Yes, test it before every send. Click the unsubscribe link in a real test message and check that it removes the address in one step. A broken opt-out used to be an embarrassing mistake. Since 2024 it also hurts deliverability: Gmail and Yahoo now require bulk senders to support one-click unsubscribe and to honor requests within two days, and the US CAN-SPAM Act still requires a working opt-out on every commercial email.
The rule of thumb
Before you send any email, make sure your unsubscribe link works. It sounds obvious, but many senders skip this check. The problem usually comes from a template change, an expired landing page or a partner who built the email.
Today one-click unsubscribe also lives in the message headers. Gmail, Yahoo Mail and Apple Mail show their own unsubscribe button next to the sender name, using the List-Unsubscribe header. That means you need to test two paths: the link in the footer of the email, and the header your ESP adds for the mailbox provider’s button.
An example of an unsubscribe failure
The case below comes from an older campaign, but the same failure still happens on new sends.
A promotional email from Full Sail University went out with information about its entertainment business degrees. For a reader who wasn’t interested, the obvious next step was to click the large, clearly visible “unsubscribe” link. Instead of a confirmation, the click led to this page:
The unsubscribe failed, and the reader had no other way to opt out from the email.
Who was responsible
The broken link may not have been entirely Full Sail’s fault. The other links in the email carried campaign tags from Google’s Campaign URL Builder, with the source set to “PasteMagazineContest”. That points to an email built and managed by Paste Magazine as part of a partner promotion.
Both parties still got it wrong. The publisher sent an email it had not tested, and the advertiser let its name go out on a message without a working opt-out. The FTC’s CAN-SPAM compliance guide speaks to this situation directly: the company whose product is promoted and the company that actually sends the message can both be held legally responsible. You can’t hand off compliance just because a partner sends the email.
What the advertiser should have done
The fix was to get the link working immediately, before the broken page led to spam complaints or a legal problem. In practice, a sender in this position should:
- Repair the unsubscribe page or replace it with a working one.
- Collect every opt-out request that came in during the outage, including replies asking to be removed, and suppress those addresses.
- Ask the partner for its suppression list and agree in writing on who processes opt-outs.
- Hold any further partner sends until a test message passes.
The legal stakes are real. Under CAN-SPAM, opt-out requests must be honored within 10 business days, and the opt-out mechanism must keep working for at least 30 days after the message is sent. The maximum civil penalty is $53,088 per violating email. That is the 2025 level, and a 2026 Federal Register notice confirmed the FTC kept it unchanged for 2026. Individuals generally can’t sue under CAN-SPAM. The risk comes from the FTC, state attorneys general and internet service providers.
Today the deliverability cost often shows up first. A reader who can’t unsubscribe clicks “Report spam” instead. Google asks senders to keep their spam rate, as reported in Postmaster Tools, below 0.1% and never let it reach 0.3%.
What changed since this example
The rules around unsubscribing are much stricter than when this campaign went out.
| Rule | Who sets it | In force since | What it requires |
|---|---|---|---|
| Working opt-out in every commercial email | FTC (CAN-SPAM Act) | 2004 | Clear opt-out, honored within 10 business days, working for 30 days after sending |
| One-click unsubscribe (RFC 8058) | Gmail | June 1, 2024 | Bulk senders (about 5,000+ messages a day to personal Gmail accounts) support one-click unsubscribe in marketing mail and honor it within 2 days |
| One-click unsubscribe | Yahoo Mail | June 2024 | List-Unsubscribe and List-Unsubscribe-Post headers, requests honored within 2 days |
| Authentication for high-volume senders | Microsoft Outlook.com | May 5, 2025 | SPF, DKIM and DMARC for domains sending over 5,000 messages a day; a visible, working unsubscribe link is on its best-practice list |
| Manage subscriptions view | Gmail | July 2025 | Users can see senders listed by how often they send and unsubscribe from each one in a click |
The one-click requirement works through two headers. Most ESPs add them automatically. You can check them under “Show original” in Gmail:
List-Unsubscribe: <https://example.com/unsubscribe?id=abc123>, <mailto:[email protected]?subject=unsubscribe>
List-Unsubscribe-Post: List-Unsubscribe=One-Click
When the reader taps the button, the mailbox provider sends an HTTPS POST to that URL. Your endpoint has to process it without a login, a confirmation screen or a survey. Your DKIM signature should cover both headers.
How to test an unsubscribe link before you send
A full test takes about five minutes. Run it on every new template and every partner send:
- Send the final version to a seed address at Gmail, Yahoo and Outlook.com.
- Click the footer link. It should remove the address in one step, or after a single confirmation, with no login.
- In Gmail, open “Show original” and confirm both
List-Unsubscribeheaders are present. - Use the unsubscribe button Gmail or Yahoo shows next to the sender name, then check that your ESP marks the contact as unsubscribed.
- Send the campaign again to that seed address and confirm nothing arrives.
- If a partner sends on your behalf, ask for a test message and run steps 1 to 5 yourself.
FAQ
Does CAN-SPAM require a one-click unsubscribe?
No. CAN-SPAM only requires a clear opt-out that you honor within 10 business days. It does say you can’t charge a fee, ask for anything beyond an email address and opt-out preferences, or make people visit more than one page. One-click unsubscribe is a Gmail and Yahoo requirement for bulk senders, and in practice most marketing programs now have to meet it.
How fast do I have to process unsubscribes?
The law gives you 10 business days. Gmail and Yahoo expect bulk senders to stop mailing within 2 days. Aim for immediate suppression, which most ESPs handle automatically.
Can I send people to a preference center instead of unsubscribing them?
You can offer one, but it can’t replace the one-click option. Google’s guidance treats preference centers as an extra, and the header unsubscribe still has to remove the address in a single action. Put the preference link next to the unsubscribe link, not in its place.
Do transactional emails need an unsubscribe link?
Password resets, receipts and order confirmations don’t need one under Google’s one-click rule or CAN-SPAM, as long as they really are transactional. Once you add promotional content, the message can count as commercial and the opt-out rules apply.
Who is liable when a partner sends my promotion?
Under the FTC’s guidance, both the advertiser and the sender can be held responsible. Agree on who handles opt-outs, share suppression lists before every send, and test the partner’s email yourself.
What happens if my unsubscribe link breaks after a campaign goes out?
Fix it right away, then collect opt-out requests from every other channel (replies, spam complaints, support tickets) and suppress those addresses. CAN-SPAM requires the mechanism to keep working for at least 30 days after the send, so a page that breaks a week later is still a compliance problem.
Sources
- Google: Email sender guidelines
- Google: Declutter your inbox with Gmail’s newest feature
- Yahoo Sender Hub: Sender best practices
- FTC: CAN-SPAM Act, a compliance guide for business
- Federal Register: FTC civil penalty amounts for 2026
- IETF RFC 8058: Signaling one-click functionality for list email headers