Client sender signatures for cold email: postal address, links, and images

Signatures get set up once, during mailbox onboarding, and then nobody looks at them again. In an agency that is how one client ends up with five sending mailboxes and four different signatures, one of them with a logo pulled from a CDN, one still saying "Sent from my iPhone," and one missing the postal address entirely.

The signature is a small part of a cold email, but it carries two jobs that matter: it tells the prospect who is writing, and it carries part of what US law requires in a commercial message. This guide covers how to set it up per client so both jobs get done on every mailbox.

Start with what is required

The FTC's CAN-SPAM compliance guide is clear that the law covers all commercial email, with no exception for business to business. Two requirements usually live at the bottom of the message:

• A valid physical postal address. That can be a current street address, a PO box registered with the US Postal Service, or a private mailbox registered with a commercial mail receiving agency.
• A clear way to opt out, explained in a way an ordinary person can recognize and understand, with a return email address or another easy internet-based method. Opt-outs must be honored within 10 business days.

The same guide requires accurate header information, including the From line, and says you cannot contract away responsibility when another company sends on your behalf. Both the company being promoted and the company that sends can be held responsible.

For agencies, that last point decides whose address goes in. The prospect is being asked to do business with the client, so the client's address goes in the footer, not the agency's. Get the address from the client in writing during onboarding, confirm which one they want used (office, registered PO box, or registered private mailbox), and store it in the client workspace.

AutoMail's signature guide calls out the common mistake: advice to strip the signature down to name and title for deliverability produces a message that is non-compliant as soon as it is commercial. Keep the address. It costs one line.

Then cut everything else down

The deliverability guides we read land in roughly the same place. Prospeo's rule is "three to four lines, one link, plain text." Inbound Labs says four or five plain-text lines: name, title, company, and one contact detail. Review My Emails says four to six lines at most, plain text over HTML.

A working default for a client sender:

1. Full name, matching the From display name
2. Title and company
3. One link, to the client's plain domain
4. Footer line in small plain text: postal address
5. Footer line: a plain-language opt-out, such as "Prefer not to hear from me? Reply and I'll remove you."

What to leave out, and why:

• Logos and headshots. Inbound Labs notes many clients block images by default, so an image signature can show up as a broken box. AutoMail's more measured take is that one small logo on a warm mailbox is unlikely to be the thing that sends you to spam, but across many sends from new domains it is one more variable you do not need.
• Social icon rows and banners. More images, more links, more weight.
• URL shorteners. Prospeo lists them as a spam filter trigger. They also hide the destination, which runs against Google's guidance that recipients should know what to expect when they click.
• A booking link on the first touch. AutoMail argues it asks a stranger for calendar time before they agree there is anything to discuss, and competes with the ask in the body. Save it for the reply.
• Long confidentiality disclaimers. They double the length of the block on an unsolicited message and do nothing useful there.

GMass takes the other side on some of this. Its view is that a fuller signature with a photo, physical address, and social links can add credibility, as long as you use a custom tracking domain and embedded images. That can work for some senders. For agencies running many client mailboxes, the plain version is easier to keep identical and easier to QA, which is the bigger win.

Keep links in the signature untracked

If click tracking is on, the link in the signature gets rewritten like any other link. AutoMail makes the point that the domain in the href is judged by its own reputation, not yours. A signature link pointing at a shared tracking host puts that host into every message the mailbox sends. Turn tracking off for signature links, or turn it off for the first touch altogether, and link to the client's own domain directly.

Match the signature to the display name

Google's sender guidelines say display names should identify the sender clearly and consistently, should not contain subject or message content, and should not include the recipient's name or imply a threaded conversation. The signature should agree with the display name. If the From line says "Dana Ruiz," the signature should say "Dana Ruiz," with the same company name the client uses publicly. A mismatch reads as a system, not a person.

Make it identical across every mailbox in the workspace

Most client workspaces send from more than one mailbox. Each one needs the same signature structure, with only the sender's own name and title changing. A few checks per mailbox at onboarding:

• Plain text signature applied in the outbound path you will use in production, not only in webmail
• "Sent from my iPhone" and other mobile defaults turned off
• Postal address present and matching what the client approved
• Opt-out line present and the reply mailbox actually monitored
• Link points at the client's domain and is not rewritten by a tracker
• Display name matches the signature name

Then send one test from each mailbox to a seed inbox and look at the raw message, not just the rendered view. That is where a stray image reference or a rewritten link shows up.

Revisit it when something changes

Signatures drift when a sender changes title, the client moves offices, or someone adds a mailbox in a hurry. Add the signature check to the same list you run when a mailbox is added or rotated in the workspace, and to the client offboarding checklist so old addresses and titles do not keep going out.

Where GTM fits

GTM runs find, qualify, write, send, reply, and book inside isolated client workspaces, on each client's connected email domains and LinkedIn. The compliance gate is a database constraint: no send leaves without a compliance verdict and an unsubscribe URL. A clean, identical signature per client mailbox sits alongside that gate as part of making every message identify the right sender.

If you run outbound for several clients and want sending set up per client from the start, join the waitlist.

Sources

• FTC, "CAN-SPAM Act: A Compliance Guide for Business": https://www.ftc.gov/business-guidance/resources/can-spam-act-compliance-guide-business
• AutoMail, "Cold email signature examples and CAN-SPAM rules": https://automail.ai/blog/cold-email-signature
• Prospeo, "Cold email signature: what to include": https://prospeo.io/s/cold-email-signature
• Inbound Labs, "Cold email signature best practices": https://inboundlabs.app/blog/cold-email-signature-best-practices
• Review My Emails, "How to write a compliant email signature for cold outreach": https://reviewmyemails.com/emailalmanac/cold-outreach-and-sales/cold-email-copy-content/compliant-email-signature-cold-outreach
• GMass, "Cold email signature: smart credibility booster or deliverability killer?": https://www.gmass.co/blog/cold-email-signature/
• Google Workspace Admin Help, "Email sender guidelines": https://support.google.com/a/answer/81126