Cold Email
Is cold email legal in Australia? The Spam Act, explained simply
Quick answer
Yes — cold email is legal in Australia for business-to-business outreach, provided you follow the Spam Act 2003. Three rules matter: the message must be genuine, relevant business outreach; it must clearly and accurately identify who you are; and it must include a working, easy unsubscribe that you action promptly. You don’t always need prior express consent for relevant B2B outreach, but you must never use harvested or misleading details, and you must honour every opt-out.
Related: done-for-you cold email outreach
The one law that matters: the Spam Act 2003
In Australia, commercial electronic messages — email and SMS sent to Australian addresses — are governed by the Spam Act 2003, administered by ACMA (the Australian Communications and Media Authority). It sets three core obligations for any commercial message: consent, identify, and unsubscribe. Get those right and your outreach is compliant.
Consent: express vs inferred
Consent comes in two forms. Express consent is when someone clearly opts in. Inferred consent is a reasonable expectation of contact — for example, an existing customer relationship, or a business email address that is conspicuously published (on a company website) without a statement that the person doesn’t want unsolicited emails, where your message relates to their role.
Genuine B2B outreach to a relevant, publicly listed business address commonly relies on inferred consent. That is not a blank cheque — the message still has to be relevant to that business, and you still have to identify yourself and offer an unsubscribe.
Identify yourself — accurately
Every message must clearly say who is sending it and how to contact you, and those details must be accurate for at least 30 days. No spoofed "from" addresses, no misleading sender names, no hiding who you are. Honesty here is both the law and the thing that gets you replies.
Unsubscribe — and action it fast
Every commercial message needs a functional, low-effort way to opt out. The unsubscribe facility must work for at least 30 days, you can’t charge for it, and you must honour requests within five business days. Build this in from day one — it protects you legally and keeps your sender reputation clean.
What makes cold email work — and stay compliant
Compliance and results pull in the same direction. The things that keep you on the right side of the Spam Act — relevant targeting, accurate identity, easy opt-out — are also the things that get you replies instead of spam complaints. Add real personalisation, warmed-up sending accounts and sensible volume limits and you protect your domain reputation while you build pipeline.
- Target a relevant, genuinely interested audience — not a bought or scraped list.
- Use accurate sender name and contact details.
- Include a clear, working unsubscribe in every message.
- Honour opt-outs within five business days, every time.
- Keep records of your sending and your opt-out handling.
This is general information, not legal advice. For your specific situation, check the current ACMA spam guidance or speak to a qualified lawyer.
Common questions
Do I need consent before sending a cold B2B email?
For genuine, relevant business-to-business outreach you can often rely on inferred consent — but you must still identify yourself accurately and include a working unsubscribe, and you must honour opt-outs.
Will cold email hurt my domain reputation?
Only if it is done carelessly. Warmed-up sending accounts, sensible volume limits and a clean, relevant list protect your main domain rather than risk it.