The legality of using purchased email lists varies depending on the jurisdiction. For example, the CAN-SPAM Act in the United States and the GDPR in Europe impose strict regulations on how email addresses can be collected and used. Generally, sending emails to individuals who have not explicitly opted in can be considered illegal and can lead to hefty fines and penalties.