Where AI helps
AI is now used throughout outreach: summarizing research on an account, drafting first emails and replies, varying copy, classifying replies, and in “AI SDR” products that run whole sequences. Gartner predicts AI agents will outnumber human sellers ten to one by 2028, yet fewer than 40% of sellers will say agents improved their productivity [1].
The receiving side uses AI too. Since January 2026 Gmail has offered AI summaries of email threads to all users [2]. Your email may well be read as a summary first.
AI-written messages and trust
A 2025 study of 1,100 professionals by Coman and Cardon found that only 40–52% saw a supervisor's message as sincere when it used heavy AI assistance, against 83% with light assistance; professionalism ratings stayed comparatively high [3]. A separate preregistered experiment found AI-involved messages were judged less trustworthy and authentic, and that disclosing AI use, while people said they wanted it, also lowered ratings [4].
Neither study tested cold sales email directly, but both point the same way. Recipients notice, and the cost falls on sincerity. Use AI for structure and research; keep the human parts (empathy, apology, judgment, relationship context) human.
Where the rules touch
The FTC has said plainly that “there is no AI exemption from the laws on the books” [5]. CAN-SPAM's honesty requirements apply to AI-generated subjects, headers and claims exactly as they do to yours [6].
In the EU, the AI Act's transparency obligations, including telling people they are interacting with an AI system, apply from August 2, 2026, with fines up to €15 million or 3% of turnover [7]. Whether an AI-drafted email a human reviews and sends is covered is unclear. An AI agent that converses with prospects on its own is the case to take to counsel. And feeding personal data into AI tools needs a lawful basis and proper processor terms under GDPR [8].
Anti-abuse groups are watching too: Spamhaus singles out AI-generated templates sent at scale [9], and M3AAWG targets messages that fake one-to-one correspondence [10].
Six failure modes
Each of these has the same fix: a human decides what goes out, and the system records why.
- Invented facts: made-up customers, results, funding rounds or “I saw your post about…” references. Deceptive, and embarrassing when checked.
- Uncanny personalization: shallow compliments that are obviously generated.
- Volume creep: AI makes more email cheap, but complaint thresholds don't rise with it, and per-mailbox volume correlates with lower replies [11].
- Unauthorized commitments: an autonomous reply that quotes a price, agrees terms or promises something no human approved.
- Data protection: personal data sent to AI vendors without a lawful basis or processor terms.
- Lost opt-outs: a “stop” in an AI-handled thread that never reaches global suppression.
A responsible-use policy
Write the policy down before you scale anything. A workable version:
- Review by risk: first-email templates, and any reply that commits you to something, get human approval. Low-risk classification (out-of-office, unsubscribe) can be automated, with a log.
- Ground every claim: each fact in a draft should trace to a stored source, such as a CRM field or URL. Reject drafts with claims you can't trace.
- Cap volume at what your mailboxes have proven they can sustain, and keep spam rate under 0.1% [12].
- Never fake a thread or a familiarity that doesn't exist.
- Disclose AI where the law or the context calls for it, especially for conversational agents.
- Log what was sent and why, and compare positive reply and complaint rates for AI-drafted and human-written emails, with the statistical caution from Module 8.