Cold email to a purchased list is legal — under specific rules
Agents who've only worked TCPA and DNC rules for calls and texts sometimes assume email needs the
same kind of prior consent. It doesn't. The US federal law governing commercial email is the
CAN-SPAM Act, and unlike TCPA, it's an opt-out framework: you can email someone who never asked to
hear from you, as long as the message follows a specific set of rules and gives them a real way to
stop future messages. That's the whole basis for cold outreach to a purchased aged email list —
it's allowed, but only inside that structure.
What CAN-SPAM actually requires
- Accurate header information. The "from," "to," and routing information,
including the domain name, has to be accurate and identify the person or business who sent it.
No spoofed or misleading sender fields.
- A non-deceptive subject line. The subject has to reflect the actual content of
the email. "Following up" is fine if you're following up; a subject implying a claim or account
issue when you're pitching insurance is not.
- Disclosure that it's an advertisement. The message has to be identifiable as a
commercial message. This doesn't require a giant "AD:" banner, but the content and framing can't
pretend to be something else, like a personal note or an existing-account notice.
- A valid physical postal address. Every commercial email needs a current street
address, P.O. box, or registered commercial mail-receiving agency address for the sender.
- A working opt-out mechanism. A clear, easy way to unsubscribe, that keeps
working for at least 30 days after you send. No login requirement, no fee, no more than one extra
click to submit the request.
- Opt-outs honored within 10 business days. Once someone unsubscribes, you have
10 business days to stop emailing them — and you can't sell or transfer their address to anyone
else after that, except to a service helping you comply.
- Responsibility for what you outsource. If you use a third party to send on your
behalf, you're still on the hook if the campaign violates the rules. "My ESP handled it" isn't a
defense.
What it doesn't require
CAN-SPAM does not require the recipient to have opted in first, does not require an existing
business relationship, and does not ban cold outreach. That's the practical difference from TCPA
texting and calling rules, which is why an aged email list and an aged phone list carry different
compliance workflows even when they come from the same aging methodology. What email lists don't
get is a free pass on volume or frequency abuse — sending too aggressively is a deliverability
problem before it's a legal one, covered below.
Set up sending infrastructure before the first send
- Use a dedicated sending domain. Not your main agency domain — a subdomain or
separate domain protects your primary domain's reputation if a cold campaign gets flagged.
- Configure SPF, DKIM, and DMARC. These three DNS records authenticate your
sending domain to inbox providers. Skipping them is the single most common reason cold sends land
in spam regardless of content quality.
- Warm the domain up. A brand-new domain sending 20,000 emails on day one gets
throttled or blocked. Start at a few dozen to a few hundred sends a day and ramp over one to two
weeks before you push volume.
- Cap daily volume per mailbox. Most cold-email tooling recommends staying under
roughly 30–50 sends per inbox per day even after warmup, and rotating across several mailboxes for
real volume instead of pushing one account hard.
- Watch bounce and complaint rates. A bounce rate climbing past a few percent, or
a spam-complaint rate above roughly 0.1%, is the signal to slow down and clean the list before it
drags every future send down with it.
Segment before you send
An aged email list bought in bulk still benefits from splitting before the first message goes out.
State and ZIP let you tailor the opener to a local reference agents in that market actually use; if
you're licensed in a subset of states, filtering the list to those states first avoids wasted sends
to people you can't legally quote anyway. If your list mixes verticals — health, auto/home, life,
mortgage protection, debt — write a distinct opener per vertical rather than one generic pitch
spread across all of them; a message that reads as written for the reader's situation outperforms a
broad one on both replies and complaint rate.
A script structure that respects the opt-out framework
Keep the greeting generic — an aged email list has no confirmed identity match behind the address,
so don't open with a name field or placeholder of any kind. Let the agent introduce themselves
instead:
- Subject: plain and specific to the offer, not a fake internal-notice or
account-alert framing. "Cutting your auto insurance rate in {state}" is fine; "Re: your policy" is
not, if there's no existing policy relationship.
- Opener: "Hi, this is {agent} with {agency} — licensed in {state}." No name
field, no assumed familiarity.
- Body: one or two sentences on what you help with and why now (rate changes,
open enrollment, a seasonal trigger relevant to the vertical), then a single low-friction ask —
reply, or grab 10 minutes.
- Footer: your business name, a physical mailing address, and an unsubscribe link
that actually works — this isn't optional formatting, it's the legal requirement above.
Follow-up cadence matters as much as the first message. Two to three follow-ups spaced several days
apart, each shorter than the last, outperform one long pitch repeated — and every follow-up needs
the same footer and opt-out link as the first send, not just the initial email.
Not legal advice
This is a practical process guide, not legal advice. CAN-SPAM has state-level analogs in some
jurisdictions and enforcement details change; a first-time cold-email campaign, especially at real
volume, is worth a short conversation with counsel familiar with email marketing law before you
scale it.
Get an email list to work
Link Leads' email lead lists are the same $0.015 flat rate as the
SMS tier — deduplicated, format-checked name, state, ZIP, and email records, delivered as an
instant CSV. Code PACT takes 20% off your first order. If you're deciding between
channels, the math on texting 10,000 aged
leads covers the SMS side of the same aged-data economics, or grab the
free 100-row sample before you commit to a list.
