Singapore outreach rules
Is cold email legal in Singapore? Yes, and the ADV rule probably does not apply to you.
Singapore does not require permission before you send. What it has instead is a labelling rule, and almost everything written about it leaves out the number that decides whether the rule reaches you at all. It attaches to messages sent in bulk, and the Act puts bulk at more than 100 similar messages in 24 hours. A normal sequence is nowhere near it.
General information, not legal advice. Checked against the Spam Control Act 2007 and the PDPC on 29 September 2026.
The number everything turns on
The ADV rule only reaches messages sent in bulk
Section 11 of the Spam Control Act applies the Second Schedule to unsolicited commercial electronic messages sent in bulk. Section 6(1) then defines bulk with three thresholds, and you are in bulk if you cross any one of them.
| Period | Messages of the same or similar subject matter |
|---|---|
| 24 hours | More than 100 |
| 30 days | More than 1,000 |
| One year | More than 10,000 |
Read those against how a B2B team actually sends. A rep working a list of 40 companies a day, with the message varied by account, is under the daily threshold and under the monthly one. A two-person team running 800 sequenced emails a month is under all three. A newsletter to 5,000 subscribers in one morning is over the first threshold immediately, and so is a product announcement.
The distinction the Act draws is not between B2B and B2C, and not between good outreach and bad. It is between a volume operation and everything else. If your sending genuinely sits under all three thresholds, the Second Schedule does not attach to your messages, and the advice to put a label in your subject line is advice about somebody else's sending.
If you are over the line
What the Second Schedule actually requires
Worth knowing even if you are under the thresholds today, because a single launch announcement can put you over the 24-hour one without anybody deciding to change strategy.
- The label. The letters
<ADV>with a space before the title in the subject field, so the message is clearly identifiable as an advertisement. Where there is no subject field, it goes in the words that appear first in the message. - An unsubscribe facility, and it has to keep working. The facility must remain valid for at least 30 days after the message was sent.
- Ten business days to stop. Once an unsubscribe request is submitted, no further unsolicited commercial messages may be sent after the expiry of ten business days from the day it was made.
Ten business days is a fortnight of working time, and it is more generous than the five working days Australia allows. Do not design a process around the gap. A sequence that keeps sending for nine days after somebody asked you to stop is technically inside the Act and will still cost you the account.
What the risk actually is
There is no regulator to complain to
This is the part that changes how you should think about it, and it is the opposite of Australia, where ACMA issues infringement notices and publishes them.
The PDPC states on its own site that the sending of unsolicited commercial electronic messages in bulk is covered by the Spam Control Act and is not regulated by the PDPC. There is no equivalent of ACMA or the ICO taking enforcement action for spam in Singapore.
The Act is enforced privately instead. A person who has suffered loss or damage as a direct or indirect result of a contravention may bring an action in court. Section 14(3)(b) sets statutory damages at not more than $25 for each message, and not more than $1 million in aggregate, unless the claimant proves actual loss above $1 million.
So the exposure is not an administrative penalty arriving in the post. It is a party with an interest in suing you, and $25 a message only becomes a number worth suing over at volumes that are, by definition, in bulk. That is a coherent design: the Act aims at operations sending tens of thousands of messages, and it gives the people on the receiving end the standing to act.
Whether it reaches you at all
Sending from Australia does not put you outside it
Section 7(2) lists the circumstances that give a message a Singapore link. Two of them catch a foreign sender with no presence in Singapore whatsoever.
| The link | What it means for a sender outside Singapore |
|---|---|
| The message originates in Singapore | Not you, if you send from elsewhere |
| The sender is present in Singapore, or is formed under Singapore law or has an office there | Not you, unless you have an entity or office there |
| The computer or device used to access the message is in Singapore | Catches you. Your prospect reads it at their desk in Singapore |
| The recipient is physically present in Singapore, or carries on business in Singapore | Catches you. This is the ordinary case for anyone prospecting into the market |
The other half of the market
Calls and texts are a different regime, and business numbers are on the register
Email is the Spam Control Act. Voice calls, texts and faxes are the Do Not Call Registry under the PDPA, and an Australian team gets this one backwards.
The PDPC says the Do Not Call Registry covers mobile, fixed-line, residential and business numbers. In Australia, business numbers are not eligible for the Do Not Call Register at all, which is the whole reason B2B calling works there without screening a landline. Carrying that assumption into Singapore is the mistake.
The relief is elsewhere. The PDPC lists exemptions from the Do Not Call obligations, and one of them is messages targeting businesses rather than individuals. So the protection for a B2B caller is in what the message is for, not in the number being absent from the register. Other listed exemptions include clear and unambiguous consent, messages relating to an ongoing relationship rather than a series of one-off transactions, service calls about something already purchased, market research, and charitable or religious messages.
For how the phone rules work in the markets next door, see cold calling rules in New Zealand, which is the one with no register at all.
Before you send into Singapore
A checklist you can work through
Written for a team sending from outside Singapore, which is where the wrong assumptions come from.
- Count your actual sending against the three thresholds, per similar subject matter rather than per campaign. The daily one is the one you cross first and notice last.
- Decide what happens on a launch or a newsletter, because that is the send that puts you in bulk even when your sequences never do.
- If you are in bulk, put the label in the subject field exactly as the Second Schedule sets it, not a variation of it.
- Make the unsubscribe work for at least 30 days after the send, which means it survives a sequence being paused, edited or archived.
- Stop within ten business days of an unsubscribe request, and preferably at once.
- Do not assume distance protects you. A recipient carrying on business in Singapore is enough of a link.
- Treat calls and texts as a separate question with a separate register, and remember business numbers are on it.
Where software helps, and where it does not
What Empiraa Signal does about this
Signal sends from your own inbox rather than a shared sending platform, stops a sequence the moment somebody replies, and adds and hosts the unsubscribe link, so the facility keeps working after a sequence is paused or archived.
What it does not do. Signal does not count your sending against the Spam Control Act thresholds for you, does not decide whether you are in bulk, and does not add an <ADV> label. Those are judgement calls about your own volume and your own market, and a vendor that made them for you would be guessing. Any software that claims to make you compliant in Singapore is selling you something.
The other markets in this cluster: is cold email legal in Australia, is cold email legal in the UK, is cold email legal in Canada, which is the strictest of them, and cold email laws by country.
Questions people actually ask
Singapore cold email, answered
Is cold email legal in Singapore?
Yes. Singapore does not require permission before you send a commercial email, unlike Australia. The Spam Control Act 2007 sets conditions on unsolicited commercial messages sent in bulk, and if you are under the bulk thresholds those conditions do not attach to your messages at all.
Do I have to put <ADV> in my subject line?
Only if you are sending in bulk. Section 11 of the Spam Control Act applies the Second Schedule to unsolicited commercial electronic messages sent in bulk, and section 6(1) defines bulk as more than 100 messages of the same or similar subject matter in 24 hours, more than 1,000 in 30 days, or more than 10,000 in a year. A typical B2B sequence is under all three, so the label is not required. Most advice you will read on this skips the threshold. Spam Control Act 2007.
What exactly does the ADV label have to look like?
If you are in bulk, the Second Schedule requires the letters <ADV> with a space before the title in the subject field, so that the message is clearly identifiable as an advertisement. Where there is no subject field, it goes in the words first appearing in the message.
Who enforces the Spam Control Act?
Nobody, in the sense most senders expect. The PDPC states on its own site that bulk unsolicited commercial messages fall under the Spam Control Act and are not regulated by the PDPC. The Act is enforced by a person who has suffered loss bringing a civil action, with statutory damages of up to $25 for each message, capped at $1 million in aggregate unless the claimant proves actual loss above that. PDPC on spam.
Does the Act apply to me if I am sending from Australia?
It can. Section 7(2) gives a message a Singapore link in several ways, and two of them catch a foreign sender: the device used to access the message is in Singapore, and the recipient is physically present in Singapore or carries on business there. Sending from Melbourne does not put you outside it.
Are business phone numbers on Singapore’s Do Not Call Registry?
Yes, and this is where Singapore differs sharply from Australia. The PDPC says the registry covers mobile, fixed-line, residential and business numbers. The relief for B2B senders is not that business numbers are absent, it is that messages targeting businesses rather than individuals are exempt from the Do Not Call obligations. The registry governs calls, texts and faxes, not email. PDPC on the Do Not Call Registry.
Question not answered here? Ask ANI and get a straight answer.
Show your working
Primary sources
Checked against these on 29 September 2026. They are the authority; this page is a plain-English reading of them, and it is general information rather than legal advice.
- Spam Control Act 2007, Singapore Statutes Online, for the bulk thresholds at section 6(1), the Second Schedule obligation at section 11, the Singapore link at section 7(2), and the civil remedy and statutory damages at section 14.
- PDPC, spam, for the statement that bulk unsolicited commercial electronic messages are covered by the Spam Control Act and are not regulated by the PDPC.
- PDPC, the Do Not Call Registry and your business, for the registry covering business numbers and for the exemption for messages targeting businesses rather than individuals.
Deliberately out of scope. The Personal Data Protection Act treats business contact information differently from other personal data, and that distinction decides a good deal for a B2B sender. It is a question about the data rather than about the message, and the place to read it is the PDPC's Advisory Guidelines on Key Concepts in the Personal Data Protection Act. This page does not paraphrase a definition it has not read against the statute, which is the same rule that kept an unverified renewal claim off the UK page and an invented threshold off the Australian one.