Is it legal to send direct mail to B2B prospects?
Last updated July 20, 2026
In the United States, sending physical mail to prospects at their business addresses is broadly permitted and requires no prior consent. The laws that constrain cold outreach — CAN-SPAM for commercial email, the TCPA for calls and texts — regulate electronic channels and do not apply to postal mail. There is no federal opt-in requirement, and no do-not-mail registry equivalent to the Do Not Call list, for B2B postal outreach.
That said, general rules still apply: your mail can't be deceptive or fraudulent, certain content categories are restricted, and if you're mailing contacts outside the US — especially in the EU or UK, where a name plus work address counts as personal data under GDPR — additional data-protection obligations come into play. This is general information, not legal advice; consult counsel for your specific situation.
Key takeaways
- US federal law broadly permits unsolicited postal mail to business addresses — no opt-in is required.
- CAN-SPAM governs email and the TCPA governs calls and texts; neither applies to physical mail.
- Content rules still apply: mail can't be deceptive, misleading, or dressed up as an official document.
- For EU/UK contacts, GDPR treats a named person's work address as personal data — direct mail is workable but carries compliance obligations.
- Honor removal requests and keep outreach professional; it's both good practice and good marketing.
What US law actually says about prospecting mail
Physical mail is one of the most permissive outreach channels in US law. CAN-SPAM's requirements — opt-out links, sender identification, no deceptive subject lines — attach to commercial email, not letters. The TCPA's consent rules attach to phone calls and text messages. Postal mail to a business address triggers neither, and courts and regulators have long treated it as ordinary commercial speech.
The rules that do exist mostly target abuse. Mail fraud statutes prohibit using the mail to deceive. FTC rules against deceptive practices apply to what your piece says, just as they do to any ad. And postal regulations restrict things like making an envelope look like a government document or an invoice when it isn't one. A truthful sales letter to a VP of Sales at her office raises none of these issues.
Are there any opt-out mechanisms for physical mail?
A few narrow ones. USPS Prohibitory Orders let an individual recipient formally demand a specific sender stop mailing them, and once served, continuing to mail that person violates postal law — so honor any such request immediately. Industry suppression services, like the ANA's DMAchoice program, are consumer-oriented and primarily affect high-volume consumer mailers rather than targeted B2B campaigns. And as a matter of basic practice, if a prospect asks to be removed from your list, remove them; the legal question rarely comes up because reputable senders comply anyway.
What changes when you mail internationally?
Outside the US, the analysis shifts from mail law to data-protection law. Under the GDPR in the EU and its UK equivalent, a prospect's name and business address are personal data, and building a mailing list means processing it. Postal direct marketing is generally more accommodated than cold email — many teams rely on the legitimate-interest basis, and the ePrivacy rules that require consent for electronic marketing don't extend to post — but you still owe GDPR's baseline duties: a documented lawful basis, transparency about where you got the data, and a working right to object.
Other jurisdictions, such as Canada under PIPEDA and various Asia-Pacific privacy regimes, have their own frameworks. The consistent theme: physical mail is usually the most permissive channel available, but the personal-data handling behind the list still needs to comply. For non-US campaigns, get specific advice.
Good practice beyond the legal minimum
Compliance is the floor. Effective B2B mail programs go further because trust is the asset they're building: send to verified business addresses rather than home addresses, identify your company plainly on the materials, make the piece genuinely useful to the recipient, and maintain a suppression list for anyone who's asked out. B2BMail's model aligns with this by design — envelopes go to named contacts at verified business addresses via FedEx, with a clear sender and professional materials, because that's also what performs.
Frequently asked questions
Does CAN-SPAM apply to physical direct mail?
No. CAN-SPAM regulates commercial email — its opt-out, identification, and header rules have no application to postal mail. The comparable constraints on physical mail are general fraud and deception rules plus narrow postal regulations, which ordinary truthful sales mail doesn't implicate.
Do I need a prospect's permission before mailing them at work?
In the US, no — unsolicited postal mail to a business address is permitted without prior consent. In the EU and UK, you don't need consent specifically for postal marketing in most cases, but you do need a lawful basis under GDPR (commonly legitimate interest), transparency, and an honored right to object. This isn't legal advice.
Can I legally mail a prospect at their home address?
Generally yes in the US, but it's usually the wrong move for B2B: it reads as invasive, and sourcing home addresses raises sharper privacy issues, especially internationally. Business addresses keep the outreach professional and lower-risk, and B2BMail ships exclusively to verified business addresses.
Is it legal to send mail that looks like an urgent official document?
Dressing marketing up as a government notice, invoice, or legal document is restricted by postal regulations and deceptive-practices rules — don't do it. A FedEx envelope, by contrast, is simply a premium delivery method; it signals importance honestly because it genuinely was couriered to the recipient.
Land on every prospect's desk
B2BMail puts your message in a FedEx envelope on the desk of every decision-maker at your target accounts — with per-piece tracking and every address verified before it ships.