How to Buy an Email List, and What It Really Costs

Every quarter, someone on a sales team types "buy email list" into Google because the pipeline is thin and a spreadsheet of ten thousand contacts looks like the fastest way to fix it. The offer is genuinely tempting: a file lands in your inbox tomorrow morning, and Monday you are sending.

The question worth asking is not whether you can buy a list. You can, easily, and it is legal in most B2B contexts. The question is what a bought contact actually costs you once the rows that are wrong, stale, or simply not your buyer have been subtracted. That number is almost never the one on the invoice, and it is the number this guide teaches you to calculate before you sign anything.

How to buy an email list, and what you actually get

A purchased email list is a static export. Someone compiled contact records at some point in the past, from public sources, from form fills, from partner data sharing, or from other compiled files, and they are selling you a copy of that snapshot. Two words in that sentence carry all the risk: static and copy.

Static means the file stops being true the moment it is generated. Nobody updates your copy when a contact changes job. Copy means the seller keeps the original and can sell it again, so the reply rate you get depends partly on how many other senders reached the same inbox before you.

You are also buying a mix of two very different things. Some rows carry a named person at a company, which is what you want. Others carry a generic catch-all such as info@ or contact@, which behaves nothing like a personal address. If you have never had to separate the two, our breakdown of the difference between a generic and a named company email address explains why they cannot be worked the same way.

The four gaps between a thousand rows and a thousand usable contacts

The invoice counts rows. Your campaign only counts contacts who are the right person, at the right company, reachable at the address on file. Four separate gaps sit between those two numbers, and they multiply rather than add.

Gap 1: persona fit

A file sold as "SaaS decision makers in the US" is filtered on job title strings and firmographic buckets, not on your actual ideal customer profile. In practice, a meaningful share of the rows will be the right title at a company that is too small, too large, in the wrong segment, or already a customer. This is the gap you control best, because it is decided by how tightly you brief the filter before you buy.

Gap 2: accuracy

Accuracy is the share of rows where the email on file actually belongs to that person and still resolves. Published provider accuracy varies widely, and our 2026 benchmark of B2B data providers gathers the independent tests, which land phone-data accuracy roughly between 63 and 91 percent depending on the provider, against the 85 to 95 percent vendors advertise. A file sold as verified is not the same as a file verified this week.

Gap 3: decay

B2B contact data goes stale on a clock. Our B2B data decay benchmark puts the canonical rate at roughly 2.1 percent per month, driven mostly by job changes. The decisive variable is therefore not the seller's quality claim but the age of the file. A list compiled six months ago has lost around an eighth of its validity before you ever open it, and nobody tells you the compile date unless you ask for it in writing.

Gap 4: deliverability

Even a correct, current address can be unreachable: the domain is a catch-all that accepts everything and delivers nothing useful, the mailbox is a filtered alias, or the address sits behind a gateway that rejects unknown senders. Running a purchased file through a bounce check before the first send is not optional, and it routinely removes more rows than buyers expect.

The arithmetic: what a bought contact really costs

Here is the calculation to run before you buy anything. Take the quoted price, then multiply the row count by each survival rate in turn. The formula is simple, and the result is usually sobering.

Usable contacts = rows × persona fit × accuracy × (1 − decay since compile) × deliverability

Worked example on a file of 1,000 rows quoted at 300 euros. The percentages below are assumptions you should replace with the seller's own written answers, not figures to take on faith.

The 0.30 euro contact costs 0.79 euro. That is not a scandal, it is arithmetic, and a 0.79 euro contact can still be a fine deal if the deal size justifies it. What matters is that you priced it correctly instead of budgeting on the invoice line.

Now price the same 381 usable addresses when you build them. With Derrick, the Email Finder costs 5 credits per email and is billed per result found, and Email Verification costs 1 credit per email. Six credits per confirmed address, at 4,000 credits for 9 euros on the MINI plan, works out to roughly 0.0135 euro per verified address. The honest caveat, and it matters: you supply the target rows yourself, from your CRM, an export, or a company list you already own. The credits pay for the enrichment, not for the targeting. When the targeting is the part you already have, building is not marginally cheaper, it is a different order of magnitude.

The structural difference is the billing model. A purchased file charges you for every row including the dead ones. A per-result-found model charges you only when an address comes back. You never pay for a miss.

Is it legal to buy an email list in 2026?

Buying is generally legal. Sending is where the rules bite, and they differ by the recipient's location, not yours.

In the United States, CAN-SPAM permits cold B2B email without prior consent, provided you use accurate header and sender information, a non-deceptive subject line, a physical postal address, and a working opt-out that you honor promptly across your organization.

In the European Union and the United Kingdom, GDPR governs the personal data in the file and PECR governs the electronic message. Corporate addresses can be contacted under legitimate interest, but that basis has conditions you must be able to evidence: a genuine business relevance, a balancing test on file, a clear notice of where you obtained the data, and an immediate route to object. The awkward part with a purchased list is provenance. If you cannot document the original lawful source of each record, you cannot honestly answer the first question a data protection authority will ask, and "we bought it" is not an answer.

In Canada, CASL is materially stricter and generally requires express or clearly established implied consent, which a bought file rarely provides.

The practical consequence: a purchased list is easiest to defend for a US-only campaign, hardest for a Canadian one, and workable in Europe only if the seller will document provenance per record in writing.

What a purchased list does to your sending domain

The bill for a bad list is not paid by the campaign. It is paid by every future email your company sends.

Mailbox providers score sending domains on bounce rate, spam complaints, and engagement. A file with an unverified fraction sends a burst of hard bounces on day one, which is the single loudest negative signal a new sender can produce. Once the domain is throttled, the emails that suffer are your renewals, your product notifications, and the outreach from colleagues who had nothing to do with the purchase.

Three habits contain the damage. Send cold outreach from a separate domain, never the one carrying your transactional mail. Verify the entire file before the first send rather than letting the campaign discover the dead rows for you, which is exactly what verification at the point of use is designed to prevent. And ramp volume gradually instead of pushing the whole list out on Monday morning. Our 2026 cold email benchmarks give you the bounce and reply bands to hold yourself to.

How to buy an email list, or build one instead: the decision framework

Neither answer is universally right. The variable that decides it is whether you already know who you want to reach.

Building the same list yourself, one column at a time

Building sounds slower than buying until you see it as column work rather than research. You start from a spreadsheet of target accounts and add one column at a time, each filled by an enrichment rather than by a person.

1. Start from accounts, not contacts. A company list is far easier to assemble accurately than a contact list, because company facts are stable and public in a way that personal emails are not.
2. Resolve the person. For each account, identify who actually holds the seat you sell to. This is the step a purchased file gets wrong most often, and the step that decides everything downstream.
3. Find the address. The Email Finder returns the professional email from the person and their company, at 5 credits per email, billed only when a result comes back.
4. Verify before it enters the sequence. Email Verification confirms deliverability at 1 credit per email, which is the cheapest insurance in the entire workflow.
5. Deduplicate. Find Duplicates is unlimited and available on every plan, including the free one. Sending the same person two sequences is a self-inflicted wound.

Derrick runs this as a sidebar inside Google Sheets, so the list stays in the spreadsheet your team already works in, whether that is 40 rows for a founder-led push or 40,000 for a full segment. Our guide to finding a prospect's email from a name and a company covers the method in detail.

How to buy an email list you can test before paying in full

If you still want to buy, never buy the whole file first. Ask for a sample of 100 rows drawn at random from the segment you intend to purchase, not hand-picked, and run four checks on it.

Check the compile date. Ask in writing when each record was last verified, not when the database was last updated. Those are different claims and sellers often blur them.

Check accuracy independently. Verify all 100 addresses yourself. Whatever pass rate you get on the sample is the ceiling for the full file, not the average.

Check persona fit by hand. Open 20 rows and ask whether you would genuinely put each one into a sequence. This is tedious and it is the check that saves the most money.

Check for catch-alls and generics. Count how many rows are role addresses rather than named people. A file that is a third generic addresses is a directory, not a prospect list.

Then apply the arithmetic above to the sample results and compare the cost per usable contact against building. Do that once and the decision stops being a matter of opinion.

What to measure after the first send

Whichever route you take, judge the list on outcomes rather than on size. Track hard bounce rate on the first send, since anything meaningfully above a couple of percent means the file was not verified. Track reply rate against your own historical baseline rather than against a vendor's marketing claim. Track the share of replies that are actually in-segment, because a list can deliver perfectly and still be reaching the wrong people. And track cost per positive reply, which is the only figure that lets you compare a bought list and a built one on equal terms.

Feeding clean, verified data into a properly structured sales email sequence is what turns a list into pipeline. A list is an input, never a result.