Two Different Federal Laws, Two Different Risk Profiles
Merchant services outreach runs almost entirely on phone calls and door-to-door contact, and the compliance conversation in this niche runs almost entirely on TCPA, the federal law governing calls and text messages. Email is a different channel governed by a different law entirely: the CAN-SPAM Act, which does not require a recipient’s prior consent before a first commercial email the way TCPA does for calls and texts. That distinction is worth naming explicitly, because the two channels are not interchangeable from a compliance standpoint, even though they are often lumped together as “cold outreach.”
What CAN-SPAM Requires
The CAN-SPAM Act has been in effect since January 1, 2004, and its core requirements are narrower than many agents assume. A commercial email must include a functioning opt-out mechanism, and opt-out requests have to be honored within 10 business days. The message cannot contain materially false or misleading header or routing information, the sender has to clearly identify the message as an advertisement, and a valid physical postal address has to be included. There is no requirement to obtain a recipient’s consent before sending the first message; the opt-out obligation kicks in only once a recipient asks to stop.
Why Phone and SMS Carry Materially Higher Legal Risk
VA Horizon’s existing guidance on TCPA compliance for this niche already covers phone and SMS consent specifically, including the finding that SMS carries the same consent rules as a live call under TCPA. That matters here because, per ActiveProspect’s tracking of TCPA lawsuit filings, volume has been rising sharply: 880 lawsuits were filed between January 1 and April 30, 2025, a 44% increase year over year, and by September 2025 the year-to-date total reached 2,128 filings, up more than 50%, with 78% of September 2025 filings being class actions. CAN-SPAM’s lighter consent and penalty regime is a real, structural reason email carries less legal exposure than a phone or SMS campaign in this exact environment.
Why This Niche Still Barely Touches Email
None of that makes email the obvious channel of choice. Practitioner content in this space is dominated almost entirely by door-to-door and cold-calling guidance, built on the premise that merchants “don’t search online for merchant services very often,” the reasoning trainers in this niche use to explain why marketing alone cannot carry the funnel. That same logic has never been directly tested against email specifically. Merchants are still business owners who read their own inbox regardless of whether they are actively shopping for a new processor, which is a different question than whether they are searching online.
What a Compliant Cold Email Motion Requires
A CAN-SPAM-compliant email needs the opt-out link, the honest header information, the advertisement label, and the physical address, the four requirements above, built into the template from the first send, not bolted on after a complaint. Beyond compliance, the content itself has to earn attention in an inbox that was not expecting it, which argues for a message anchored on something specific and current, a processor merger, a rate change in the news, rather than a generic pitch that could apply to any merchant on any list.
Where Email Fits Alongside Phone and Door-to-Door, Not Instead of Them
The honest framing is additive, not a replacement. A phone-and-door-dominant channel mix built around statement analysis is not going away, and this guide is not arguing it should. Email is a lower-risk, currently under-tested channel worth running alongside the existing mix, particularly for merchants who are harder to reach by phone or door in the first place.
Human + AI SDRs and Channel Mix
Human + AI SDRs currently run merchant services qualification over SMS, not email or cold dialing, which keeps outreach inside the higher-scrutiny TCPA framework this guide describes rather than the lighter CAN-SPAM regime. Understanding where each channel’s actual legal exposure sits is useful context regardless of which channel a given campaign runs on.
What this means for you
- CAN-SPAM, not TCPA, governs commercial email and requires no prior consent before a first message, only a functioning opt-out honored within 10 business days, unlike the consent rules TCPA applies to calls and texts.
- TCPA lawsuit filings reached 2,128 year to date by September 2025, up more than 50% year over year, with 78% of September 2025 filings being class actions, real evidence phone and SMS carry materially higher legal exposure than email right now.
- No merchant-services-specific data confirms cold email’s effectiveness in this niche; the channel is genuinely untested territory worth running alongside, not instead of, the phone-and-door-dominant channel mix.
Sources
The external data in this guide draws on the sources below. Figures described in the text as estimates or industry triangulations are directional and are not attributed to a single dataset.
- Cornell Law School Legal Information Institute, 15 U.S. Code § 7704 (CAN-SPAM Act)
- ActiveProspect, “TCPA Lawsuits Updates”