Free tools

Is your cold email legal to send?

A B2B cold email needs four things in it wherever it goes: who sent it, a postal address, a way to unsubscribe, and an honest subject. Whether you may send it at all depends on where the recipient is and what kind of address it is. Paste yours, pick the location, and see what is missing. Free, no signup, nothing leaves your browser. Not legal advice.

Your email

Where is the recipient?

What kind of address?

e.g. dana@company.com, at a company

Nothing leaves your browser.

Verdict

Paste an email to check it.

Or try the example. The rules for the location you picked are already listed below.

This is not legal advice. It reads the words of one email against a working summary of the rules, and it cannot see your list, your headers or your opt-out process.

By default, Monty puts your address and an unsubscribe link on every email.

The footer carries your postal address and an unsubscribe link, and is on unless you switch it off. While it is on, nothing sends until a full postal address is saved. An unsubscribe request always stops all email to that person at once.

Start with your list

May you send it

Whether the recipient's location and address type allow a cold email at all.

  • Check yourself

    Is it a company, or a sole trader?

    Required

    A Ltd, plc, LLP, public body or Scottish partnership is a corporate subscriber: cold email is allowed on legitimate interest. A sole trader looks like a business and is not. Check Companies House.

    The rule (PECR reg. 22): PECR's consent rule covers individual subscribers, not corporate ones. Which one they are decides whether you may send at all.

  • Check yourself

    Legitimate interest, written down first

    Required

    B2B outreach to business addresses usually relies on legitimate interest. That needs a written assessment (purpose, necessity, balancing) done before the first send, not after a complaint.

    The rule (UK GDPR Art. 6(1)(f)): A lawful basis lets you hold their data. It does not, on its own, let you email them.

Check yourself

Rules a pasted email cannot show: headers, the From line, and how fast opt-outs are honoured.

  • Check yourself

    One-click unsubscribe header

    Recommended

    A pasted email does not show its headers. Use the generator below to write List-Unsubscribe and List-Unsubscribe-Post, then check they are on a real sent copy ("Show original" in Gmail).

    The rule (RFC 8058; Gmail and Yahoo sender rules): Gmail and Yahoo's bulk-sender rules require one-click unsubscribe. The header adds to the visible link; it does not replace it.

  • Check yourself

    Truthful From and Reply-To

    Required

    The From name, address and Reply-To are not in a paste. Replies must reach a mailbox someone reads.

    The rule (PECR reg. 23): From, Reply-To and routing details must truthfully identify who sent it.

  • Check yourself

    Opt-outs honoured in time

    Required

    Whether opt-outs are acted on is a process, not something in the email. Test it: unsubscribe yourself and see if the next email still comes.

    The rule (PECR; UK GDPR Art. 21): Honour opt-outs immediately and permanently, across every campaign, and never re-add the address from a later import.

  • Check yourself

    The same footer on every follow-up

    Recommended

    Each follow-up in a sequence needs the identity, address and opt-out too, not just the first email. Paste each one to check it.

    The rule (Stricter-standard practice): Every message is judged on its own. Only the line on where you got their details may shorten after the first.

In the email

Paste an email above to check the sender, address, unsubscribe route, subject and sales-email line.

Footer and header generator

Build the footer and the one-click unsubscribe headers.

Fill in your details for a plain-text footer that carries your name, company, address, sales-email line and unsubscribe link, plus the List-Unsubscribe headers your sending tool should set. Nothing is saved.

Your details

Plain-text footer

Add your company name, postal address, an unsubscribe link or address to build the footer. It is not built without them, because a footer with no address or a dead opt-out only looks finished.

Email headers (RFC 8058)

Add an unsubscribe link or email to build the headers.

What it checks

Three questions, and the rule behind each answer.

Every check is a fixed rule that runs in your browser. Each result is Pass, Fix, or Check yourself. Anything a pasted email cannot show, such as headers or how fast opt-outs are honoured, is always Check yourself, never Pass. Each rule is marked Required where the law of the location you pick requires it, and Recommended where it is required elsewhere and one footer for everyone is the safer habit.

1. What is in the email

  • Who sent it. A person’s name and a company after the sign-off. PECR regulation 23 says the sender’s identity must not be concealed in any marketing email, including to limited companies; CAN-SPAM says sender details must be truthful.
  • Postal address. A street address, postcode, ZIP or PO box after the sign-off. CAN-SPAM requires a valid physical postal address in every commercial email.
  • Unsubscribe route. An unsubscribe link, “opt out”, or plain wording such as “reply stop and I won’t email again”. “Let me know if this isn’t relevant” is flagged: it hints at a way out without offering one. Required by PECR and CAN-SPAM; under GDPR the right to object to direct marketing is absolute.
  • Honest subject. “Re:” or “Fwd:” on a first email, and borrowed urgency such as “urgent”, “action required”, “invoice” or “final notice”. CAN-SPAM bans deceptive subject lines; in the UK and EU it is a matter of fair processing.
  • Says it is a sales email. Wording such as “This is a sales email”. CAN-SPAM requires a commercial email to be identified as an advertisement unless the recipient consented first.
  • Where you got their details. A “You’re receiving this because…” line and a privacy notice link. For UK and EU recipients, GDPR Article 14 requires the first email to say where the data came from.

2. May you send it

  • UK. PECR restricts cold marketing email to individual subscribers. Limited companies, plcs, LLPs, public bodies and Scottish partnerships are corporate subscribers and can be emailed on legitimate interest, with a written legitimate interest assessment done before the first send. Sole traders, unincorporated partnerships in England, Wales and Northern Ireland, and personal addresses need consent. The soft opt-in only covers existing customers.
  • EU. GDPR decides whether you may hold the data, usually on legitimate interest. Whether you may send the email is set by each country’s own law, which this checker does not cover. Check the recipient’s country.
  • US. CAN-SPAM is opt-out: no consent needed if every email meets its rules. State privacy laws such as CCPA/CPRA can still apply to holding the list, including in B2B.
  • Canada. Flagged hard. CASL starts from consent, not opt-out, and this checker does not cover its detail. Take advice before sending.
  • Australia. Flagged. The Spam Act 2003 has its own rules, which this checker does not cover. Take advice before sending.

3. What you check yourself

  • One-click unsubscribe headers. List-Unsubscribe and List-Unsubscribe-Post: List-Unsubscribe=One-Click (RFC 8058). Gmail and Yahoo require one-click unsubscribe from bulk senders.
  • From and Reply-To. Truthful, and replies reach a mailbox someone reads.
  • Opt-outs honoured in time. Immediately and permanently in the UK; within 10 business days in the US, with the link working for at least 30 days. Building to the stricter one covers both.
  • Every follow-up. Each email in a sequence carries the identity, address and opt-out, not just the first.

This is not legal advice. It is a working summary of the rules, checked against the words of one email. It cannot see your list, how you got it, your headers or your opt-out process. For anything that matters, ask a lawyer who knows the recipient’s country.

Common questions

+Is cold email legal in the UK?

To a company address, usually yes. PECR restricts unsolicited marketing email to individual subscribers, not corporate ones, so a limited company, plc, LLP, public body or Scottish partnership can be emailed on legitimate interest, with a written assessment done before the first send. A sole trader, an unincorporated partnership in England, Wales or Northern Ireland, or a personal address needs consent first. Every email must say who you are and give a way to opt out. This is not legal advice.

+What does CAN-SPAM require in a cold email?

No consent, because it is an opt-out law. Every commercial email needs truthful sender details, a subject that is not deceptive, a clear statement that it is an advertisement, a valid physical postal address, and a free opt-out that works for at least 30 days after sending and is honoured within 10 business days. Penalties are per email, and both the sender and the company being promoted are liable.

+Does a cold email need a physical address?

For a US recipient, yes, in every commercial email. In the UK the law requires that your identity is not hidden; a postal address is the plainest way to show it. Using one footer with the address for everyone is safer than switching footers by country.

+Do I have to say where I got their email address?

For UK and EU recipients, yes. Under GDPR Article 14, when you did not get the data from them, the first email must tell them who you are, why you hold it, where it came from, how long you keep it and how to object. Most senders do it with one sentence in the footer and a link to a privacy notice that covers prospect data.

+Can I cold email people in Canada?

Be careful. Canada's anti-spam law (CASL) starts from consent, not opt-out, so a cold email that is fine in the US can break it. This checker does not cover CASL in detail. Take advice before sending.

+What are List-Unsubscribe and List-Unsubscribe-Post?

Email headers that let a mail client show its own unsubscribe button. List-Unsubscribe names the link (and optionally an email address); List-Unsubscribe-Post: List-Unsubscribe=One-Click (RFC 8058) says the link unsubscribes on a single POST with no confirmation page. Gmail and Yahoo require one-click unsubscribe from bulk senders. The headers add to the visible unsubscribe link; they do not replace it.

+Is my email stored or sent anywhere?

No. The check and the generator run in your browser. Nothing is sent to a server or put in the page address.

Before you book

What you are agreeing to.

The price

$1,399 a month. No setup fee.

Prices shown in USD. Billed in the same currency at checkout.

If it does not work

Cancel inside 30 days and your payment comes back in full. No usage deduction, no form to fill in.

How you leave

Monthly, and you cancel from inside the product. No contract, no notice period, no minimum term — the tools this replaces mostly ask for a quarter or a year up front.