Is it illegal for a company to not let you unsubscribe?

The Legal Reality: Why Ignoring Unsubscribes Exposes Your Business to Massive Fines

The FTC makes it unambiguous: recipients have the right to stop your emails, and ignoring that right carries penalties of up to $53,088 per separate email under the CAN-SPAM Act. There is no B2B exception, no "bulk-only" carve-out, and no way to contract the liability away — both the company whose product is promoted and the sender can be held responsible. The law requires a clear, conspicuous opt-out mechanism in every commercial email, functional for at least 30 days, with requests honored within 10 business days.

• CAN-SPAM applies to every commercial message — not just newsletters or mass blasts
• Opt-out links must work without fees, logins, surveys, or extra steps beyond a single click or reply
• Once someone unsubscribes, their address cannot be sold, transferred, or re-added to any list
• Documentation of every opt-out must be retained for at least four years

Enforcement is not theoretical. The FTC's 2024 proposed order against Verkada imposed a $2.95 million fine — the largest CAN-SPAM penalty ever — for emails that lacked proper unsubscribe options. Experian paid $650,000 for failing to provide a clear way out. Under GDPR, Meta faced a ~$420 million fine for forced consent; under CCPA, Sephora was fined $1.2 million for opaque opt-out practices. The FCC's new TCPA Opt-Out Rule, effective April 11, 2025, extends the same logic to calls and texts: consumers may revoke consent "in any reasonable manner" — not just by texting "STOP" — and businesses must honor it within 10 business days across every channel.

At GrowthPros, every lead we deliver carries a complete consent record — disclosure text, timestamp, IP address, and the named contacting party — and our lists are DNC-scrubbed before any outbound contact. Opt-outs are honored immediately and permanently across SMS, voice, and email. Reactivation campaigns target only pre-existing, opted-in relationships, never cold lists, with FCC one-to-one consent direction built in from day one. When the law says you can't outsource compliance, the only safe path is a supplier that bakes it into the product.

How GrowthPros Ensures Compliance: Consent, DNC Scrubbing, and Cross-Channel Opt-Out Honoring

GrowthPros embeds compliance into every lead we deliver, starting with explicit consent. Each lead includes a verified consent record showing the disclosure text, timestamp, IP address, and named contacting party — a requirement emphasized by the FTC’s CAN-SPAM Act guidance as critical for legal email outreach FTC compliance guide. This documentation isn’t just a formality; it’s a liability shield for buyers who inherit opt-in relationships when purchasing our leads.

Before any contact occurs, we scrub every lead list against the National Do Not Call (DNC) registry and internal suppression lists. This pre-contact DNC scrubbing ensures we never initiate outreach to numbers or emails that have opted out, directly supporting the TCPA’s requirement that revocations be honored via “any reasonable manner” within 10 business days Carlton Fields TCPA analysis. For lead buyers, this reduces exposure to violations that can trigger fines of up to $53,088 per violating email under CAN-SPAM FTC penalty structure.

When a recipient opts out — whether via SMS reply, email unsubscribe link, or verbal request during a call — we honor it immediately and permanently across all channels. Our suppression lists synchronize in real time between voice, SMS, and email systems, ensuring no channel bypasses the opt-out. This cross-channel honoring aligns with the FCC’s 2025 TCPA Opt-Out Rule, which mandates that businesses act on revocations within 10 business days and prohibits restricting opt-outs to specific keywords like “STOP” BCLP TCPA guidance. We go further by processing opt-outs instantly, recognizing that immediate action is both a legal best practice and a trust-building measure U.S. Chamber recommendation.

Critically, we never sell, transfer, or re-add opted-out contacts — a prohibition explicitly stated in CAN-SPAM that extends to lead vendors FTC on opt-out transfers. Every lead we deliver carries its consent trail, and our suppression lists are updated and shared across all delivery channels to prevent re-contact. For clients using our Dead Lead Reactivation service, we only engage pre-existing, opted-in relationships — never cold lists — ensuring compliance is built into the reactivation sequence from the first AI-driven SMS. This end-to-end framework doesn’t just check regulatory boxes; it protects our clients’ reputations and reduces their legal risk when buying leads.

What You Should Demand from Any Lead Vendor: Opt-Out Protections and Consent Trails

When buying leads, compliance isn’t just about avoiding fines — it’s about securing higher-quality contacts who actually want to hear from you. The legal landscape around opt-outs has tightened significantly, with the FTC imposing penalties of up to $53,088 per violating email under CAN-SPAM, and the FCC’s 2025 TCPA Opt-Out Rule now requiring businesses to honor revocation of consent for calls and texts via “any reasonable manner” within 10 business days. These rules apply across every channel — email, SMS, and voice — meaning lead vendors must honor opt-outs universally and permanently, or risk exposing their clients to shared liability.

To protect your business, demand that every lead vendor provides a verifiable consent trail with each contact. This should include the original disclosure text, timestamp, IP address, and the named party who obtained consent — documentation that must be retained for at least four years, aligned with the TCPA’s statute of limitations. Vendors should also confirm that lists are DNC-scrubbed before any outbound contact and that opt-outs are suppressed across all communication channels, never resold, transferred, or reactivated without fresh consent. As the U.S. Chamber of Commerce notes, making it easy to unsubscribe isn’t just compliant — it’s a best practice that reduces spam complaints and protects sender reputation.

• Require proof of DNC scrubbing and consent documentation before accepting any lead delivery.
• Verify that opt-out mechanisms function across email, SMS, and voice — not just keywords like “STOP.”
• Ensure the vendor honors opt-outs immediately and permanently, with suppression lists synced across all channels.
• Confirm that opted-out contacts are never sold, transferred, or re-added to future campaigns.
• Insist on retaining consent and opt-out records for a minimum of four years per lead.

At GrowthPros, every lead we deliver includes a complete consent record and is rigorously DNC-scrubbed, with opt-outs honored permanently across SMS, voice, and email — turning compliance into a measurable advantage in lead quality and legal safety.