Does Mailchimp allow cold emails to people who never signed up? The short answer is no. Mailchimp’s Acceptable Use Policy forbids sending to purchased, rented or publicly available lists and asks for evidence of consent for every commercial email. An account that breaks these rules can be suspended.
The short version:
- Mailchimp’s policy asks for an opt-in form or other evidence of consent for every commercial email.
- The policy counts one-to-one commercial emails as spam too, so sending cold emails with Mailchimp one at a time still breaks it.
- Cold outreach needs a mailbox of your own and a careful setup, and the law of the recipient’s country decides whether it is allowed at all.
The quotes below come from the version of the policy updated on 26 September 2025, read on 2 October 2026.
Does Mailchimp allow cold emails?
The Acceptable Use Policy has a section called “Prohibited Actions”. Three of its lines answer the question.
The first is about where a list comes from. Members may not “Upload or send email Campaigns to purchased, rented, third-party, co-reg, publicly available data, or partner lists of any kind.” A bought database, a list a partner shares with you and addresses copied from company websites all fall under it.
The second asks for proof. “You must be able to point to an opt-in form or show other evidence of consent for any commercial or marketing email you send.”
The third closes the one-at-a-time route. “Spam can be in the form of bulk emails or one to one commercial emails.” Writing to strangers individually does not bring the outreach inside the policy.
The same section also covers Mailchimp Inbox, its tool for one-to-one messages. It forbids sending bulk commercial or marketing emails through Inbox and says Inbox is designed for one-to-one messages. The policy’s consent line covers any commercial or marketing email you send, and for commercial one-to-one messages in Inbox it points to an opt-out footer.
What happens if you do it anyway
“If you violate this policy, we may suspend or terminate your account or access to the Service.” Mailchimp also says it reviews account behavior and content with automated tools and human moderators, and that it investigates abuse complaints immediately.
If your newsletter runs on Mailchimp too, one cold campaign can take the whole account offline, newsletter included.
Why Mailchimp draws the line here
Mailchimp explains that keeping the platform clean is in its own interest “because our reputation and deliverability depend on it.” Mail from a large sending platform shares a reputation. When some customers send to people who never asked, recipients mark the mail as spam, and mailbox providers start to trust everyone on that platform a little less.
If you send a monthly newsletter to customers who signed up, that strictness works in your favour every time your email lands in the inbox.
What you can do with Mailchimp inside the rules
Mailchimp suits people who already know you:
- a newsletter for customers and subscribers who signed up through a form,
- updates to people who gave you their address at an event or a webinar and agreed to hear from you,
- onboarding and follow-up emails to people who registered on your site.
Each of these comes with a moment when the person said yes, and that moment is the evidence the policy asks for. To grow the list, give people a reason to sign up and a clear form to do it.
What cold outreach needs instead
A Mailchimp campaign is one template sent to a whole list from a shared platform. Cold outreach, where the law allows it, works the other way round: a business that has not heard from you yet gets a note written for it, by you, for a real reason. Your own mailbox provider has anti-spam terms of its own, and the consent rules of the recipient’s country apply there just as they do here. Personal outreach like this calls for a different setup:
- Send from your own domain and mailbox, with SPF, DKIM and DMARC set up, so the reputation you build belongs to you.
- Pick only the companies your offer is relevant for. A clear ideal client profile does more for replies and complaints than any subject line.
- Open with who you are, why you are writing to this company and where you found the contact.
- Every message still needs an easy way to opt out, and a “no” takes effect at once. Keep everyone who declined on a list and check it before each send.
- Send a few personal notes rather than a campaign. A short line about the company beats a template sent to thousands.
- Read each reply yourself before you answer it.
Public contact lists and the law
Whatever tool you use, the recipient’s country decides whether you may send at all, and the rules differ a lot. Czechia is at the strict end, and its rule matches the ban quoted above. Asked whether contact details freely available online may be used for a promotional email, the Czech data protection authority (ÚOOÚ) answers “Nelze”, which means “You can’t”. A commercial message may go only to someone who agreed in advance, or to an existing customer you write to about your own similar products or services, and it makes no difference whether the address belongs to a person or a company. Asking for that consent by email is not a way in either, since the request is itself a commercial message. A reply to a specific inquiry someone sent you does not count as a commercial message, as long as you can prove that context. Moving the campaign to another tool changes nothing, because the authority holds both the sender and the business being promoted responsible.
The United States sets a lower bar. The FTC’s guide to the CAN-SPAM Act says the law “makes no exception for business-to-business email”. Each commercial message has to explain clearly how to opt out, and you have 10 business days to honour an opt-out. Our article on cold email law in B2B covers the rules country by country.
HypeLead and your own mailbox
HypeLead writes from your own mailbox and your own LinkedIn, which keeps your sender reputation under your control. The mailbox is warmed up, and SPF, DKIM, DMARC and the spam score are checked before any message goes out. Recipients can unsubscribe with one click in every email and can read a privacy notice page about their data. If a campaign is aimed at a country whose law requires prior consent for business email, the app warns you and asks about it once per campaign. AI drafts each reply, and by default it is sent only on your click. You remain the sender, so you also remain responsible for who you contact under each country’s law. Read how the product works or see how B2B service firms use it.
Brevo and HubSpot give a similar answer to the same question: read what Brevo’s policy says and HubSpot’s anti-spam rules.
Want your outreach to come from your own mailbox, one personal message at a time, with the checks built in? Your next step is at the end of this page.
