Compliance · Glossary

CAN-SPAM Act

Also known as: CAN-SPAM, CAN SPAM

The CAN-SPAM Act is the U.S. federal law that sets the rules for commercial email. It does not require prior consent to send, but it does require every commercial message to use truthful From, To, and subject-line information, to identify itself as an advertisement where applicable, to include a valid physical postal address, and to give recipients a clear, working way to opt out that is honored within 10 business days. B2B cold email is legal in the U.S. when these requirements are met.

What CAN-SPAM requires

Compliance comes down to a short checklist: don't use false or misleading header information; don't use deceptive subject lines; disclose the message as an ad if it is one; include your real physical mailing address; offer a visible, working unsubscribe; and stop emailing anyone who opts out within 10 business days. The law applies to each commercial email, and a business is responsible even if a third party sends on its behalf. Penalties can reach into the tens of thousands of dollars per violating email, so the address and unsubscribe requirements in particular are non-negotiable.

CAN-SPAM vs. GDPR and CASL

CAN-SPAM is notably more permissive than the consent-based regimes elsewhere. It is opt-out: you may email a prospect who never agreed to hear from you, as long as you follow the rules and honor opt-outs. The EU's GDPR and Canada's CASL are opt-in: in most cases you need a lawful basis or prior consent before sending commercial email at all, and penalties are steeper. A program that emails across borders has to meet the strictest law that applies to each recipient, not just CAN-SPAM.

CAN-SPAM is what makes compliant B2B cold email a legitimate channel in the U.S. rather than a legal gray area. The bigger day-to-day risk is usually deliverability, not litigation — but the address and unsubscribe rules are easy to get wrong and expensive to ignore, and honoring opt-outs is also what protects sender reputation.

CAN-SPAM Act: FAQ

Does cold email require consent under CAN-SPAM?

No. CAN-SPAM is an opt-out law, so U.S. B2B cold email does not require prior consent. You must still use honest headers and subject lines, include a real physical address, and provide a working unsubscribe that you honor within 10 business days.

What happens if you violate CAN-SPAM?

Each separate email that breaks the rules can carry significant statutory penalties, and the sending business is liable even when a vendor sends on its behalf. The most common failures are missing a physical address or not honoring opt-outs promptly.

See CAN-SPAM Act in action

JYNI combines AI lead discovery, compliant cold email, and a CRM in one workspace — so finding, reaching, and managing customers happens in one place.

Book a Call →