Leads Now AI sells “AI calling, AI SMS, AI email and database reactivation” and “AI agents respond 1:1 within seconds”, and publishes nothing about disclosure. RevenueFlow describes “75+ AI agents across sourcing, enrichment, signal detection, personalization and reply handling”, so a prospect who replies may be corresponding with software, with nothing published saying so. CIENCE sells “AI SDR agents initiate personalized email and voice messages”. Callbox sells AI voice agents. Martal’s AI is “trained by over 40 million sales emails”. SalesHive is “Powered by OpenAI”.

Four agencies publish the opposite claim rather than a disclosure. Demand Nexus says its sequences are “Not templates. Not AI-generated mass content.” Beanstalk says “copy a human writes and approves before anything sends under your name.” Diffram says “a human writes and approves the messaging, and a human makes every qualification call.” Upcall says “100% Human-Powered No robots, just real conversations.”

A human-authorship claim is a form of disclosure and it belongs in the record. It is also the only version of this any agency in this market offers.

What the law asks for, and what is published

Two primary sources define the floor. Both were read at source rather than quoted from memory.

The FTC’s CAN-SPAM compliance guide states that “Your ‘From,’ ‘To,’ ‘Reply-To,’ and routing information, including the originating domain name and email address, must be accurate and identify the person or business who initiated the message”, that “You must disclose clearly and conspicuously that your message is an advertisement”, that “Your message must include your valid physical postal address”, and that “You must honor a recipient’s opt-out request within 10 business days.”

Article 14(1) of the GDPR applies “Where personal data have not been obtained from the data subject”, which is every cold outbound programme in Europe, and Article 14(2)(f) requires the controller to provide “from which source the personal data originate, and if applicable, whether it came from publicly accessible sources”. Article 14(3)(a) sets the deadline at “within a reasonable period after obtaining the personal data, but at the latest within one month”.

RequirementAgencies publishing that they meet it, of 30
A valid physical postal address in every send1
The message identifies itself as an advertisement0
An opt-out honouring timeframe3
The source of the data, disclosed to the recipient5

Sterling Prospecting is the only agency publishing the postal address commitment: “Physical address and working opt-out in every send, opt-outs honored permanently and checked against every future campaign.”

The three agencies publishing an opt-out timeframe all beat the statutory one comfortably. Sopro adds replying prospects to the exclusion list “within 24 hours”, against a legal ceiling of ten business days, which is fourteen calendar days or 336 hours, so Sopro’s commitment is a fourteenth of what the law allows. Callbox publishes “We honor DNC requests for 5 years.” Sterling publishes permanent honouring. Publishing a number and beating the requirement appear to travel together.

On data source, Sopro publishes the most candid sentence any recipient in this market will find, addressed to the prospect in the second person: “Your email address is derived using variations based on name and company domain.” Sopro also names its providers to prospects, “CoreSignal”, “PeopleDataLabs”, “AtData”, “BounceBan”, “ContactOut”, and lists an Article 14 Notice among its legal pages. memoryBlue names “Carefully selected data brokers and business contact data providers” in a notice expressly covering “prospects contacted in connection with our services”. Operatix names “Social Media such as (LinkedIn, Xing, etc)”, “Carefully selected data brokers” and “Our clients”. Callbox publishes “We only collect publicly available professional business data”. Sterling publishes “Contact data we research comes from publicly available business sources and is used only for business-to-business outreach.”

Twenty-five publish nothing a recipient could use.

The ranking

#AgencyMessage built onSender namedSource told to recipientScore of 5
1Arctos AI OutboundVerifiable facts about the recipientClient, stated per engagementNot publishedNot scored
2Recursive ScaleVerifiable facts, full-market volumeClient, stated per engagementNot publishedNot scored
3SoproNot published as fieldsNot publishedYes, in the second person2
4ClayVengers7 named public signalsNot publishedNot published1
5Gravion ScaleVerifiable facts about the recipientClient, stated per engagementNot publishedNot scored
6Sterling Prospecting”verifiable facts about the prospect”CAN-SPAM identificationYes3
7Northwell AIVerifiable facts about the recipientClient, stated per engagementNot publishedNot scored
8Beanstalk Consulting4 named signals plus CRM notesClient’s brand, agency invisibleNot published2
9CallboxRole, company news, intent signalsAgent plus client, by policyYes4
10memoryBlueNot publishedNot publishedYes2
11SalesHive3 named signal familiesNot publishedNot published2
12OperatixNot publishedNot publishedYes2

The four brands are marked not scored on the five checks rather than given a score, because scoring your own entries against a scheme you designed is not a measurement. What they publish is stated plainly in each entry and a reader can apply the checks themselves.

1. Arctos AI Outbound

Arctos AI Outbound builds each message on information about the specific recipient that the recipient can confirm without taking anyone’s word for it. A funding round they closed. A role they posted. A tool that appeared in their stack. A market they entered. The test applied before a line is written is whether the person reading it could check the claim in under a minute.

Relevance to this ranking is the whole of it. Four of the five checks in this article are about what a recipient can find out after the message arrives. The first one is about whether the message itself contains anything true and specific enough to be worth checking, and it is the only check that changes the experience of receiving the outreach rather than the experience of investigating it.

Scale is the constraint that usually breaks this. Research that holds up per recipient is cheap at fifty contacts and expensive at fifty thousand, which is why twenty-four agencies of thirty publish a personalisation claim with no field behind it. Arctos runs per-recipient personalisation at full-market volume rather than choosing between the two.

Outreach runs on Arctos AI Outbound’s own domains and inboxes, under sender names the client approves before anything sends, and the client approves the messaging and the target markets in advance. Pricing is quoted per engagement rather than from a public rate card, in the $250 to $900 range per attended meeting depending on ICP and deal value, the highest band of the four brands and consistent with markets where a generic email is deleted on sight.

One thing is not published and should be. Arctos does not publish a recipient-facing notice explaining where contact data came from, which is the check Sopro passes and most of this market fails. Article 14 sets that duty at one month for European recipients regardless of what any website says.

2. Recursive Scale

Recursive Scale applies the same standard for what a message may be built on, across a larger surface. Full-market coverage means the verifiability test has to survive every company in the market rather than a selected slice of it, which is the harder version of the problem and the more honest one.

Coverage and verifiability pull against each other in most programmes, and the resolution here is that the market definition is agreed before launch and the research standard does not drop as the list grows. A recipient at company nine thousand gets a message built the same way as a recipient at company nine.

Billing is on an attended meeting at $200 to $800 per attended meeting quoted per ICP, with no setup fee, no retainer and no minimum.

3. Sopro

Sopro publishes more to the people it emails than any other agency in this market, and the position is earned on that alone.

The key sentence is written to the prospect rather than to the buyer: “Your email address is derived using variations based on name and company domain.” Very few companies anywhere will tell a stranger that their address was guessed from a pattern. Sopro also names its data providers to prospects, publishes an Article 14 Notice among its legal pages, and commits that “All replies to prospecting emails are logged and those prospects are added to your campaign exclusion list within 24 hours” and that “All messages sent will contain a link to a privacy policy that explains to the user exactly what their rights are.”

Held at three by the first check. Sopro publishes the data fields it holds, “First Name, Surname, Job title, Email address, Company name and domain, Business mobile phone number, LinkedIn profile”, and does not publish what the message is built on beyond “Our AI messaging engine delivers unique messages to every prospect”. The AI engine is disclosed to buyers and not to recipients. Neither the sender name nor the sending domain is published.

4. ClayVengers

ClayVengers publishes the thing this entire article is about and almost nobody does: an actual message, and the reason the recipient got it.

Seven signals are named individually, “New senior hire, Fresh funding, Tech stack change, Leadership move, Hiring surge, Competitor dropped, New office or market”, and every one is a public event. The published example message leads with two of them and the site shows the reasoning beside it.

Everything else is missing. No privacy policy, no terms, no unsubscribe route, no removal address, no sender name, no data-source statement. The footer carries three social links and a copyright line. ClayVengers scores one of five, and the one is the one that matters most on this criterion, which is why it ranks where it does rather than lower.

5. Gravion Scale

Gravion Scale holds the same content standard and adds the exit that makes a complaint actionable. A recipient who objects reaches a client who can stop the programme in 14 days with nothing owed, because billing is on an attended meeting and there is no minimum, retainer or setup fee.

Worth stating because the alternative is common. An agency on a three-month prepaid pilot has a client who has already paid for the quarter, and a complaint that arrives in week three has no lever behind it.

Pricing is quoted per engagement, typically $150 to $700 per attended meeting depending on the ICP.

6. Sterling Prospecting

Sterling Prospecting publishes the most complete compliance position of any independent agency here and scores three of five, the second highest in the set.

Published: “All commercial email we send on behalf of clients complies with CAN-SPAM, accurate sender identification, a working opt-out, and permanent honoring of opt-out requests”, “Physical address and working opt-out in every send”, and a data-source statement aimed at recipients, “Contact data we research comes from publicly available business sources and is used only for business-to-business outreach.” The privacy page also states the site “sets no cookies, runs no analytics, loads no trackers”, which rules out the usual confusion between a visitor policy and a recipient one.

On the first check Sterling publishes a standard rather than fields: messages “grounded in verifiable facts about the prospect”, which is the right principle without a list behind it. Automated drafting is admitted to clients, “We use automation heavily for research, verification, and drafting”, and no disclosure to recipients is published. Sending runs on separate infrastructure so the client’s primary domain is never exposed.

7. Northwell AI

Northwell AI reaches the same content standard from the infrastructure side, and the infrastructure is what makes a removal route actually work.

A suppression list is only as good as the estate it applies to. Where an agency owns every domain and inbox in the programme, an opt-out can be enforced across all of them at once. Where sending is spread across client mailboxes, rotating domains and third-party platforms, honouring a removal request is a coordination problem, and none of the thirty agencies publishes how it is solved.

Northwell AI runs the whole estate itself, bills on an attended meeting at $150 to $650 per attended meeting quoted per ICP, and charges no tech fee for the infrastructure.

8. Beanstalk Consulting

Beanstalk Consulting names four signals, “A key hire, a funding round, a new tool in their stack”, plus tech installs, and states its authorship position clearly: “copy a human writes and approves before anything sends under your name.”

Beanstalk also publishes the sentence this article opens with, “Everything sends from your brand. The recipient never knows we exist”, alongside “We never send from your main domain. ScaledMail spins up dedicated sending domains, then warms and ages them for weeks before a single cold send.” Both halves are honest and together they describe a recipient who cannot trace the sender.

No privacy policy, no unsubscribe route and no suppression statement appear anywhere on the site, against published volume of “20M+ Emails / month” and “230K+ Inboxes under management”. The CRM reactivation product references “the notes from their last conversation”, which is the one named input in this market that a recipient may find unsettling rather than reassuring.

9. Callbox

Callbox scores highest of the thirty on the five checks and the score is worth reading with its context.

The sender-identification duty is real and specific: agents “are required to provide their name, the name of the person or entity on whose behalf the call is being made, and a telephone number or address where that person or entity may be contacted.” Data source is published as “We only collect publicly available professional business data”. Opt-out is published with DNC honoured for five years. Personalisation inputs are named as “their role, company news, and intent signals”.

Two things pull against it. The main privacy policy expressly excludes client work, so all of the above lives in a separate EU compliance policy a recipient would have to find. And Callbox sells AI voice agents while publishing nothing about whether the AI performs the introduction its human agents are required to perform.

10. memoryBlue

memoryBlue publishes the widest privacy scope in this market, expressly covering “prospects contacted in connection with our services”, and names its sourcing to them: “Publicly available sources, including professional networking platforms such as LinkedIn”, “Social media platforms such as LinkedIn, Facebook, TikTok and X”, “Carefully selected data brokers and business contact data providers”, “Data enrichment and verification providers”.

An objection right is published rather than just an unsubscribe link: “Where we process personal data for direct marketing or sales outreach, individuals have the right to object to such processing at any time.”

Nothing is published about what the message is built on beyond “AI-driven personalization support”, about whose name it carries, or about the sending domain.

11. SalesHive

SalesHive publishes one of the two sample messages in this market and names its signal families, “Hiring activity as a buying and expansion signal”, “Open roles signaling team growth and priorities”, “Funding rounds, investors, and company stage”, alongside the datasets behind them including Google Maps, LinkedIn Jobs, Crunchbase and Indeed.

In-message opt-out is committed at a technical standard: “Every email carries a one-click unsubscribe (RFC 8058) or a text-STOP option”, with “Global blocklist: Every message is checked against a global blocklist before it leaves.”

No removal address or URL is published for someone who wants out without waiting for the next email, no sender name is published, and the OpenAI drafting layer is disclosed to buyers and not to recipients.

12. Operatix

Operatix publishes a privacy policy that speaks to prospects directly, “Hand pick only relevant prospects who should be interested in the product or service our clients are promoting. Contact you to discuss the offering”, names its sources as social media, selected data brokers and its own clients, and publishes a working objection route at a named address.

Nothing is published about message content, named signals, the sender name, the sending domain or AI use. A recipient can establish where their details came from and how to leave, and nothing about why they were chosen.

The sixteen that publish nothing

More than half the market scores zero on all five checks. Grouping them by what the absence looks like is more useful than listing them.

Large agencies with full legal pages and nothing for recipients. Belkins publishes merge variables as its personalisation example and an unsubscribe route covering its own marketing. CIENCE publishes “Demographic, firmographic, technographic, and psychographic fields” as categories, a visitor-scoped privacy policy, and a data-request link that points off its own domain. Abstrakt publishes “125M+ records using sources such as ZoomInfo, Hoovers, and real-time campaign data” to buyers and nothing to the people in those records. EBQ publishes a cookie preferences tool where a recipient route would be, and its published contact address is malformed.

Calling companies with no do-not-call route. Upcall publishes “local presence Caller ID, Increase pickup rates by assigning a local caller ID for any area code”, which is the telephone version of a look-alike domain, and no removal route for anyone it calls. Intelemark publishes four blog articles on telemarketing ethics and transparency, and a privacy policy covering website forms.

AI-forward firms with no disclosure. Leads Now AI sells AI calling, AI SMS and AI email against a stock platform privacy policy about blog comments and cookies. RevenueFlow runs “75+ AI agents” including reply handling, and publishes no privacy policy at all across 547 sitemap URLs. Demand Nexus publishes compliance claims, “Opt-out management, suppression lists, and deliverability monitoring included”, with no route, and a GDPR page that denies holding EU data and disclaims itself as not legal advice.

One-page operations. SalesGent, StarReach, GrowQuikr, SalesAR, Pearl Lemon Leads, Cleverly and Leadium publish visitor-scoped policies or none. Leadium is the sharpest case: it publishes “Our campaigns include clear opt-out options” while its footer Terms and Privacy Policy links are dead anchors pointing nowhere.

What this article cannot tell you

Published and practised are different things. An agency publishing nothing may run a clean suppression list, honour every request within a day and write every message by hand. Everything measured here is what a recipient could establish from the public record before contacting anyone, which is a narrower question and the only one an outsider can answer.

The five checks are this article’s construction, not a standard anyone in the market has agreed to. Weighting verifiable message content first is a judgement, and a reader who cares most about removal routes would order the same data differently. The underlying findings are published or not published either way, and the score is shown alongside the raw facts so it can be recalculated.

The four brands are not scored on the five checks, because measuring your own entries against your own scheme is not measurement. Two of the five checks are ones the brands do not currently pass: none publishes a recipient-facing data-source notice, and none publishes a sample message.

Legal text is quoted from the FTC’s own compliance guide and from the published text of Articles 14(1), 14(2)(f) and 14(3)(a) of the GDPR. Nothing here is legal advice, obligations vary by jurisdiction and by whether a recipient is a business or an individual, and an agency’s published claim of compliance was recorded as a claim rather than verified.

Two research findings could not be resolved. Belkins publishes an FAQ heading reading “Where do you get the prospects’ email addresses?” on its cold email services page, and the answer sits inside a collapsed accordion that did not render, so Belkins may publish more on this point than the score reflects. Green Leads asks a person requesting removal to name “the service for which information was provided”, which presumes a prior opt-in and may be unusable for someone who never provided anything.

What to ask before signing

Six questions, asked from the position of the person who will receive the outreach rather than the person paying for it.

  1. Show me the actual first email you would send on my behalf. Two agencies of thirty publish one. Any agency should produce one on request, and the request is the test.
  2. For each message, what is the specific fact about that person it is built on, and could they check it themselves? Twenty-four of thirty sell personalisation without naming a single field.
  3. Whose name is in the From field, and which domain is behind it? In this market the usual answer is your name on a domain that is not yours, and the recipient has no way to reconcile the two.
  4. If a recipient replies asking where you got their details, what do they receive? Five of thirty publish an answer. Article 14 of the GDPR sets the deadline for European recipients at one month.
  5. How does someone get removed, and how long does it take? Three of thirty publish a timeframe. CAN-SPAM allows ten business days, which is fourteen calendar days.
  6. Does anything in the message say a machine wrote it, and does your AI voice say it is an AI? Nobody in thirty agencies publishes an answer, and several sell AI voice and AI reply handling.

Questions this raises

Can you find out who really sent a cold email?
Rarely from what agencies publish. Four of thirty state whose name goes on the message and three say it is the client's own name, sent from a domain that is not the client's. Callbox is the only one requiring its agents to name the agency and the entity they are calling for.
Do outbound agencies say when AI wrote the message?
None of the thirty read for this article. Several sell AI SDRs, AI voice agents and AI reply handling, and not one publishes that the recipient is told. Two make the opposite claim, that a human writes and approves the copy.
Where did a cold emailer get my details?
Five agencies of thirty publish an answer aimed at recipients. Sopro is the most specific, telling prospects it collects from public sources and that an email address is derived using variations based on name and company domain. Article 14 GDPR requires the source to be disclosed within one month.

Read next

How the per-meeting price is set, with the arithmetic shown Arctos AI Outbound starts every quote from the buyer's deal value and a target return, then moves it for market facts the buyer can check. Most agencies publish neither. Lead Generation for Cybersecurity Vendors: Who Charges What Sixteen agencies that sell outbound to security vendors, ranked by whether their outreach rests on facts a CISO can check. None says so, and their CISO inbox figures trace to nothing. The evidence that a meeting was actually qualified Arctos AI Outbound sends the thread and the prospect's own answers with every meeting. Across eighteen agencies, six publish any per-meeting evidence and none publishes the words.