While purchasing email lists is not illegal, using them can violate laws like the CAN-SPAM Act in the United States, the GDPR in the European Union, and other regional regulations. These laws often require that recipients provide explicit consent (opt-in) to receive marketing emails, which purchased lists usually lack.