Opt-out (sales email)

TL;DR

An opt-out is a prospect's explicit request to stop receiving outreach — legally required to be honored under CAN-SPAM (US) and GDPR (EU) within a defined timeframe, and practically important for maintaining domain reputation and list hygiene. Ignoring opt-outs is the single fastest way to generate spam complaints, damage domain reputation, and lose sending ability (CAN-SPAM Act 2003; GDPR Article 21 2018).

What is an opt-out in sales email?

An opt-out is a prospect's explicit request to be removed from further outreach — expressed as 'please remove me,' 'unsubscribe,' 'stop emailing me,' or any equivalent language. Under CAN-SPAM (US), senders must honor opt-out requests within 10 business days. Under GDPR (EU), opt-out requests for marketing communications must be honored immediately and without friction.

In B2B cold outreach, opt-outs typically arrive as direct email replies rather than automated unsubscribe links (since cold email often doesn't include formal unsubscribe mechanisms). A prospect who replies 'please take me off your list' has made a CAN-SPAM-compliant opt-out request. The rep — and their sending platform — must suppress that address from all future sends.

Beyond the legal requirement, honoring opt-outs is a practical deliverability management action. A prospect who opts out but keeps receiving email will escalate to marking the message as spam — the one action that most directly damages domain reputation. Every spam complaint from an ignored opt-out request is a compounding tax on the sending domain's inbox placement.

Legal requirements for opt-outs

The two major frameworks — CAN-SPAM (US) and GDPR (EU) — have different requirements but both mandate that opt-outs be respected.

CAN-SPAM (US) — requires that commercial emails include a functional opt-out mechanism (an unsubscribe link or a reply-based mechanism). Opt-out requests must be honored within 10 business days. The opt-out mechanism must work for at least 30 days after the email was sent. Cold email in B2B contexts is covered by CAN-SPAM if sent from a US business or to US recipients.
GDPR (EU) — applies when the sender or recipient is in the EU. Requires a legitimate interest or consent basis for cold email to individuals. The right to object to direct marketing is absolute — requests must be honored immediately and without requiring the person to give a reason. B2B cold email in the EU is generally permitted under legitimate interest, but opt-out requests are unconditional.
CASL (Canada) — stricter than CAN-SPAM. Requires express or implied consent before sending commercial electronic messages. Implied consent applies to existing business relationships. Opt-out requests must be honored within 10 business days.

How to manage opt-outs operationally

1. Use a sending platform that automatically detects opt-out language in replies and adds the address to a suppression list. Most modern cold email tools (Outreach, SalesLoft, Smartlead, Instantly) do this automatically for standard phrases.

2. Maintain a master suppression list in the CRM. Any address that has opted out from any channel (email, call, LinkedIn) should be logged in the CRM with a 'do not contact' status. If a rep leaves and a new rep inherits an account, the suppression is preserved.

3. Audit your suppression list quarterly. Addresses should never be removed from the suppression list without explicit re-opt-in from the individual.

4. Honor opt-outs across all channels. A prospect who opts out of email has not necessarily opted out of cold calls (separate legal frameworks). But practically, a prospect who says 'stop emailing me' and then receives a call the next day will generate a complaint. Honor the spirit of the opt-out, not just the technical channel-specific requirement.

5. Train reps to recognize opt-out language beyond 'unsubscribe.' 'I'm not interested,' 'please stop,' 'take me off your list,' and 'do not contact me' are all opt-out requests regardless of whether the prospect used the word 'unsubscribe.'

How Gangly tracks opt-outs

Gangly's CRM Hygiene Engine detects opt-out language in prospect replies and automatically flags the contact as do-not-contact in the CRM — removing them from all active sequences and suppressing them from future outreach. The rep sees the account status update in real time and receives a notification: '[Name] has opted out — removed from all sequences.'

Suppressed contacts are tracked in the CRM and cannot be re-added to sequences without manually overriding the suppression — which requires manager-level access and a logged reason, maintaining compliance audit trails.

See how CRM Hygiene Engine works →

At a glance

Category: Outreach
Related: 5 terms

Frequently asked questions

What is an opt-out in cold email?

A prospect's explicit request to stop receiving outreach — 'unsubscribe,' 'remove me,' 'stop emailing me,' or equivalent. Legally required to be honored under CAN-SPAM (within 10 business days) and GDPR (immediately). Must be tracked in a suppression list that persists across reps, campaigns, and channels.

How quickly must you honor an opt-out request?

Under CAN-SPAM (US): within 10 business days of receiving the request. Under GDPR (EU): immediately, without requiring the individual to provide a reason. Under CASL (Canada): within 10 business days. In practice, best practice is to honor opt-outs within 24 hours regardless of jurisdiction — the deliverability risk of continued sending is not worth the delay.

What happens if you ignore an opt-out request?

Three outcomes, in escalating severity: (1) the prospect marks your email as spam — directly damaging domain reputation and inbox placement. (2) Legal and regulatory risk — CAN-SPAM violations can result in fines up to $51,744 per email; GDPR violations up to 4% of global annual revenue. (3) Brand damage — a prospect who has opted out and keeps receiving email often escalates to public complaints.

Does opting out of email apply to phone calls?

Not automatically — CAN-SPAM and GDPR govern electronic marketing messages. Phone calls are governed by separate frameworks (TCPA in the US, similar in the EU). A prospect who opts out of email has not technically opted out of calls. But best practice is to honor the spirit: if someone says 'stop contacting me,' remove them from all outreach channels, not just email.

How do you prevent accidental outreach to opted-out contacts?

Maintain a central suppression list in the CRM that all outreach tools pull from. Every sending platform (email, LinkedIn, phone dialers) should sync with the CRM suppression list before generating new outreach. Check your CRM's do-not-contact configuration and test it: add a test address to the suppression list, then attempt to create a sequence task for it and verify the system blocks it.

See it in the product