Cold Email Latin America: B2B Lead Generation in Brazil, Mexico and Beyond

Running B2B cold email into Latin America means handling five or more legal regimes, two main languages and a business culture where WhatsApp often replaces the follow-up call. Brazil and Mexico are the biggest markets, and both have changed their privacy rules recently: Brazil's regulator issued legitimate interest guidance in 2024, and Mexico replaced its data protection law in 2025. Koldify runs done-for-you cold email campaigns for companies selling into Latin America, and this page covers what we check before launch.

Is cold email legal in Latin America?

There is no single answer, because each country has its own law. Below is a plain summary of the five largest B2B markets. This is not legal advice, and two of these regimes changed in the last two years, so confirm the current position with local counsel before a large campaign.

Brazil: LGPD and the ANPD

Brazil does not have a CAN-SPAM-style statute for email. What applies is the Lei Geral de Proteção de Dados (LGPD), because a named work address such as maria.silva@empresa.com.br is personal data. The national authority, the ANPD, published its guide on legitimate interest ("Guia Orientativo: Legítimo Interesse") on February 2, 2024 (Mattos Filho).

The guide sets out a three-phase test: a legitimate purpose, necessity (process only the minimum data needed) and balancing with safeguards. The ANPD says controllers may document the analysis, and it puts weight on transparency. For cold email that translates to:

• Target people whose role matches your offer, and collect only what you need (name, title, company, work email).
• Write down your balancing analysis before you launch.
• Tell recipients who you are, how you got their data and how to object, and honor objections promptly.

Fines under LGPD Article 52 can reach 2% of the company's revenue in Brazil in its last fiscal year, capped at R$50 million per infraction. Brazil also has a 2009 industry self-regulation code for email marketing (CAPEM), created with the involvement of the Brazilian Internet Steering Committee; it is self-regulation, not law (Baguete).

Mexico: the 2025 data protection law

Mexico approved a new Federal Law on the Protection of Personal Data Held by Private Parties on March 20, 2025, and it took effect on March 21, 2025, replacing the 2010 law (Hunton Andrews Kurth). Two changes matter most for outbound:

• New regulator. The INAI, which used to enforce data protection, was dissolved. Oversight moved to the Secretariat of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno), and Pandectes reports INAI ceased to exist on May 9, 2025.
• Privacy notices. The law sets out a simplified notice and a comprehensive notice, both in plain language (Pandectes). Hunton describes the requirements as stricter than before.

Implementing regulations were expected after the law took effect, and some details may still be settling. Our approach for Mexico: link a Spanish-language privacy notice in the footer, explain the data source on request, and treat any opposition request as final.

Colombia, Chile and Argentina at a high level

Colombia. Statutory Law 1581 of 2012 requires prior, express and informed authorization for processing personal data, and the SIC enforces it with fines of up to 2,000 monthly minimum wages (ConsentStack). Colombia is the most consent-heavy of the five markets here, so we plan Colombian campaigns conservatively: tight role relevance, a clear privacy notice and immediate removal on request. If the campaign is large, get a Colombian lawyer's view on your legal basis first.

Chile. Law 21,719, published December 13, 2024, substantially amends Chile's 1999 data law (Law 19,628) and takes full effect on December 1, 2026 (BigID, Clyde & Co). It creates a Personal Data Protection Agency and includes legitimate interest as a basis for processing, subject to the individual's rights not overriding it. If you are planning Chilean campaigns for 2027, plan for the new regime.

Argentina. Disposición 4/2009 of the national data protection authority requires every marketing communication to include a notice of the right to request removal and the mechanism for doing it. Unsolicited marketing emails must also be identified as advertising, with the single word "publicidad" in the subject line, and senders must make sure their opt-out process can handle the volume of requests.

Want a second opinion? If you are planning outbound into Brazil, Mexico or other LATAM markets and want a second set of eyes on your list, legal basis and footer, book a 30-minute call with David at Koldify.

What's different about selling into Latin America

Spanish vs Portuguese copy

Brazil speaks Portuguese; most of the rest of the region speaks Spanish. Sending Spanish copy to a Brazilian buyer, or a machine translation that mixes the two, signals that you do not understand the market. Practical advice: write Brazilian Portuguese for Brazil (not European Portuguese), and adapt Spanish by country where your offer depends on local terms, such as tax or payroll vocabulary.

Only send in a language your team can reply in. A prospect who answers in Portuguese and gets an English reply is unlikely to book.

Tone and titles

Practical advice, not a sourced rule: relationship building matters, and a slightly warmer opening than a terse US email tends to read better, while still getting to the point in a few lines. Common senior titles include Director General or CEO, Diretor (Brazil) and Gerente (manager level in Spanish-speaking markets). In family-owned mid-market firms, the owner often signs off on purchases, so include owner and founder titles in your filters.

WhatsApp norms

WhatsApp is central to business communication in Brazil. Forbes Brasil, citing Statista, reports 147 million monthly users there, and cites WhatsApp's Brazil lead saying 60% of large companies use WhatsApp Business.

That does not make WhatsApp a cold channel. Meta's developer documentation states that businesses are required to obtain opt-in before messaging people on WhatsApp. Our practice: use email for the first touch, offer WhatsApp as an option in the reply ("happy to continue on WhatsApp if easier"), and let the prospect choose.

Time zones

Brasília time is UTC-3, and Brazil has not used daylight saving time since 2019 (timeanddate).

Mexico abolished daylight saving time in 2022 for most of the country, with exceptions along the US border (timeanddate), so central Mexico stays on UTC-6 all year. Colombia (UTC-5), Chile and Argentina add more offsets. Practical advice: schedule sends by recipient country, not one regional window.

Data coverage

Apollo advertises 240M+ contacts globally but does not publish a breakdown by Latin American country. A competitor's April 2026 review (SyncGTM) describes Apollo's coverage of São Paulo enterprise and tech companies as solid, comparable in Mexico City and Monterrey, and thinner in Colombia, Argentina and Chile; that is a vendor's unverified opinion, not a measurement.

We always pull a sample, check the verified email rate for your exact segment and adjust the plan before any volume goes out.

How we run cold email into Latin America

Koldify's core process is the same everywhere; see cold email services for the general version. For LATAM we add language and compliance steps.

1. Our infrastructure, separate domains. We own and operate our sending infrastructure and never send from your main domain. The setup is covered in our cold email infrastructure guide.
2. About three weeks of warmup. Inboxes warm for roughly three weeks, and campaigns typically launch around week four.
3. Country-by-country lists. We build lists with you, split by country so each segment gets the right language, legal footer and send window. You approve every list.
4. Copy in the buyer's language. Offer and copy are agreed with you and approved before launch, in Portuguese for Brazil and Spanish elsewhere, provided your team can handle replies in that language.
5. Country-specific footers. Privacy notice link and objection method for Brazil and Mexico, "publicidad" in the subject and the removal notice for Argentina.
6. Replies routed to you. Your team handles conversations, booking and closing, including moving interested prospects to WhatsApp when they ask.
7. Month-to-month. No long-term contract.

We do not promise results. Outcomes depend on your offer, your market fit and the data available for your segment.

Sample cold email for Mexico (Spanish)

Subject: Cobranza en [Empresa]

Hola [Nombre],

Vi que lidera finanzas en [Empresa] en [Ciudad].

Ayudamos a empresas de [industria] en México a reducir los días de cobranza de [X] a [Y] automatizando recordatorios y conciliaciones. [Cliente similar] logró [resultado] en [plazo].

¿Le interesa una llamada de 15 minutos la próxima semana para ver si aplica a su operación?

Saludos,
[Su nombre]
[Cargo], [Su empresa]

--
[Razón social], [Dirección, Ciudad, País]
Aviso de privacidad: [enlace]
Si no desea recibir más correos, responda "baja" o haga clic aquí: [enlace]

For Brazil, write the same email in Brazilian Portuguese and include a short privacy note explaining how you obtained the contact and how to object. For Argentina, the subject line must include "publicidad" and the footer must explain the right to request removal and how to do it.

Proof

These Koldify figures come from koldify.io and are not specific to Latin America: 10M+ cold emails sent, 50K+ leads generated, $10M+ in pipeline and $2M+ in revenue generated for clients. Client results include Vidsec (160+ ready-to-buy leads in 2 months and $12,000+ closed), Black Stone Funding Group (120+ leads in 60 days) and Skrapper (140+ interested leads). Koldify's own outbound produced about 500 leads from about 250,000 sends in 3 weeks.

David Tile is a partner at Koldify. Nerdy Joe is a certified Apollo.io Managed Services Partner and a PlusVibe Certified Silver Partner.

DIY instead?

You can run LATAM outbound yourself with a small stack. Some tool links here are affiliate links (disclosure).

• Data: Apollo for contacts. Filter by country, check the verified email rate on a sample, and keep Brazil and Spanish-speaking segments in separate lists.
• Sending: Smartlead, Instantly or PlusVibe for warmup, inbox rotation and per-recipient time zones.
• Cost check: Use our cold email cost calculator to compare the DIY stack against hiring help.

Build one sequence per language and per legal footer. A single "LATAM" sequence is the most common shortcut and the one most likely to break a local rule.

Ready to reach buyers in Latin America?

If you sell into Brazil, Mexico or the wider region and want campaigns run on separate infrastructure, in the right language, with footers built for each country, book a call with David at Koldify. Also selling into the US or Europe? See our guides to cold email in the USA and cold email in Europe, or talk through your plan with David.

Other markets we cover

• Cold email in United States
• Cold email in Canada
• Cold email in United Kingdom
• Cold email in Europe (EU)
• Cold email in Australia
• Cold email in UAE
• Cold email in India
• Cold email in Singapore

How to set up a cold email campaign: the tools you'll need

Some tool links here are affiliate links (disclosure). Prices are as of October 2026.

1. Get your data (who you'll email). Build your list in Apollo by title, industry, company size and location, then export contacts with verified emails. Nerdy Joe is a certified Apollo Managed Services Partner.
2. Buy 2 to 3 sending domains. Never send cold email from your main domain. Use lookalikes (for example, getyourbrand.com). The simplest route is buying them inside your sending tool: Instantly sells done-for-you domains (about $15 a year), Smartlead sells them through SmartSenders, and PlusVibe offers a done-for-you setup. Before you buy, check whether domains bought in a tool can be moved out later; some Instantly users report they can't.
3. Create 2 to 3 inboxes per domain. Google Workspace or Microsoft 365 inboxes, not one big inbox. Instantly sells done-for-you Google inboxes (about $5 a month, or $10 pre-warmed), Smartlead sells pre-warmed Google and Outlook inboxes (about $9 a month), and PlusVibe can set them up for you. Done-for-you setups configure SPF, DKIM and DMARC for you.
4. Warm up for about 3 weeks. Warmup is built into Instantly, Smartlead and PlusVibe. Keep it running after launch.
5. Write and check your sequence. Three to five short emails. Run each one through our free Spam Word Checker.
6. Launch slowly. Start at about 20 to 30 emails per inbox per day in Instantly, Smartlead or PlusVibe, and watch bounces and replies. Use our Cold Email Cost Calculator to size domains, inboxes and spend.

Rather not run it yourself? Koldify, the done-for-you cold email agency where David Tile is a partner, builds and runs all of this on infrastructure it owns. Book a 30-minute call with David.

Sources

• Mattos Filho, ANPD publishes guidance on legitimate interest (February 2, 2024 guide): https://www.mattosfilho.com.br/unico/anpd-legitimo-interesse-lgpd/
• LGPD Article 52 (English text): https://lgpd-brazil.info/chapter_08/article_52
• Baguete, CAPEM email marketing self-regulation (2009): https://www.baguete.com.br/noticias/e-mail-marketing-regulamentacao-e-oficial
• Hunton Andrews Kurth, Mexico overhauls federal data protection law (April 21, 2025): https://hunton.com/privacy-and-information-security-law/mexico-overhauls-federal-data-protection-law
• Pandectes, Mexico implements new data protection framework (June 2, 2025): https://pandectes.io/blog/mexico-implements-new-data-protection-framework/
• ConsentStack, Colombia Law 1581: https://www.consentstack.io/regulations/co-law1581
• BigID, Chile's new data privacy law 21,719: https://bigid.com/blog/chile-new-data-privacy-law-21-719/
• Clyde & Co, Chile's new data protection and cybersecurity legislation (February 2025): https://www.clydeco.com/en/insights/2025/02/chile-new-data-protection-cybersec-legislation
• Argentina, Disposición 4/2009 (Boletín Oficial): https://www.argentina.gob.ar/normativa/nacional/norma-151221/texto
• Forbes Brasil, WhatsApp in Brazil (May 2025): https://forbes.com.br/forbes-tech/2025/05/o-que-fez-do-whatsapp-um-fenomeno-das-mensagens-o-brasil-e-a-respost/
• Meta for Developers, Get opt-in for WhatsApp: https://developers.facebook.com/documentation/business-messaging/whatsapp/getting-opt-in
• timeanddate, Brazil won't change clocks in 2019: https://www.timeanddate.com/news/time/brazil-scraps-dst.html
• timeanddate, Mexico abolishes DST: https://timeanddate.com/news/time/mexico-abolishes-dst-2022.html
• SyncGTM, Best B2B databases for Latin America (April 19, 2026): https://syncgtm.com/blog/best-b2b-database-latin-america
• Apollo.io homepage (database size): https://www.apollo.io/
• Koldify (proof figures): https://koldify.io