Cold Emailing With Mailchimp: What Its Rules Actually Allow

Mailchimp is not the route for an unsolicited cold-email campaign. Mailchimp says so in its sales prospecting guidance, requires permission for marketing email, and bars purchased, rented and third-party address lists in its Terms. If you have cold prospects, do not relabel them as subscribers or send a promotional pitch through its transactional tools. First sort people by how you know them and what they agreed to receive. Use Mailchimp for contacts whose permission and subscription status support the planned marketing message.

In short: US commercial-email law and Mailchimp's platform rules are different tests. A message can meet CAN-SPAM requirements and still be unsuitable for Mailchimp. A person can be in a Mailchimp audience and still be non-subscribed for marketing. Check the source, permission, current status and message purpose before you choose the sending route.

This guide is for a US B2B team with a mixed list of prospects, event contacts and customers. If your immediate job is to build a compliant first cold outreach pilot outside Mailchimp, start with how to start email outreach. If your lead asked a question or opted in, the emailing leads guide explains how the first message changes. Here, the narrow decision is whether Mailchimp is the right tool for each proposed message and recipient. If you already have a mixed list, jump to the 30-contact audit.

Why does Mailchimp give a different answer from US email law?

Mailchimp's position is direct: it says it is not a platform for cold emailing. Its Terms of Use prohibit purchased, rented and third-party email lists. Its permission guidance defines marketing permission as express, verifiable consent and tells senders not to use unsolicited marketing email. This is a platform condition for using Mailchimp, not a claim that every cold B2B email everywhere is illegal.

For a US email whose primary purpose is commercial, the FTC's CAN-SPAM guide says there is no B2B exception. It requires accurate sender and routing information, a subject that reflects the message, clear ad identification, a valid physical postal address, an opt-out method and timely honoring of opt-outs. That legal layer does not override Mailchimp's stricter permission rules. Other applicable law and receiving-provider requirements may also matter to a cold send.

Ask two separate questions before using Mailchimp:

1. Is the message permitted under the law and provider rules that apply? A B2B address or personalized note does not make a commercial message exempt from CAN-SPAM.
2. Does this contact have the permission and Mailchimp status for this marketing message? Possessing an address, having a previous interaction or passing email verification is not the same as express, verifiable marketing permission.

Passing the first test is not proof that you pass the second. A sender who imports a cold list and marks everyone “subscribed” has changed a database field, not the facts about consent.

Which contacts can receive Mailchimp marketing?

The practical distinction is subscribed, non-subscribed and unsubscribed, combined with where the address came from. Mailchimp's contact-status guidance says subscribed contacts can receive marketing email; non-subscribed and unsubscribed contacts cannot. A status field is a useful control, but the underlying permission still has to be genuine and relevant to the campaign.

A cold prospect or third-party list

A person found in a directory, a purchased file or an event organizer's attendee export has not subscribed to your company's marketing merely because their work email is public or verified. Mailchimp's Terms bar purchased, rented and third-party lists. Its list examples specifically reject an attendee list supplied by a trade-show host when attendees did not sign up to hear from the sender's company. Do not use Mailchimp Marketing or Mailchimp Transactional to turn this into a cold promotional campaign.

If a colleague says, “But these people are businesses, and our footer has an unsubscribe link,” return to the two tests above. The US legal test is not the same as Mailchimp's permission test. A footer cannot create prior consent.

A person who signed up with you

Mailchimp's list examples accept a trade-show booth follow-up when the attendee understood they would receive email from your company. That example does not create blanket permission for a recurring campaign. Its permission guide favors a clear, separate choice and a record of when the person signed up. Keep the actual form wording, source, date and topic or frequency promised. A form that offered “monthly RevOps tips” does not automatically support an unrelated product sequence.

Check that the contact is subscribed, that the permission has not gone stale or been withdrawn, and that the proposed message matches what they agreed to receive. Then use a relevant Mailchimp marketing segment. Mailchimp can help with the welcome or educational messages after a real opt-in; it should not be the first unsolicited touch used to manufacture that opt-in.

If the form record shows permission but Mailchimp says non-subscribed, hold the marketing send and investigate the import or status history. If Mailchimp says subscribed but the underlying permission record is missing, hold it and seek fresh confirmation through a suitable route. Do not manually flip status to manufacture permission. An unsubscribed contact stays suppressed for marketing even if an older signup record exists.

A customer who never subscribed to marketing

A customer may be in your Mailchimp audience as non-subscribed because they bought something or contacted support. Mailchimp says non-subscribed contacts can receive certain transactional messages, such as order notifications, but not marketing emails. Its transactional-email guide ties transactional messages to purchase or account activity, such as order confirmations, password resets and appointment reminders. A product upsell, newsletter or “quick introduction” does not become transactional because you send it one-to-one or use an API.

Mailchimp's list examples say purchase history can qualify as permission under its Terms and Acceptable Use Policy, but may not satisfy the local rules for marketing. That exception sits beside Mailchimp's broader advice to get express, verifiable consent. It is not blanket approval for every customer campaign.

For this non-subscribed customer, a previous purchase does not authorize the proposed newsletter or change their marketing status. Check the actual permission scope and applicable law, then hold the newsletter. Treat a genuine order update as an order update. For future promotions, offer a distinct marketing signup through a suitable route.

Someone who unsubscribed

An unsubscribed contact has withdrawn marketing permission. Do not reimport the address, open a second audience or change the status to “subscribed” to resume campaigns. Keep the suppression linked across your systems. Mailchimp's contact-status guide distinguishes transactional messages from marketing, but a real transaction does not erase a marketing opt-out.

Audit the list before opening a campaign builder

Suppose a fictional US B2B software team has a deduplicated set of 30 records. Its events and customer database have been combined into one working view, but none of the contacts is assumed eligible merely because a record exists:

• 10 people used the team's own event signup form, whose clear wording offered monthly RevOps workflow notes. Their permission records and subscribed status are current. These ten are candidates for a matching Mailchimp marketing message.
• 8 people came from an event organizer's attendee export and never signed up with the team. This is a third-party list. Do not send a Mailchimp marketing campaign to them.
• 6 customers have purchase or account records but no marketing subscription. Keep genuine account or order notices separate; do not add them to the marketing segment.
• 4 people put business cards in a prize bowl with no disclosed email-marketing signup. The cards are not express marketing permission.
• 2 people previously unsubscribed. Keep them suppressed for marketing.

The counts add to 30; they are an illustration, not a Mailchimp campaign benchmark. The potential marketing segment is ten, not thirty, and only if the specific message matches the recorded permission and no later opt-out or status change exists. The other twenty need different handling; they are not “inactive subscribers” to be re-engaged by changing a tag.

For each record, store the source, exact permission wording or evidence, date, current subscription status, any opt-out, intended message purpose and the person responsible for the decision. If you cannot show the permission behind a marketing status, hold the contact rather than guessing. A Mailchimp signup form can create a clearer path for future permission; it cannot retroactively authorize the old cold list.

One fictional decision-log entry would read:

• Source/date: Customer order recorded September 15, 2026.
• Evidence/status: Order record; non-subscribed for marketing; no opt-out recorded.
• Proposed message: Monthly product newsletter.
• Decision/owner: Hold marketing. The customer team will offer a separate signup through an appropriate channel.
• Why: The order record supports an order notice when one is due. It does not turn this newsletter into a transactional message.

What should you do with truly cold prospects?

Do not try to make Mailchimp behave like a cold-outbound sender. Decide whether there is an appropriate separate first-contact route for the prospect. That may be a carefully researched, one-to-one B2B email through an infrastructure and provider that permit the use, with the applicable legal and opt-out duties handled. Or it may be an event conversation, relevant content, a direct introduction or a signup form that lets the person choose to hear from you. The right route depends on how you obtained the contact, your actual offer, the recipient and the rules that apply.

If you use direct cold email, build the first pilot separately. Check buyer fit and contact eligibility, authenticate the actual sending domain, write one truthful subject and a message supported by your record, include the required commercial-email elements, monitor replies and honor stops. The first outreach pilot guide walks through those decisions. Its existence does not mean you should import the pilot list into Mailchimp or assume another vendor's terms allow it.

Mailchimp Transactional is not a shortcut here. Its own definition is a message prompted by purchase or account activity. An unrequested sales introduction does not meet that description merely because it is sent to one person. Keep message purpose, not tool name, at the center of the decision.

How do you use Mailchimp after permission is real?

Once a person has genuinely subscribed, Mailchimp can help deliver a relevant, consistent experience. Start with the audience and promise, not a generic blast:

1. Retain permission evidence. Store the form or event wording, date, source and the specific company the person expected to hear from. Check current subscription and suppression status before each campaign.
2. Create the right segment. Separate people who asked for RevOps workflow notes from people who subscribed for product release news. Mailchimp documents how to create and send to a segment; a tag is not a substitute for permission.
3. Send what was promised. Name the topic plainly, deliver a useful first message, identify the sender and give a visible way to stop. Test the rendered email, links, reply path and unsubscribe route before a wider send.
4. Learn from response quality. Track replies, useful clicks, unsubscribes and complaints in the context of what the audience asked for. Opens alone cannot tell you that a person wanted this message. Pause if the content or list no longer matches the original permission.

For the ten fictional subscribers above, a fitting first message could share a concise checklist for reviewing demo-request ownership and ask what part of the handoff they want covered next. The subject should describe that checklist, not imply a private process failure. A sales pitch to the eight organizer-list contacts would be a different message to a different audience with no Mailchimp permission. Do not combine the two just because they attended the same event.

The decision to make before your next send

Put the proposed recipient, the message's purpose and the sending tool on one line. If the person is a verified, current subscriber and the content matches the signup promise, a Mailchimp marketing campaign may fit. If the person is a non-subscribed customer, send only a genuine transaction-specific message through the appropriate route. If they opted out, do not send marketing. If they are an uninvited prospect or a third-party-list contact, keep them out of Mailchimp marketing and transactional workarounds.

At send time, ask: Can we show the contact source, current status and message purpose—and, for marketing, the permission—that justify this route? If a required piece is missing, hold the send and resolve that record first. Cold prospecting and permission-based marketing are two different jobs; choose the route that fits the facts of this contact and message.