How to Buy an Email List in 2026: Legal Rules, Costs and Safer Alternatives
Samuel Rondot
7 min read

On this page
You can buy email lists from B2B data providers and list brokers, and in the US it's legal to email a purchased list as long as each message follows CAN-SPAM. But a bought list rarely works the way buyers hope: newsletter platforms such as Mailchimp ban purchased lists, bought addresses bounce and trigger spam complaints, and Gmail and Yahoo have filtered senders with high complaint rates more aggressively since 2024. In the EU, the UK and Canada, emailing people from a bought list often requires consent they never gave you.
If you need B2B prospects, buy access to a verified database (or build the list yourself) and run small, relevant cold outreach. If you need newsletter subscribers, there's no shortcut: they have to opt in to hear from you.
Two very different reasons to buy an email list
- Email marketing (newsletters, promotions): you want an audience to send campaigns to. A bought list is the wrong tool here: recipients never subscribed, your email platform will likely suspend you, and engagement will be poor.
- B2B cold outreach: you want to start one-to-one conversations with decision makers who match your ideal customer profile. Here, buying or building contact data is normal practice, provided the data is accurate, the message is relevant to the person's job, and you respect the rules of the country you're emailing.
Everything below is about the second case unless stated otherwise.
Is it legal to buy and use an email list?
| Region | Rule for emailing a purchased list | Source |
|---|---|---|
| United States | CAN-SPAM doesn't require prior consent, including for B2B, but every email needs accurate headers and subject line, a postal address and a working opt-out honored within 10 business days. Penalties reach up to $53,088 per violating email. | FTC |
| Canada | CASL requires consent (express or implied) before sending commercial emails. Consent can be implied when a business address is conspicuously published without a "no unsolicited messages" statement and your message is relevant to the person's role. Penalties go up to $10 million per violation for businesses. | CRTC |
| United Kingdom | You can email corporate subscribers (companies, LLPs) without consent if you identify yourself and offer an opt-out. Sole traders and some partnerships are treated as individuals: a bought-in list can only be used if they specifically consented to messages from you. | ICO |
| European Union | GDPR applies, plus national e-privacy rules. France allows B2B prospecting emails without prior consent if the message relates to the person's job and they can opt out easily (CNIL); Germany requires prior consent for advertising email, B2B included. | National regulators |
In short: buying the data is rarely the illegal part; sending to it without the right legal basis is. If you can't explain where an address came from and why your email is relevant to that person, don't send.
Why bought lists hurt deliverability
- Bounces: lists age fast as people change jobs. Hard bounces tell mailbox providers you don't know your recipients.
- Spam complaints: people who never heard of you click "Report spam". Gmail asks all senders to keep their spam rate below 0.3% and recommends staying under 0.1% (Google sender guidelines); Yahoo applies the same 0.3% limit.
- Spam traps: addresses that exist only to catch senders who buy or scrape lists. Hitting them can get your domain or IP blocklisted.
- Bulk sender rules: since 2024, sending more than 5,000 messages a day to Gmail requires SPF, DKIM and DMARC authentication and one-click unsubscribe on marketing mail. Microsoft has required SPF, DKIM and DMARC from domains sending more than 5,000 emails a day to Outlook.com, Hotmail and Live addresses since May 2025.
A damaged domain affects every email your company sends, including invoices and replies to customers. That's why cold outreach should run on a separate, warmed-up sending domain (see our list of email warm-up tools).
Can you upload a purchased list to Mailchimp?
No. Mailchimp's terms and acceptable use policy prohibit purchased, rented, third-party and scraped lists (Mailchimp). Most newsletter platforms have similar policies, so check your provider's acceptable use policy before importing anything you didn't collect yourself. Cold outreach tools are built for one-to-one prospecting instead, but they still expect verified, relevant contacts.
How much does an email list cost?
Vendors price data in three ways:
- Credits on a subscription: you search a database and pay per revealed contact. In October 2026, Lusha's Starter plan is $49.90/month for 400 credits (1 credit per email, 5 per phone number) and UpLead's Essentials plan is $99/month for 170 credits. Apollo.io has a free plan and paid plans from $49 per user per month billed yearly.
- Per record from a list broker: you pick a selection (industry, location, title) and pay for the count. Prices depend on the selection and the broker.
- Flat pre-built lists: cheap "100,000 emails" files sold online. These are the riskiest: unknown sources, no verification, often shared with many buyers.
Compare vendors on cost per meeting booked, not cost per email. A cheap list that gets your domain blocked is the most expensive option. Our guide on where to buy leads compares the main B2B data providers.
If you still buy an email list: a checklist
- B2B only, and only people whose job makes your offer relevant.
- Ask for the source of every record and when it was last verified. Refuse lists with no answer.
- Buy a small sample first and verify it yourself before buying more.
- Re-verify every address right before sending, and remove role-based or risky addresses if your tool flags them.
- Segment by industry or role and write a message for each segment.
- Send from a separate, authenticated and warmed-up domain, in small daily batches per mailbox.
- Include what the law requires: who you are, a postal address (US), and an easy opt-out you actually honor.
- Stop and review if bounces or complaints climb.
Better alternatives to buying an email list
Build a targeted B2B list yourself
Start from your ideal customer profile, search for matching people on LinkedIn or Sales Navigator, then find and verify their professional emails. You get fresher data (current job titles) and a list nobody else is emailing. Our guide to exporting leads from Sales Navigator shows the steps, and our roundup of free email finding tools covers the options.
useArtemis does this in one place: export leads from LinkedIn and Sales Navigator searches with the LinkedIn scraper, or pick them from the Discover database, then find and verify their emails and contact them with LinkedIn + email sequences instead of email alone.
Grow an opt-in list for marketing
For newsletters and promotions, build the list yourself: a useful lead magnet (template, report, calculator), webinars, events, a signup form on every high-traffic page, and co-marketing with partners where the signup form names both companies. It's slower, but every subscriber asked to hear from you.
Write messages worth answering
A smaller list with a relevant message beats a big list with a generic one. Our cold email tips cover subject lines, personalization and follow-ups.
FAQ
Can you buy email lists?
Yes. B2B data platforms, list brokers and online sellers all sell email addresses. Whether you can use them depends on where your recipients are and what you send: in the US, CAN-SPAM allows unsolicited commercial email with an opt-out, while Canada, the UK and many EU countries require consent in many cases.
Is it illegal to buy email lists?
Buying the list itself is generally not illegal. Sending marketing emails to it can be, depending on the country: Canada's CASL and EU e-privacy rules often require consent, and the UK only allows bought-in lists for individuals who specifically consented to hear from you. In the US, it's legal if every email complies with CAN-SPAM.
Where can I buy a targeted email list?
For B2B, use a database you can filter yourself (Apollo.io, Lusha, UpLead, ZoomInfo, Cognism or useArtemis Discover) rather than a pre-built file, so the list matches your ideal customer profile and comes with verified emails. Avoid sellers who can't tell you where the data comes from or when it was last verified.
How much does a business email list cost?
On credit-based databases, one email typically costs from about 10 cents to well under a dollar: for example, Lusha's Starter plan is $49.90 for 400 credits and UpLead's Essentials plan is $99 for 170 credits in October 2026. List brokers price by selection. Very cheap bulk files are usually unverified and the riskiest for your domain.
Can I use a purchased email list for cold email?
You can for B2B cold outreach in countries where it's allowed (such as the US, or B2B in France under conditions), if you verify every address, send small batches from a separate domain, keep the message relevant to the recipient's job and include a working opt-out. Never import it into a newsletter platform that bans purchased lists.




