Email marketing · Compliance
CAN-SPAM allows unsolicited business email if you follow its rules. The bigger risks are spam complaints, blocked domains and countries with stricter laws.
Legal in the US with conditions
Stricter rules in Canada and Germany
Deliverability is the practical limit
Tell us what you need and we’ll get back to you. Or book a free 30-minute call. Or call 954-539-5678.
Yes, cold emailing is legal in the United States, including cold email to businesses, as long as each message follows the CAN-SPAM Act. US law does not require the recipient to have opted in first. It does require honest headers and subject lines, a clear statement that the message is an ad, a valid postal address, and an opt-out that works and is honored within 10 business days. Other countries are stricter: Canada and Germany generally require consent first.
In practice, the law is rarely what stops a cold email program. Inbox providers are. Google and Yahoo block or junk mail from senders who get too many spam complaints, and that can hurt the domain you use for invoices and customer email too. This guide covers the rules, the risks and safer ways to reach new prospects. It is general information, not legal advice.
The FTC enforces CAN-SPAM and publishes a compliance guide. Its core rules apply to any email whose main purpose is to advertise or promote a product or service:
The FTC guide states plainly that the law makes no exception for business-to-business email. Each separate email in violation can bring penalties of up to $53,088, according to the guide as of its January 2024 update.
CAN-SPAM covers US law. If your list includes people in other countries, their laws may apply too:
Canada’s anti-spam legislation (CASL) asks businesses to get consent before sending commercial electronic messages. The government’s CASL site describes express and implied consent rules that are much tighter than US law.
Section 7 of Germany’s Act against Unfair Competition treats email advertising without the addressee’s prior express consent as an unacceptable nuisance. A narrow exception covers existing customers buying similar goods who were told they could object.
Rules vary by country and also touch data protection law. Many European markets require consent for marketing email, especially to individuals. Treat any EU or UK outreach as a question for local counsel.
A simple rule: if you cannot confirm the prospect is in the US, do not add them to a cold sequence until you know which law applies.
A legal email can still damage your business if it lands as spam. Since February 2024, Google requires every sender to Gmail accounts to set up SPF or DKIM, keep spam complaints reported in Postmaster Tools below 0.3%, and use proper DNS and encryption. Google recommends staying below 0.1%. Senders of more than 5,000 messages a day to Gmail must also publish DMARC and support one-click unsubscribe for marketing mail. Yahoo has similar rules and asks bulk senders to honor unsubscribes within two days.
Cold email is the kind of mail people mark as spam. A few hundred complaints on a small campaign can push your rate past those thresholds. When that happens, the damage is not limited to the cold campaign:
Some B2B companies use cold email well. The ones that do follow rules that go beyond the legal minimum:
If the risk to your domain worries you, these channels bring in prospects without unsolicited email:
Want more inbound leads and fewer risky campaigns? Book a free 30-minute call. We look at what you have and tell you what we would change first. No obligation. Or call 954-539-5678.
JLB has helped growing businesses with websites and marketing for more than 15 years, including email marketing on MailChimp, Klaviyo and HubSpot and Google Ads management adjusted weekly.
If any answer is no, fix it first. For anything involving other countries, regulated industries or bought data, confirm with your attorney. This article is general information, not legal advice.
Book it now · Free
Pick a time. We look at what you have now with you and tell you what we would change first. No obligation.
Prefer to talk now? Call 954-539-5678, or send the form and we’ll contact you.
Generally, yes. CAN-SPAM does not require prior consent for commercial email, but every message must have accurate headers, an honest subject line, a postal address, an ad disclosure and a working opt-out honored within 10 business days.
Yes. The FTC says the law makes no exception for business-to-business email, so cold emails to company addresses must follow the same rules.
Germany is much stricter. Its Act against Unfair Competition treats email advertising without prior express consent as an unacceptable nuisance, with a narrow exception for existing customers. Get local legal advice before emailing German prospects.
Buying a list is not banned by CAN-SPAM, but bought lists tend to contain stale and trap addresses that drive bounces and spam complaints. That can damage your domain reputation for all your email.
The FTC guide says each separate email in violation can cost up to $53,088, as of its January 2024 update. This is general information, not legal advice.
