How Fast Must You Honour Unsubscribe Requests?

If you send marketing or outreach email, how fast must you process unsubscribe requests is not one answer — it is two. One deadline comes from US law, the CAN-SPAM Act. The other comes from the mailbox providers, Gmail and Yahoo, and it is shorter. Most guides quote a single number and miss the other, which is exactly how senders get the timing wrong.

This guide separates the two, cites each source, and shows how to honour an opt-out so you satisfy both at once. It is written for the person doing the sending — a founder, a marketer, a small team — and it is general information, not legal advice.

Two deadlines, not one number#

The short version: the law gives you more time than the mailbox providers do. Treat them as two separate clocks that both start when someone asks to leave, then work to the tighter one.

• The legal deadline (CAN-SPAM, United States): you must stop sending to a person within 10 business days of their opt-out request. This is set in the statute, 15 U.S.C. 7704(a)(4), and it is the floor, not the target.
• The provider deadline (Gmail and Yahoo): their bulk-sender rules say to honour unsubscribes within about 2 days. Yahoo's Sender Hub states it directly; Google's guidelines say to fulfil requests within 48 hours. Miss it and you lose delivery support, not just goodwill.
• The safe rule: process every opt-out within 2 days. Doing that keeps you inside the 10-business-day legal window automatically and inside the providers' expectation at the same time.

The gap between the two numbers is where the damage happens#

So the honest answer to how fast is: legally, up to 10 business days; practically, within 2. A message sent on day three can still be lawful under CAN-SPAM and already be hurting you with Gmail.

That is the whole reason the two clocks matter. The legal risk is a fine that may never arrive. The deliverability risk shows up on your next campaign, for every recipient, and it arrives immediately. Working to the 2-day number is how you stay clear of both.

Before you start: work out which clock binds you#

Both deadlines can apply to the same send, but they are triggered differently. Before you set a processing target, figure out which rules you are actually under.

• Are you a bulk sender? Google and Yahoo apply their strictest requirements — including the unsubscribe rules — to senders of roughly 5,000 or more messages a day to personal Gmail or Yahoo accounts. Google counts this per primary domain, aggregating subdomains, and treats bulk status as permanent once you cross it. Check the current thresholds on each provider's page; figures as of August 2026.
• Is the mail marketing or transactional? One-click unsubscribe (RFC 8058) and the unsubscribe rules apply to marketing and promotional mail. A genuinely transactional message — a receipt, a password reset, a shipping notice — is treated differently.
• Who is the recipient? CAN-SPAM governs commercial email to US recipients. Other countries have their own laws, and some — such as Canada's CASL — are stricter on consent. This guide covers the US legal layer and the mailbox-provider layer that sits on top of it everywhere.

How to honour an unsubscribe request, step by step#

The mechanics are simple; the discipline is in doing them fast and across every channel. Follow this order.

1. 1

   Capture the request wherever it lands

   An opt-out is not only a click on your unsubscribe link. It can arrive as a plain reply — 'please remove me', 'stop', 'unsubscribe' — sent straight to your inbox. Both are valid requests, and you have to honour both. Collect them from every source into one place.

2. 2

   Add the address to a suppression list immediately

   A suppression list is the record of people you must never email again. Adding the address the moment the request arrives — not at the next campaign — is what keeps you inside the window. Suppression means 'do not send', and it has to persist, which is different from just deleting a contact.

3. 3

   Stop sending within 2 days

   Work to the provider deadline, not the legal one. Removing the address within 48 hours satisfies Gmail and Yahoo and clears the 10-business-day CAN-SPAM requirement with room to spare. A processing target of two days is the practical unsubscribe SLA to hold yourself to.

4. 4

   Keep the opt-out mechanism working for at least 30 days

   CAN-SPAM requires that your unsubscribe method stays functional for no less than 30 days after you send the message (15 U.S.C. 7704(a)(3)). A link that expires or 404s the week after a send is a violation even if you never email the person again.

5. 5

   Do not make leaving hard

   The FTC's compliance guide states you can't charge a fee, or require the recipient to give more than an email address, to opt out. Extra login walls, surveys or 'sign in to manage preferences' steps are the pattern that turns an unsubscribe into a spam complaint instead.

6. 6

   Log the request and the date

   Record who opted out, from which channel, and when you actioned it. If a regulator or a mailbox provider asks, the burden of showing you honoured the request on time sits with you, not with them.

CAN-SPAM vs the mailbox providers, at a glance#

The table is the fast reference. The left column is US law; the right is provider policy. They are not the same kind of rule — one can fine you, the other can stop your mail being delivered — and you have to satisfy both. Figures are current as of August 2026; confirm them at each linked source.

What happens if you email someone after they unsubscribe#

Two things go wrong, one legal and one practical. Legally, sending to someone more than 10 business days after they opted out is a CAN-SPAM violation, and the Act is enforced per email. The FTC's inflation-adjusted maximum was $53,088 per violating message as of 2025, so a single bad send to a large list is not a rounding error.

Practically, the faster harm is to deliverability. Someone who asked to leave and hears from you again is likely to press 'report spam' rather than unsubscribe a second time. That complaint counts against you: Google asks bulk senders to keep the spam-complaint rate under 0.1% and never at or above 0.3%, and once you are flagged, delivery support and mitigations can become unavailable until you fix it.

In short, the legal risk is a fine that may never come; the deliverability risk is your next campaign landing in spam for everyone on the list, and that one is immediate.

What to do when the opt-out still doesn't stick#

If people keep receiving mail after they unsubscribed, the failure is almost always one of these. Check them before you blame the tool.

• Replies that never reached the list: someone replied 'unsubscribe' to your inbox instead of clicking the link, and nobody moved them to the suppression list. Manual opt-outs are the most-missed kind and the most common source of a late one.
• Multiple lists or tools: the address was suppressed in one system but is still active in another — a second ESP, a CRM sequence, a cold-email tool. Suppression has to be synced across every system that can send.
• Subdomains and sending domains: switching sending domains can leave a stale copy of the list active. Google counts bulk status per primary domain, so moving to a subdomain does not reset your unsubscribe obligations either.
• A re-import from a stale file: uploading an old CSV can quietly re-add people who opted out months ago. Always suppress against your master list; never overwrite it with a fresh export.

A faster way: catch the opt-outs that arrive as replies#

The automated part of this — the unsubscribe link, the suppression list, the sending — belongs to your email service provider or cold-email tool, and no mail client replaces that. AI Emaily is a mail client, not an ESP or sending platform: it will not run your campaigns, hold your suppression list, or process List-Unsubscribe headers for you.

Where a client genuinely helps is the opt-out that arrives as a human reply. 'Please take me off your list' lands in your inbox, not your ESP, and it is the request most likely to be missed and to go late. AI Emaily's triage surfaces those replies instead of letting them sink under everything else, so you can suppress the address inside the 2-day window. The rest still lives in your ESP. We build AI Emaily; see how it works or start a 7-day free trial — there is no permanent free tier.