Your unsubscribe link isn't as compliant as you think

In today's Mailbites, we look at the unsubscribe link in your footer, the one you assume keeps you safe, and how it might be quietly feeding your spam rate instead. Stick around for the fix, because it's two lines of fixed text you can paste in once and forget.

Now, onto today's story.

The Story

For about twenty years, staying on the right side of email law was simple. You put an "unsubscribe" link in the footer, and you were done.

That link satisfied CAN-SPAM, the US law that just asks for a clear, easy way to opt out. Every email tool added one by default. You ticked the box and moved on, and for two decades that genuinely was enough.

Then, a couple of years ago, the companies that actually decide whether your email reaches the inbox, Gmail and Yahoo, quietly raised the bar on what "easy to unsubscribe" means. No press release. No warning email.

The gist: since 2024, if you send in bulk (Gmail's line is 5,000+ emails a day to Gmail or Yahoo addresses), a footer link alone no longer counts. They now want a one-click unsubscribe button that the inbox draws itself, right next to your name, before the reader even opens the email. Enforcement started tightening through late 2025.

So picture the founder who's technically following the law, still has a working footer link, and has no clue the goalposts moved. Here's what's quietly happening to them.

That native unsubscribe button doesn't appear on its own. Gmail and Yahoo only render it when your email carries a specific pair of headers behind the scenes. Miss them, and the easy exit the reader expects at the top of the inbox simply isn't there.

A reader who wants out and can't find the easy door won't dig through your footer for tiny grey text. They tap the button that's always one reach away: "Report Spam." And that tap is about the most expensive thing a sender can trigger, because complaints are exactly what mailbox providers use to judge you.

The math leaves no room. Google wants your complaint rate under 0.1%, and nowhere near 0.3%. Cross it and your delivery suffers no matter what else you did right. That rate counts only emails that reached the inbox and can be judged per campaign, so one bad send to an irritated segment can tip you. Three "Report Spam" taps per thousand is the whole budget.

Add it up and the uncomfortable truth lands: the footer link you've trusted to protect you is set up wrong, doing the opposite. It strands readers, nudges them toward the one button that wrecks your reputation, and feeds a number with almost no tolerance.

This isn't an argument for making people stay. It's the reverse. An unsubscribe is a clean, quiet goodbye that costs you nothing. A spam complaint is a permanent red mark on your domain that drags down delivery for everyone who stayed. Given the choice, you want the clean goodbye to be effortless.

So making the exit easier isn't a concession, it's protection. The simpler you make leaving for the few who want to go, the better your email lands for everyone who stays.

The fix is smaller than the problem sounds. Add two headers to your marketing emails:

List-Unsubscribe: <https://yourdomain.com/u/UNIQUE_TOKEN>, <mailto:unsubscribe@yourdomain.com>
List-Unsubscribe-Post: List-Unsubscribe=One-Click

That second line never changes. It's always exactly List-Unsubscribe=One-Click, which is why this is paste-once work, not engineering. To confirm it took, email yourself, open it in Gmail, view the raw source ("Show original"), and search for "List-Unsubscribe." Both lines there means you're set.

Three gotchas that create complaints even when the headers look fine:

• The one-click URL has to finish the unsubscribe in a single step. Point it at a preferences page, a login, or a "click to confirm" screen and it fails the spec. A confirmation page in response to a one-click request actually counts as a complaint.
• Suppress the opt-out across every tool you send from. Unsubscribe handled in one place but not another means the mail keeps coming, and now they're angry.
• The DTC trap: a "hybrid" email, a shipping note or trial reminder with a little promo baked in, sent to someone who opted out of marketing. To them that's a broken promise, and the report follows.

One Shopify note, since many of you are on it: if your sending domain isn't authenticated with Shopify, it rewrites your "from" address to store@shopifyemail.com to stay compliant for you. You keep delivering, but your brand name disappears from the inbox. Worth fixing.

That's the job. Two headers, one test, three things to avoid.

Make the exit effortless, and the inbox rewards you for it. Funny how often that's the whole game.

Until Friday,

Ani