Do cold emails need an unsubscribe link?

Yes. The CAN-SPAM Act requires a clear, working opt-out mechanism in commercial email, and honoring a request within 10 business days. Cold outbound included.

An admin approves every new account by hand. Nothing is created until then. We reply by email; no newsletter, no sequence.

app.salescrew.io/inbox
The unified reply inbox with classified threads

The short answer

  • The CAN-SPAM Act, enforced by the FTC, requires commercial email to include a clear and easily accessible way to opt out of future messages. Typically an unsubscribe link or a working reply-to option.
  • Opt-out requests have to be honored within 10 business days, according to FTC guidance. Any opt-out mechanism offered must be able to process requests for at least 30 days after the message was sent.
  • Cold outbound prospecting email is commercial email under this framework. The requirement is not limited to newsletters or bulk marketing sends. It applies however personalized or small-scale the outreach is.
  • Violations carry real penalties. Each separate email found in violation of CAN-SPAM can be subject to penalties commonly cited as up to $53,088. This is a compliance detail worth getting right rather than treating as optional.

Why 'this is outbound prospecting, not a newsletter' is not an exception

A common assumption is that CAN-SPAM's opt-out requirement is aimed at bulk marketing newsletters, not the individually written cold outreach a sales team sends. The FTC's own compliance guidance for the CAN-SPAM Act does not draw that distinction. It applies to commercial email generally. A cold prospecting email pitching a product or service is commercial email under the statute's definition. The specific requirement is a clear and easily accessible opt-out mechanism in the message, and honoring any opt-out request within 10 business days.

The mechanism itself does not have to be an elaborate unsubscribe page. A working reply-to option that results in no further messages can satisfy the requirement. So can a simple unsubscribe link. What matters is that it is real, easy to find, and processes the request promptly. Not buried in fine print or requiring unusual effort to use.

What CAN-SPAM requires for cold email

RequirementDetail
Clear opt-out mechanismAn unsubscribe link or working reply-to option, easy to find and use
Honor requests within10 business days, per FTC guidance
Mechanism must keep working forAt least 30 days after the message was sent
Applies toCommercial email generally, including cold outbound prospecting

Source: FTC, CAN-SPAM Act: A Compliance Guide for Business, ftc.gov. This is not legal advice.

What to check in your own outbound

Confirm every cold email your team or your tools send includes a working, easy-to-find opt-out mechanism. Confirm your process honors requests within the required window, not only eventually. Test the mechanism yourself periodically to make sure it works. Do not assume it does because it was set up once.

Disclosure: SalesCrew is our product. Suppression is enforced when an audience is frozen and re-checked again at send time, which supports honoring opt-outs consistently. The legal obligation to include a working opt-out mechanism and honor it promptly stays with the sender, whichever tool sends the email.

Cold outbound is commercial email under CAN-SPAM

There is no exception for prospecting email versus newsletters. Every commercial email needs a working opt-out mechanism, honored within 10 business days. This is not legal advice.

Questions

Does CAN-SPAM only apply to bulk marketing email, not individual cold outreach?
CAN-SPAM applies to commercial email generally. The FTC's compliance guidance does not carve out an exception for smaller-scale or individually written cold outreach. A genuinely personal, one-off message to someone you know is a different category from prospecting email.
How fast does an opt-out request need to be honored?
Within 10 business days, per FTC guidance on the CAN-SPAM Act. Any opt-out mechanism offered has to keep working to process requests for at least 30 days after the message was sent.
Is a reply-to address enough of an opt-out mechanism instead of a link?
A functioning reply-based opt-out can satisfy the requirement for a clear mechanism. Whichever method is used, it needs to be easy to find and use, not buried or requiring unusual effort.