How Do You Reactivate Old Leads in Your CRM Without Spamming Them?

To reactivate old leads without spamming them, sort your CRM by consent first, contact only people who agreed to hear from you, and send one short, relevant message with your business details and a working unsubscribe. In Australia, the Spam Act decides who you can email or text, not how warm the lead feels. Done properly, reactivation is one of the cheapest ways to find new conversations, because these people already raised their hand once.

Why reactivate old leads at all?

Most CRMs are full of people who enquired, never booked and were never followed up properly. Some were busy. Some were not ready. Some got one email and nothing else. In a Harvard Business Review study of 2,241 US companies sent a test enquiry, 23% never responded at all. If your business has ever been slow to reply, a share of your old leads may never have had a real conversation with you.

Reactivation gives those people a second chance to talk to you. But an old list is also where the legal risk sits, because consent is often missing, unclear or out of date.

What does the Spam Act say about old leads?

This is general information, not legal advice. Under the Spam Act 2003, the ACMA says you need consent before sending marketing emails or messages, and every message must identify you, include your contact details and make it easy to unsubscribe. The ACMA says it is up to you to prove you have consent. Five points matter most for an old list:

Express consent is the safe basis. The ACMA calls it best practice, given by filling in a form, ticking a box, over the phone or face to face. Keep a record of who gave it, when and how.
An enquiry alone is unlikely to be consent. The ACMA's Statement of Expectations says a consumer visiting a website or sending an email to a business is unlikely to constitute consent to a marketing list.
Inferred consent is narrow. The ACMA says it usually needs a provable, ongoing relationship, with marketing directly related to that relationship. It does not cover messages sent just because someone bought something once.
You cannot email to ask for consent. The ACMA says you cannot send an electronic message to ask for consent, because that message is itself a marketing message.
Unsubscribed means unsubscribed. The ACMA lists re-subscribe messages, sent to people who withdrew consent to encourage them to come back, as a way businesses breach the spam laws. It has also said inferred consent is unlikely to cover retention messages to customers who cancelled a subscription.

The penalties are real. The ACMA reported a penalty of more than $7.5 million for the Commonwealth Bank for sending over 170 million emails that did not comply with the spam laws. They had no way to unsubscribe, and 34.8 million were sent to people who had not consented.

What about phone calls to old leads?

A call you make months after an enquiry, to sell something, is likely to be telemarketing. The ACMA says over half of all active numbers in Australia are on the Do Not Call Register, and that telemarketing consent more than 3 months old becomes stale unless the person agreed to a longer period. Under the Do Not Call Register Act 2006, check numbers against the register or rely on current consent, and follow the ACMA calling hours: 9am to 8pm on weekdays, 9am to 5pm on Saturdays, not on Sundays or national public holidays.

And channels the Spam Act does not cover?

Where the Spam Act and Do Not Call Register Act do not apply, such as some direct mail, businesses covered by the Privacy Act may need to follow Australian Privacy Principle 7 on direct marketing. The OAIC's APP 7 guidelines explain the rules, including the right of individuals to ask not to receive direct marketing.

How do you reactivate old leads, step by step?

Export and segment by consent. Put every contact into one of three groups: express consent with a record, a provable ongoing relationship that may support inferred consent, and no clear consent.
Suppress first. Remove anyone who unsubscribed, complained, bounced or asked not to be contacted, plus test and fake entries. Make the suppression apply across email, SMS and calling.
Leave the no-consent group alone by email and SMS. You cannot message them to ask permission. Reach people like them through your public content, search and ads instead, and let them opt in again on their own.
Write one relevant message for the consented group. Refer to what they originally asked about. Offer something useful, such as an updated guide, a short checklist or an open spot for a call. Identify your business and include a working unsubscribe.
Send in small batches. Start with a few hundred contacts. Watch replies, unsubscribes, bounces and complaints before sending more.
Keep the sequence short. Two or three messages over about two weeks is plenty for a reactivation. No reply means archive, not "add to the daily newsletter".
Hand replies to a person fast. A reactivated lead is a new enquiry. Reply within minutes, as our guide to speed to lead explains.

See what slow replies cost your business.

The free Lead Leak Calculator turns your own numbers into a monthly figure in about 60 seconds.

Try the calculator

What should a reactivation message say?

Plain, honest and short works best. An example structure, using a made-up business:

Subject: Still thinking about your bookkeeping?
Hi Alex, you asked us about quarterly BAS help a while ago. We've put together a one-page checklist for getting BAS-ready without the end-of-quarter rush. Want it? Just reply "yes". If now isn't the time, no problem. Harbour Bookkeeping, [phone], [address]. Unsubscribe: [link]

It references their original enquiry, offers value before a sales call, asks for a one-word reply, identifies the business and has an unsubscribe. The ACMA says the unsubscribe must be honoured within 5 working days and work for at least 30 days after sending. For clinics, the Ahpra advertising guidelines also apply: no testimonials and no claims that create unreasonable expectations of treatment.

What we learned in our own business

Bulk sends to a big CRM list are where small technical problems become big ones. In October 2026, a hidden 1,000-row database limit in our team's education business meant about 30 people received the same follow-up email every day for several days. The system could not see that it had already emailed them, because the list it checked was cut off. Before any reactivation send, we now check that suppression and "already sent" lists load in full. Test and monitor automations, because "set and forget" is a myth.

Old lists also hide junk. A placeholder phone number used in testing was texted about 43 times over several months from test and fake sign-ups. Clean out test entries, validate numbers and email addresses at the form, and keep test data out of live sends. These are our own experiences, not client results.

A worked example

Example (hypothetical numbers): a physiotherapy clinic has 1,200 contacts in its CRM. After segmenting, 450 have a recorded opt-in to email updates, 80 have unsubscribed, and the rest made an enquiry with no consent recorded. The clinic suppresses the 80, leaves the no-consent group alone, and emails the 450 in three batches with a factual update about new evening appointment times and a booking link. It then fixes its booking form so new patients can tick a clear, optional box to receive updates. The list it can contact grows from here, legally.

How do you stop old leads going cold next time?

Reactivation is a repair job. The better fix is a system that does not leave leads cold in the first place: consent wording on every form, an instant reply, a planned follow-up cadence and reminders that protect each booking. See how many times to follow up a lead and how to reduce no-shows for the next pieces, and how to tell which ads bring clients for tracking which sources are worth reviving.

Frequently asked questions

Can I email old leads who never opted in to marketing?

Generally not, if the email is commercial. The ACMA says an enquiry alone is unlikely to be consent to a marketing list, and inferred consent usually needs a provable, ongoing relationship. Without consent, do not send commercial emails or texts.

Can I send an email asking old leads for permission?

No. The ACMA says you cannot send an electronic message to ask for consent, because that message is itself a marketing message. Collect consent through your forms, bookings, phone calls or face to face instead.

Can I contact people who unsubscribed if they were good leads?

No. The ACMA lists re-subscribe messages, sent to people who withdrew consent to win them back, as a likely breach of the spam laws. Respect the unsubscribe across every channel.

How many messages should a reactivation campaign send?

Keep it short: two or three messages over about two weeks, sent only to consented contacts. If someone does not respond, archive them rather than adding them to more sequences.

Can I call old leads instead?

Sales calls to old leads are likely to be telemarketing. Check numbers against the Do Not Call Register unless you have current consent, remember the ACMA treats telemarketing consent older than 3 months as stale by default, and follow the permitted calling hours.

How old is too old for a lead?

There is no fixed age in the Spam Act for email consent, but the ACMA expects consent terms to say how long consent will be used. Old consent that a person would not expect to still apply is a risk, so the older the lead, the more careful you should be.

Next step

Want to know how many leads are going cold in the first place? The free Lead Leak Calculator shows it in your own numbers, and the Client Acquisition Scorecard shows where clients slip away. If you want consent, follow-up and reactivation built properly, The AI Marketing Team Accelerator is where owners build it with Noah's team beside them.