Should you buy a business email list? The risks, and the alternative

Usually, no. A bought business email list is a list of addresses someone else collected, at some point in the past, for someone else's purposes. It tends to contain dead addresses, spam traps and people who've never heard of you, and Gmail's own sender guidelines tell senders not to purchase email addresses from other companies [1]. Buying one is legal in the US and B2B cold email is allowed under CAN-SPAM, but the deliverability risk is high and the rules are stricter in the UK, EU and Canada. Building your own list from current sources costs less than most people expect and carries far less risk.

If you're going to buy anyway, there's a vetting checklist below. Read it before you pay.

What actually goes wrong with a bought list?#

Three things go wrong, and they compound: addresses decay, traps get you blocklisted, and recipients complain.

Addresses decay faster than lists are refreshed#

Business data goes stale constantly. In the second quarter of 2025, 310,000 US establishments closed, according to the Bureau of Labor Statistics [2], against roughly 12.1 million establishments counted in 2025 [3]. That's something like 2–3% of businesses gone every quarter, before you count the ones that changed name, moved, switched domain or replaced their email provider.

People move too. The median worker had been with their current employer 4.1 years in January 2026 [4], which means a named contact on a list has a real chance of having left within a year or two. And new businesses churn fastest: about one in five new establishments doesn't survive its first year [5]. A list that was accurate when it was compiled loses accuracy every month after.

Spam traps get you blocklisted#

Spam traps are addresses that blocklist operators and mailbox providers use to catch careless senders. Roughly, there are two kinds:

• Pristine traps: addresses that never belonged to anyone, often planted where scrapers will collect them. Any mail to one shows that your list wasn't built from real opt-ins or real business pages.
• Recycled traps: real addresses that were abandoned, bounced for a while, then turned back on as traps. Old lists are full of these.

You can't see a trap. It looks like any other address, it doesn't bounce, and it never replies. Spamhaus, which runs some of the most widely used blocklists, puts it bluntly: "Inevitably, purchased lists contain spamtraps or generate abuse complaints and bounces, and then the buyers find themselves blocklisted for spamming" [13]. Once you're listed, a lot of your mail, including mail to customers, goes to spam or gets rejected.

Recipients complain#

People who don't recognize you mark your email as spam. Google asks senders to keep their spam rate, as reported in Postmaster Tools, below 0.1% and to never reach 0.3% [1]. That's one or three complaints per thousand messages. A poorly targeted bought list can blow through that in one send.

Is it legal to buy and use a business email list?#

It depends on the country, and on whether the addresses belong to named people.

Two things follow. First, in the US the law cares more about how you send than where you got the address, but "the vendor said it's compliant" doesn't move your responsibility anywhere: the FTC is clear that hiring someone else doesn't remove your liability [6]. Second, outside the US, a bought list of named people is hard to use lawfully. This is general information, not legal advice; our cold email laws guide covers more, and you should get advice for your situation.

What do list vendors actually sell?#

Vendors sell access to a database, usually under a license, and the terms matter more than the headline number of records. Before paying, find out:

• What you're licensing. One-time use, unlimited use for a year, or access only while subscribed? Can you load it into your CRM and keep it?
• Who else has it. Most lists are sold to many buyers. Assume your prospects get the same pitch from everyone who bought the same file.
• How emails are counted. Some vendors charge per record and treat email as an extra. Salesgenie (Data Axle's SMB product, also listed as Data Axle Genie on some review sites), for example, listed plans starting at $99 a month as of November 2026, with exports and email addresses using separately purchased credits [11].
• What the guarantee covers. If there's a deliverability guarantee, what counts as a bounce, how you claim, and whether you get money back or just replacement records.

Many large data providers, including ZoomInfo, don't publish prices at all; you get a quote from sales [12]. For a broader comparison of who sells what, see local business databases compared.

If I do buy a list, how do I check it before sending?#

Treat a bought list as unverified until you've proven otherwise. Run this checklist before a single campaign:

• Ask for the source and date of every address, or at least of the file. "Compiled from public sources" isn't an answer.
• Ask when it was last verified, and how.
• Verify a random sample of 100 addresses yourself with an email verifier. Count valid, catch-all and invalid.
• Stop if more than a few are invalid. If the sample is bad, the whole list is bad.
• Count catch-all domains. A verifier can't confirm those addresses; treat them as a maybe (why).
• Dedupe by address and by domain, and remove role addresses that you don't want (like abuse@ or postmaster@).
• Check against your suppression list of people who've opted out before.
• Send from a separate domain, to a small slice first, and watch bounces and complaints before you send more.
• Keep records of where the list came from, in case anyone asks.

What does it cost to build my own list instead?#

Less than you might think, in money and time, because the inputs are free and the work is repeatable. Here's the math for 1,000 emails to local businesses.

Building by hand. Say it takes three minutes per business to look up the website, check the contact page and verify the address, and about half of the businesses with a website give up an email (in Leadraft's runs, about 54% of business websites did, before verification). To get 1,000 found emails you'd check roughly 1,850 websites: 1,850 × 3 minutes ≈ 92 hours. At $25 an hour, that's about $2,300, or $2.30 per email, plus a verifier.

Building with a tool. On Leadraft's Starter plan, $19 a month includes 25,000 business credits and 1,000 checked-email credits. If you use the whole email allowance, that's $19 ÷ 1,000 ≈ $0.02 per checked email. You only spend a checked-email credit on a verified email you take out; catch-all and invalid grades are free. To get there, you'd use a few thousand business credits for businesses whose sites didn't have an email, which fit comfortably inside the allowance.

Buying. Get a quote in the same unit, price per verified, usable email, after your own sample check. Per-record prices look cheap until you subtract the bounces, the duplicates and the catch-alls.

How do I build a business email list myself?#

The process, in short:

1. Define the market: trade, area and the rule that makes a business a fit.
2. Get the businesses from current sources: Google Maps for businesses that serve the public, or official registers. See how to get a list of all businesses in your area.
3. Find the email on each business's own website: contact page, footer, About page, privacy policy. See how to find the email of any local business.
4. Verify every address and set catch-alls aside as maybes.
5. Keep the source of every address and a suppression list from day one.
6. Refresh it. Re-run the same market regularly and add only what's new.

Our step-by-step guide to building a local lead list from Google Maps walks through each step.

FAQ#

Is it legal to buy a business email list in the US?#

Buying a list isn't illegal in the US, and CAN-SPAM allows business-to-business cold email without prior consent, as long as each message has honest headers and subject lines, your postal address and a working opt-out. Harvesting addresses or generating them by dictionary attack is an aggravated violation. Other countries are stricter.

Why do purchased email lists hurt deliverability?#

They tend to contain dead addresses that bounce, spam traps that blocklists use to catch senders, and people who never heard of you and mark you as spam. Gmail's sender guidelines say directly not to purchase email addresses from other companies.

Can I use a bought email list in the UK or EU?#

Rarely for named people. Under UK GDPR and the EU GDPR, a named person's work address is personal data, and the ICO says bought-in lists can only be used for email marketing to individuals if they consented to messages from you specifically. Emailing limited companies is treated differently under PECR, but GDPR still applies to named people.

How much does a business email list cost?#

Prices vary widely and many vendors only quote on request. For example, Salesgenie (Data Axle) listed plans from $99 a month as of October 2026, with exports and email addresses using credits bought separately. Ask for the price per usable, verified email, not per record.

How do I check a purchased email list before using it?#

Ask when each address was last verified and where it came from, verify a random sample of 100 yourself, check how many are catch-all, look for duplicates and role addresses, and send to a small slice first. If more than a few percent of the sample is invalid, don't send to the rest.

What's the alternative to buying an email list?#

Build your own from current sources: take businesses from Google Maps or official registers, find the email on each business's own website, and verify every address before you send. It's fresher, it's yours, and you know where each address came from. Leadraft does those steps for the area you choose and charges once per business, ever.

Sources#

1. Google Workspace Admin Help, Email sender guidelines ("Don't purchase email addresses from other companies"; spam rate thresholds).
2. US Bureau of Labor Statistics, Business Employment Dynamics, release of October 28, 2026 (310,000 establishment deaths in Q2 2025).
3. US Bureau of Labor Statistics, QCEW Employment and Wages Annual Averages 2025 (about 12.1 million establishments, all ownerships).
4. US Bureau of Labor Statistics, Employee Tenure (median 4.1 years, January 2026).
5. US Bureau of Labor Statistics, The Economics Daily, 34.7 percent of business establishments born in 2013 were still operating in 2023 (79.6% survived the first year).
6. Federal Trade Commission, CAN-SPAM Act: A Compliance Guide for Business.
7. Information Commissioner's Office, Business-to-business marketing.
8. Information Commissioner's Office, Using marketing lists.
9. GDPR, Article 14: Information to be provided where personal data have not been obtained from the data subject.
10. CRTC, Guidance on implied consent under CASL.
11. Salesgenie, Packages (as of November 2026).
12. ZoomInfo, Pricing (no published prices, as of October 2026).
13. Spamhaus, FAQs: marketing email.