Cold Email Australia: How to Run B2B Lead Generation Under the Spam Act

Running B2B cold email into Australia means working inside the Spam Act 2003, which is stricter than the US CAN-SPAM model: every commercial email needs a consent basis, clear sender details and an unsubscribe that works. On top of the law you are dealing with three main time zones, daylight saving that only some states observe, and a summer holiday season that lands in December and January. Koldify runs done-for-you cold email campaigns for companies that sell into Australia, and this page covers what we check before a single message goes out.

Is cold email legal in Australia?

Short answer: B2B cold email can be legal in Australia, but it is not a free-for-all. The Spam Act 2003 regulates "commercial electronic messages" (email, SMS, instant messages), and it is enforced by the Australian Communications and Media Authority (ACMA). This is not legal advice; if your offer or list is unusual, get an Australian lawyer to review it.

The Act rests on three rules. Every commercial email you send into Australia needs all three.

Inferred consent through conspicuous publication

This is the rule most B2B cold email into Australia relies on, so it is worth reading closely. Schedule 2 of the Act says consent can be inferred from the publication of an electronic address when the address has been conspicuously published, the publication is not accompanied by a statement that the person does not want to receive unsolicited commercial messages, and the message is relevant to the person's work-related business, functions or duties.

ACMA's own consumer guidance puts it plainly: if a person makes their email address public, you may send marketing messages relevant to their role or position. In practice that means:

• The address should be published somewhere a reasonable person would see it, such as a company website team page, a professional directory or a conference speaker list.
• Your offer must match the person's job. Pitching payroll software to a CFO whose address is on the company site fits; pitching the same thing to a published media contact does not.
• If the page where the address appears says "no unsolicited marketing", that address is off limits.

The weak spot is data from a B2B database. An address that a vendor guessed or derived from a naming pattern was not conspicuously published by anyone, so inferred consent on that basis is hard to argue. Our working rule is to keep a record of where each contact's address was published, and to treat unverifiable contacts as a reason to narrow the list, not a gap to ignore.

Harvested lists and the Australian link

Part 3 of the Spam Act prohibits supplying, acquiring or using address-harvesting software and harvested-address lists. Scraping addresses with a bot and blasting them is exactly what the law targets.

The Act also applies to messages with an "Australian link" (section 7), which includes messages sent to an address accessed in Australia. Sending from a US or UK server does not take you outside its reach.

Sender identification and unsubscribe

Every message needs accurate information about who sent it and how to contact them. ACMA's guidance says the unsubscribe method must be easy, free or low cost, and must not require the person to log in or give personal information beyond the address being unsubscribed; you should generally stop within 5 business days. The Spam Regulations 2021 made the login ban explicit after the Kogan case, where the retailer paid over $310,000 under an enforceable undertaking for unsubscribe flows that required a login (Ashurst).

The Privacy Act also matters

The Office of the Australian Information Commissioner (OAIC) says Australian Privacy Principle 7 (direct marketing) generally does not apply to email covered by the Spam Act. Other privacy principles still do.

The Privacy Act covers organizations with annual turnover above $3 million, plus some smaller businesses, including those that buy or sell personal information. If a recipient asks where you got their details, the OAIC says you should generally tell them within 30 days.

Enforcement is real

ACMA uses formal warnings, infringement notices, enforceable undertakings and court action.

In April 2026, Latitude Finance was ordered to pay a $3.96 million penalty after regulators found more than 2.7 million breaches, including messages with no accurate contact information and an unsubscribe that did not work (Broker News). Optus was fined $504,000 in 2020 for messaging customers who had opted out (Ashurst). Most of these cases involve big consumer brands, but the rules are identical for a five-person agency emailing ten CFOs.

Want a second opinion? If you are planning outbound into Australia and want someone to sanity-check your list, consent basis and footer before launch, book a 30-minute call with David at Koldify.

What's different about selling into Australia

Language and tone

Australian English uses British spelling (organisation, colour), and it is worth matching it in your copy. Practical advice, not a sourced rule: Australian buyers tend to respond better to plain, low-hype messages than to aggressive US-style urgency, so cut the exclamation marks and the "limited time" framing. Short first names in greetings are normal.

Decision makers

Titles largely follow the UK and US pattern: Managing Director (MD) is common where a US firm would say CEO or President, and many mid-sized companies have a General Manager running a business unit. In smaller firms, the MD often owns purchasing decisions directly. Build your title filters with both naming conventions.

Time zones and sending windows

Australia has three main standard time zones, and only some states shift for daylight saving (timeanddate):

Daylight saving starts on the first Sunday of October and ends on the first Sunday of April. Practical advice: schedule sends by the recipient's state so emails land in their local morning. For a US-based sender, an Australian business morning is the previous evening in North America, so set your tool to send in the recipient's time zone rather than yours.

Public holidays that affect outreach

National holidays include New Year's Day, Australia Day (January 26), Easter (Good Friday through Easter Monday), Anzac Day (April 25), Christmas Day and Boxing Day. Several are state-specific: King's Birthday is in June in most states but in September in Western Australia, Labour Day falls on different dates by state, and Victoria observes Melbourne Cup Day in early November (Tourism Australia).

Christmas and New Year fall in the Australian summer, so many offices run lean from late December into January. Practical advice: plan your heaviest sending for February to November, and avoid launching a new sequence the week before Christmas.

Data coverage

Apollo advertises 240M+ contacts and 30M+ accounts globally but does not publish a country-by-country breakdown, so we cannot give you an honest coverage figure for Australia. In practice we pull a sample list for your target segment, check how many contacts have verified emails, and adjust before committing. Apollo states its verified emails have a 91% accuracy rate; that is a global vendor claim, not an Australian figure.

LinkedIn and phone

LinkedIn is a useful second touch for checking that a contact is still in role. Phone outreach has its own rules: the Do Not Call Register Act and telemarketing standards are separate from the Spam Act, so do not assume email rules cover calls.

How we run cold email into Australia

Koldify's process is the same core process we run everywhere, with a few Australia-specific adjustments. You can read the general version on our cold email services page.

1. Infrastructure first. We own and operate our sending infrastructure and use separate sending domains, never your main domain. If you want the technical detail, see our guide to cold email infrastructure.
2. About three weeks of warmup. New inboxes warm for roughly three weeks before any campaign sends. Campaigns typically launch around week four.
3. List built with you. We build the target list with you and you approve it. For Australia, that includes recording the consent basis for each segment, which in most B2B campaigns means conspicuously published, role-relevant addresses.
4. Offer and copy approved by you. Copy is written in Australian English, with role-relevant messaging that supports the inferred consent argument, and every email carries a compliant identification and unsubscribe footer.
5. Sending windows by state. Sequences send in each recipient's local business hours, with holiday blackouts for national and major state holidays.
6. Replies go to you. Interested replies are routed to your team, who handle the conversation, booking and closing. Unsubscribe requests are processed well inside the 5-business-day window.
7. Month-to-month. No long-term contract.

We do not promise a number of meetings. Results depend on your offer, your market and your list.

Sample cold email for Australia

Subject: Month-end close at [Company]

Hi [First name],

Saw on the [Company] site that you head up finance for the [State] business.

We help [industry] firms in Australia cut month-end close from [X] days to [Y] by automating bank reconciliations in Xero and MYOB. [Similar customer] went from [result] in [timeframe].

Worth a 15-minute chat in the next couple of weeks to see if it fits your setup?

Cheers,
[Your name]
[Title], [Your company]

--
[Your company legal name], [Street address, City, Country]
[Phone] | [Website]
Don't want to hear from us? Reply "unsubscribe" or click here: [unsubscribe link]

Why the footer matters: section 17 requires accurate sender identification and contact details, and section 18 requires a functional unsubscribe. A one-click link that needs no login is the safest format.

Proof

Koldify's numbers come from koldify.io and are not specific to Australia: 10M+ cold emails sent, 50K+ leads generated, $10M+ in pipeline and $2M+ in revenue generated for clients. Client examples include Vidsec (160+ ready-to-buy leads in 2 months and $12,000+ closed), Black Stone Funding Group (120+ leads in 60 days) and Skrapper (140+ interested leads). Koldify's own outbound produced about 500 leads from about 250,000 sends in 3 weeks.

David Tile is a partner at Koldify. Nerdy Joe, Koldify's content site, is a certified Apollo.io Managed Services Partner and a PlusVibe Certified Silver Partner.

DIY instead?

If you would rather run Australian outbound yourself, a lean stack looks like this. Some tool links here are affiliate links (disclosure).

• Data: Apollo for prospect lists and email verification. Filter by Australian state, then spot-check that addresses are published on company sites.
• Sending: PlusVibe, Smartlead or Instantly for inbox rotation, warmup and recipient time zone scheduling.
• Checks: Run your copy through our spam word checker and keep a written record of your consent basis per segment.

Whichever tool you use, add a footer template with your legal name, address and unsubscribe link to every sequence so nobody on your team can forget it.

Ready to reach Australian buyers?

If you sell into Australia and want campaigns run on separate infrastructure, with copy and lists you approve and a footer that meets the Spam Act, book a call with David at Koldify. Selling into other markets too? See our guides for cold email in the UK and cold email in Canada, or talk through your plan with David.

Other markets we cover

• Cold email in United States
• Cold email in Canada
• Cold email in United Kingdom
• Cold email in Europe (EU)
• Cold email in Latin America
• Cold email in UAE
• Cold email in India
• Cold email in Singapore

How to set up a cold email campaign: the tools you'll need

Some tool links here are affiliate links (disclosure). Prices are as of October 2026.

1. Get your data (who you'll email). Build your list in Apollo by title, industry, company size and location, then export contacts with verified emails. Nerdy Joe is a certified Apollo Managed Services Partner.
2. Buy 2 to 3 sending domains. Never send cold email from your main domain. Use lookalikes (for example, getyourbrand.com). The simplest route is buying them inside your sending tool: Instantly sells done-for-you domains (about $15 a year), Smartlead sells them through SmartSenders, and PlusVibe offers a done-for-you setup. Before you buy, check whether domains bought in a tool can be moved out later; some Instantly users report they can't.
3. Create 2 to 3 inboxes per domain. Google Workspace or Microsoft 365 inboxes, not one big inbox. Instantly sells done-for-you Google inboxes (about $5 a month, or $10 pre-warmed), Smartlead sells pre-warmed Google and Outlook inboxes (about $9 a month), and PlusVibe can set them up for you. Done-for-you setups configure SPF, DKIM and DMARC for you.
4. Warm up for about 3 weeks. Warmup is built into Instantly, Smartlead and PlusVibe. Keep it running after launch.
5. Write and check your sequence. Three to five short emails. Run each one through our free Spam Word Checker.
6. Launch slowly. Start at about 20 to 30 emails per inbox per day in Instantly, Smartlead or PlusVibe, and watch bounces and replies. Use our Cold Email Cost Calculator to size domains, inboxes and spend.

Rather not run it yourself? Koldify, the done-for-you cold email agency where David Tile is a partner, builds and runs all of this on infrastructure it owns. Book a 30-minute call with David.

Sources

• Spam Act 2003 (Cth), Federal Register of Legislation: https://www.legislation.gov.au/C2004A01214/latest/text
• ACMA, Dealing with spam (rules for businesses, published addresses, 5 business days): https://www.acma.gov.au/what-is-spam
• Ashurst, ACMA goes ham on spam (Optus, Kogan, Spam Regulations 2021): https://www.ashurst.com/en/insights/acma-goes-ham-on-spam-is-your-business-in-breach-of-the-spam-act
• Broker News, Latitude hit with $3.96m spam penalty (April 16, 2026): https://www.brokernews.com.au/news/breaking-news/latitude-hit-with-3-96m-spam-penalty-for-repeat-breaches-289186.aspx
• OAIC, Direct marketing: https://www.oaic.gov.au/privacy/privacy-guidance-for-organisations-and-government-agencies/organisations/direct-marketing
• timeanddate, Australia's time zones: https://www.timeanddate.com/time/australia/time-zones-background.html
• Tourism Australia, Australian public holidays: https://www.australia.com/en-us/facts-and-planning/when-to-go/australian-public-holidays.html
• Apollo.io homepage (database size) and Apollo Knowledge Base, How Apollo Verifies Emails: https://www.apollo.io/ and https://knowledge.apollo.io/hc/en-us/articles/10826699994381-How-Apollo-Verifies-Emails
• Koldify (proof figures): https://koldify.io