goJumboGPT

Everyday Your rights over your own data

How long does it take to unsubscribe from emails?

The legal deadline by country: 10 business days in the US and Canada, 5 in Australia, no fixed number in the UK and EU. Why Gmail's 48 hours is not a law.

8 min read How we write

The short answer

  • In the US a sender must honor your unsubscribe request within 10 business days, which is two working weeks, and its link must work for at least 30 days after the email was sent.
  • Canada also sets 10 business days as the outer limit, but says the sender must act without delay. Its unsubscribe address must stay valid for 60 days.
  • Australia is the fastest fixed deadline: your withdrawal takes effect at the end of 5 business days, counting the day you sent it.
  • The UK and EU set no number of days. Once you object, your data shall no longer be used for marketing, and the UK regulator says to act promptly.
  • The 48 hours often quoted is Gmail's rule for senders of about 5,000 or more emails a day to Gmail, not a law. Missing it costs the sender Gmail's delivery support.
  • Unsubscribing stops marketing only. Receipts and account notices keep coming, and your data and any paid plan stay in place until you deal with them separately.

Ten business days in the US and Canada, five business days in Australia, and no fixed number in the UK or the EU, where the law simply says the marketing must stop. Those are legal limits on the sender, counted from the day you unsubscribe. Weekends do not count, so ten business days is two full working weeks. The 48 hours you may have read about is a Gmail rule for large senders, not a law.

What unsubscribing means in law

Unsubscribing, also called opting out, means telling a sender to stop sending you marketing. The laws call this kind of mail a commercial message: one whose main purpose is to promote a product or service. A sale email is commercial. So is a newsletter that pushes products.

Receipts, shipping updates, warranty details and notices about an account you already have are not marketing. The FTC calls them transactional or relationship messages, and the US law exempts them from most of its rules. Gmail leaves transactional mail out of its one-click rule too. So when you unsubscribe from a shop's newsletter, its order confirmations keep coming.

Every law below runs two clocks, and most confusion comes from mixing them up.

  • The deadline to stop. How long the sender may keep emailing you after you ask it to stop.
  • The life of the link. How long the unsubscribe link in an email must keep working after that email was sent.

A business day is a working day. Saturdays and Sundays are not counted.

The deadline by country

WhereRuleDeadline to stopLink must keep working
United StatesCAN-SPAM ActWithin 10 business daysAt least 30 days after the email was sent
CanadaCASL, section 11Without delay, and no later than 10 business daysAt least 60 days after the email was sent
AustraliaSpam Act 2003Takes effect at the end of 5 business days, counting the day you sent itAt least 30 days after the email was sent
United KingdomUK GDPR Article 21, with the PECR rules on marketing emailNo number of days. Marketing must stop once you object, and the regulator says to act promptlyNo number of days
European UnionGDPR Article 21No number of days. The marketing must stop. A reply on what was done is due within one monthNo number of days
Gmail (not a law)Gmail sender guidelinesRecommends 48 hours to senders of close to 5,000 or more messages a day to Gmail. Missing it costs them Gmail's delivery supportOne-click unsubscribe required on marketing mail

United States

The FTC's guide to the CAN-SPAM Act says a sender "must honor a recipient's opt-out request within 10 business days." The opt-out method must work for at least 30 days after the email goes out. A sender cannot charge a fee or ask for any personal details beyond your email address. It also cannot make you do more than send a reply or visit a single web page.

A menu of mail types is allowed, but it must include an option to stop all marketing from that sender. Once you opt out, the sender cannot sell or pass on your address, except to a firm it hired to help it comply. Each email that breaks the rules can cost up to $53,088. One limit: US law does not need your consent before the first email. Its protection starts when you say no.

Canada

Canada's anti-spam law, known as CASL, uses the same ten days but frames them differently. Section 11 says the sender must act "without delay, and in any event no later than 10 business days" after you send your request. The ten days are the outer limit, not a grace period. Unsubscribing must be free and work by the same means the message came by, where that is practical. The address or web page given must stay valid for at least 60 days, twice the US figure.

Australia

Australia has the shortest fixed deadline of the countries here. Under the Spam Act 2003, your withdrawal of consent "takes effect at the end of the period of 5 business days" starting on the day you send the unsubscribe message. Section 18 says the unsubscribe address must work at all times for at least 30 days after the message was sent. The law covers commercial messages with an Australian link.

United Kingdom and European Union

Here the rule is written as a right, not a countdown. Article 21 of the GDPR gives you the right to object "at any time" to the use of your data for direct marketing. Article 21(3) then says that once you object, the data "shall no longer be processed for such purposes." The UK version uses the same words, and neither sets a number of days.

The UK regulator, the ICO, says a sender should offer an opt-out by reply or by link "and act on this promptly." It should keep a do not contact list and check its mailings against it. Past customers who bought something similar can get marketing they never signed up for. The ICO calls this the soft opt-in. It only applies if they were offered an opt-out when their details were taken, and in every message since.

In the EU, Article 12 adds one more clock. When you send it a request under Article 21, the company must tell you what it did within one month. That month is for the reply. The duty to stop carries no waiting period of its own.

Why you hear both 10 days and 48 hours

Both numbers are real, and they come from different places. Ten business days is the US legal limit, the number in the FTC's own guide, and Canada's outer limit too. Forty-eight hours comes from Gmail.

Gmail's sender FAQ says, "we recommend that you fulfill unsubscribe requests within 48 hours." It applies to bulk senders: close to 5,000 or more messages to personal Gmail accounts in one day. Gmail's table lists what happens when they miss it. Gmail's delivery support and fixes become unavailable. These senders must also offer one-click unsubscribe on marketing mail, through a line in the message header.

So which is right? The law is the deadline you can enforce. A US store that stops on day nine has met the law, even if it broke Gmail's rule on day three. That hurts the store's delivery, but no regulator acts on it. Gmail's rule is a deal between Gmail and large senders, and it covers only mail going to Gmail.

One unsubscribe walked through the dates

Suppose a store emailed you a sale on Friday, November 20, 2026. You click its unsubscribe link on Monday, December 7. Assume no public holiday falls in between. Here is what each rule says.

  • Is the link still valid? Yes. Seventeen days is inside the 30 days in the US and Australia, and the 60 in Canada. A link in an email from last summer may have expired lawfully, so use the newest email.
  • Gmail, if the store is a bulk sender. It should have removed you by Wednesday, December 9.
  • Australia. Five business days, counting the Monday, end on Friday, December 11. Your withdrawal takes effect at the end of that day.
  • The US and Canada. Ten business days after December 7 is Monday, December 21. In the US, a sale email on December 15 is still allowed. Canada asks for action without delay, with December 21 as the hard stop.
  • The UK and the EU. There is no date to write down. The store has to stop, and an email a week later is worth questioning.

If the same store emails you on December 22, it is past every deadline in the table.

These deadlines bind businesses that follow the law. A scammer follows none of them. In mail you never signed up for, the unsubscribe link goes wherever the sender wants, including a fake sign-in page built for phishing. That is why the red flags in scam texts and emails include not tapping the unsubscribe line in a message you were not expecting.

For a sender you know and signed up with, unsubscribing is safe. Many email providers also show their own unsubscribe button or banner, the FTC notes, which saves a trip to the sender's site. For mail from a stranger, the FTC says to mark it as spam or junk. If you already clicked and typed something in, follow what to do in the first ten minutes after a phishing link.

What these deadlines do not cover

The deadlines cover marketing only, and they bind only the sender you told. If it shared your address before you opted out, that copy is a separate problem, and how long data broker removal takes covers where such copies go. Unsubscribing does not delete your data or close your account. That needs its own request, set out in what you can ask a company to do with your data. Nor does it cancel a paid plan. Which law applies depends on where you and the sender are. In the UK, the ICO says the same rule covers texts and social media direct messages. These figures are as published in November 2026. This is general information, not legal advice.

What to do if the emails keep coming

  1. Unsubscribe from the newest email, or use your email provider's own button.
  2. Note the date with a screenshot of the confirmation page. Count the deadline from the table, skipping weekends. A message inside it is lawful.
  3. Write once if it carries on. In the UK or EU, tell the company's privacy contact you object to direct marketing under Article 21. In the EU it must say within one month what it did.
  4. Report it. Mark the email as spam or junk. In the US, the FTC takes reports at ReportFraud.ftc.gov.
  5. Close the source. If you no longer use the service, delete the account properly so it stops holding your address. If it was a renewal notice, cancel the subscription itself, because the newsletter stops but the charges do not.

Common questions

Why am I still getting emails after I unsubscribed?

Usually because the sender is still inside its legal window. In the US and Canada that is up to 10 business days, and in Australia 5. Count from the day you clicked, skipping weekends. The other common reason is that the email is a receipt or account notice, which unsubscribing does not stop. If marketing still arrives after the deadline, the sender is breaking the rules.

Is it illegal to keep emailing me after I unsubscribe?

After the deadline, yes, in each country covered here. A US sender that keeps marketing to you more than 10 business days after your request breaks the CAN-SPAM Act. The FTC says each such email can cost up to $53,088. In the UK and EU the law says marketing must stop once you object, with no grace period written into it.

Does unsubscribing delete my email address from the company's records?

No. Unsubscribing tells the company to stop marketing to you. In the US it must keep honoring that, and it may not sell or transfer your address. A sender following the UK regulator's checklist keeps a do not contact list of everyone who opted out, so it can screen them out. To remove your data, send a separate deletion request.

How long does an unsubscribe link have to work?

At least 30 days after the email was sent in the US and Australia, and at least 60 days in Canada. After that, a dead link can be lawful. If an old link fails, find a newer email from the same sender and use that one, or use the unsubscribe button in your email app.

Do companies really have to unsubscribe me within 48 hours?

Not by law. Forty-eight hours is what Gmail recommends to bulk senders, meaning those sending close to 5,000 or more messages a day to personal Gmail accounts. A sender that misses it loses Gmail's delivery support and fixes. The legal limit in the US is still 10 business days.

Sources