Do Cold Emails Need an Unsubscribe Link?

Cold emails must give the recipient a clear, working way to opt out — but it does not have to be a hyperlink. CAN-SPAM requires a "clear and conspicuous" opt-out mechanism honored within 10 business days; a plain-text "reply 'no thanks' and I won't email again" line satisfies it. CASL and GDPR impose equivalent obligations for Canadian and EU recipients.

The confusion comes from conflating the legal requirement (an opt-out mechanism) with the familiar implementation (the gray footer link). For one-to-one B2B cold email, the footer link isn't legally required — and many senders deliberately avoid it.

What CAN-SPAM actually requires

The FTC's compliance guide requires commercial email to include a clear and conspicuous explanation of how to opt out of future email, to process opt-outs for at least 30 days after sending, and to honor them within 10 business days. You can't charge a fee, require login, or demand anything beyond an email reply or a single page visit. The statute is mechanism-neutral: a reply-based opt-out in plain text meets the standard, which is why most professional cold email uses a closing line like "Not relevant? Reply 'pass' and you won't hear from me again."

What's not optional: once someone opts out, every future send to them is a separate violation — at up to $53,088 each under the 2025 penalty schedule. Suppression failures, not missing links, are where senders actually get burned.

Canada and the EU raise the bar

For Canadian recipients, CASL requires every commercial electronic message to include an unsubscribe mechanism that works for at least 60 days and must be honored within 10 days — on top of CASL's consent requirement for the send itself. For EU recipients, GDPR's Article 21 right to object means a B2B cold email sent under legitimate interest must make objecting easy, and an objection is permanent. Our GDPR guide and country-by-country breakdown cover both regimes.

Link vs. plain-text reply: the practical tradeoff

• Plain-text opt-out line: legally sufficient under CAN-SPAM, reads human, and avoids the list-unsubscribe formatting that can make a one-to-one email look like bulk marketing. The cost: opt-outs arrive as replies you must capture reliably.
• Unsubscribe link: automates suppression and is effectively mandatory for anything resembling bulk sending — and mailbox providers' bulk-sender rules (Gmail and Yahoo since 2024) require one-click unsubscribe headers at volume.
• Either way, suppression is the legal core: the mechanism only matters if every opt-out lands in a suppression list that covers all your sending domains and mailboxes, permanently.

That last point is an infrastructure problem more than a legal one. Sending platforms like Sales.co handle it structurally — opt-out capture and cross-domain suppression built into the sending layer — so the 10-business-day clock never becomes your problem.