Compliance Basics

Cold Emailing a Lead List: What CAN-SPAM Requires Before You Hit Send

You have a list of business emails. Before the first send, here is what the FTC says CAN-SPAM requires, whether it covers B2B email, how opt-outs work, and what a mistake can cost.

📅 October 16, 2026 ⏱ 6 min read ✍ LocalLeadsData
Short answer: CAN-SPAM covers business-to-business email too. Every marketing email needs accurate sender details, an honest subject line, a clear ad disclosure, your postal address, and a working way to opt out that you honor within 10 business days. Buying or scraping a list does not change any of that. This is general information, not legal advice.

A lead list gives you addresses. It does not give you a free pass on how you use them. The U.S. rules for commercial email are in the CAN-SPAM Act, and the FTC publishes a plain-language guide for businesses. This article follows that guide and says where it stops, so you know what to ask a lawyer.

Step 1: Know That B2B Email Is Covered

Many people assume the law is only about emails to consumers. The FTC says otherwise: “The law makes no exception for business-to-business email.” A cold email to a roofer, dentist or plumber has to follow the same rules.

The FTC also says each separate email that breaks the rules can be subject to a penalty of up to $53,088. The guide notes that this figure was updated in January 2024 and is adjusted for inflation, so check the current number. A 500-address campaign is 500 separate emails.

Step 2: The 8 Requirements in Plain English

FTC requirementWhat it means for your campaign
1. No false or misleading header information“From,” “To,” “Reply-To” and routing details must be accurate and identify the person or business that sent the message.
2. No deceptive subject linesThe subject has to match what the email is actually about.
3. Identify the message as an adThe email must clearly say it is an advertisement. The law gives you flexibility in how.
4. Tell recipients where you are locatedInclude a valid physical postal address.
5. Tell recipients how to opt outExplain it clearly and make it easy. Include a way to stop all marketing email from you.
6. Subscribers and members can opt out tooBeing a customer or on a list does not remove someone’s right to stop your marketing emails.
7. Honor opt-outs promptlyWithin 10 business days. Your opt-out method must keep working for at least 30 days after you send.
8. Monitor what others do for youIf you hire a company to send your emails, you are still responsible. Both companies can be held liable.

Step 3: Opt-Outs Done Right

Your Postal Address

Requirement 4 means a real mailing address in every email. The FTC guide says it can be your current street address, a post office box you have registered with the U.S. Postal Service, or a private mailbox registered with a commercial mail receiving agency. If you do not want your home address in your emails, a registered box is the usual route.

What a lead list can’t do for you: a list of addresses does not know who has opted out of your emails, and an address that accepts mail is not the same as a person who wants your message. A LocalLeadsData order cross-checks each phone number against the business’s Google listing and checks emails when one is found. That tells you an address is likely to accept mail. It is not a consent or compliance check, so keep your own opt-out list and put your own sender details in every email. To see how verification differs from scraping, read our scraped vs verified emails test.

What This Article Does Not Cover

A Pre-Send Checklist

Planning to call instead? Read our guide to Do Not Call rules for lead lists. Not sure how many addresses a Google Maps list will have? See do Google Maps leads come with emails, and for how a business list is put together, our contractor leads list guide.

Need a Lead List to Email?

Pay once. Credits never expire. Phone cross-checked against Google, email when found. Delivered within 2 business days. You handle your own opt-outs and sender details.

See Pricing →

Frequently Asked Questions

Does CAN-SPAM apply to business-to-business email?

Yes. The FTC’s compliance guide says: “The law makes no exception for business-to-business email.” That means a cold email to a roofer, dentist or plumber has to follow the same rules as an email to a consumer.

Do I need permission before emailing a purchased or scraped list?

CAN-SPAM is built around opt-out rather than prior permission: you must give a clear way to stop and honor it within 10 business days. Other laws, your email provider’s rules and some states or countries can be stricter, so ask a lawyer before you rely on that.

What is the fine for breaking CAN-SPAM?

The FTC says each separate email in violation can be subject to a penalty of up to $53,088. The FTC notes the figure is adjusted for inflation (it was updated in January 2024), so check the current amount.

How fast do I have to honor an unsubscribe?

Within 10 business days, according to the FTC. Your opt-out method must also keep working for at least 30 days after you send the message, and you cannot charge a fee or ask for more than an email address.

Does LocalLeadsData check my list for opt-outs?

No. We cannot know who has opted out of your emails. Our process checks emails when one is found, which is not a consent or compliance check. Keep your own opt-out list and add your own sender details.

Sources

Read on October 16, 2026. This is general information, not legal advice. Penalty amounts are adjusted over time, so confirm current figures with the FTC and talk to a qualified attorney before you start a campaign.