If a home improvement contractor emails you out of the blue, treat the message as a lead, not as proof that the business is legitimate. A familiar logo, polished quote, countdown timer, or promised discount can all be copied.

Before you reply, find the contractor's contact details somewhere other than the email, check the business with your state or local licensing authority, and compare written estimates. Don't send a password, one-time security code, or payment until you know who you're dealing with and what the work will cost.

This guidance is for U.S. consumers. Licensing, deposits, permits, cancellation rights, and contract requirements can vary by state and city.

What a contractor email can and can't prove

An email can confirm an appointment, provide a quote, or open a conversation. On its own, it doesn't establish that:

The message may be genuine and still leave out important terms. Read it as information to check, not as independent evidence of the offer.

What CAN-SPAM covers

When the primary purpose of an email is to advertise or promote home improvement services, federal CAN-SPAM rules generally require the sender to avoid misleading header information and subject lines, identify the message as an advertisement, provide a valid physical postal address, and explain how to opt out of future marketing. The sender must honor an opt-out request within 10 business days. The FTC's CAN-SPAM compliance guide describes these requirements.

CAN-SPAM regulates commercial email. It does not verify a contractor's workmanship, license, insurance, price, or financing. A message that includes account or appointment information may be treated differently depending on its primary purpose, but putting that information at the top doesn't automatically make a promotional pitch trustworthy.

Unsubscribing from marketing also doesn't cancel an appointment, end a signed contract, or dispute a payment. Deal with those issues separately.

Contractor email red flags

One warning sign isn't conclusive. Several at once are a reason to stop and verify the business before you respond.

CISA advises people to verify unexpected messages independently, rather than replying or using a phone number or link supplied in the message. Its phishing guidance also recommends checking where a link leads before opening it.

How to verify the sender safely

1. Use a source outside the email

If you weren't expecting the message, don't click its links or open its attachments. On a computer, hovering over a link can show its destination without opening it. On a phone, avoid tapping an unverified link.

Instead, type the contractor's website address into a new browser window. You can also use a phone number from a previous invoice, signed document, or official business listing. Don't rely on contact details supplied only in a suspicious message.

2. Check the business with the right authority

Look up the contractor through the state or local licensing authority for the property where the work will occur. Check the legal business name, license status, trade category, and any public disciplinary information available.

Ask for proof of insurance and verify it through an independent contact if the project is substantial. A license check is useful, but it doesn't replace a written scope of work, a clear price, or a review of the contract.

Read customer reviews critically. The FTC recommends using rating websites you trust and getting multiple estimates. A review or testimonial link chosen by the contractor is only one source of information.

3. Compare estimates for the same job

Ask at least two contractors to describe and price the same project. Comparing headline prices isn't helpful when one estimate includes demolition, permits, disposal, materials, and cleanup and the other covers labor only.

A lower bid may simply have a narrower scope. Ask each contractor to state what is included and what would cost extra.

4. Confirm the inspection and the people doing the work

Before authorizing work, ask who will inspect the property, which areas will be examined, and whether subcontractors will be involved. If urgent damage needs temporary protection, you can authorize that limited step while waiting for a permanent repair plan. Get the larger scope and price in writing before approving additional work.

What to request in a written estimate or contract

An email summary can be useful, but request a formal, itemized document before work begins. Local law may require particular contract terms. At a minimum, look for clear information about:

Don't sign a blank or incomplete form. Require a written change order before approving extra work, and save the estimates, contract, invoices, text messages, emails, receipts, and photographs of the work.

The FTC advises consumers not to make the final payment until the work is complete and they're satisfied with it. That doesn't mean every deposit is unlawful or that every job must be paid entirely at the end. Deposit limits and payment rules depend on local law and the contract.

How to check a discount or financing offer

A "20% off" or "free estimate" offer may be genuine while still leaving out conditions that change the price. Ask the contractor:

The FTC's advertising and marketing guidance notes that misleading claims about products or services may violate laws against deceptive advertising. Don't rely on a percentage or "guaranteed" claim without checking the terms behind it.

Financing is a separate decision from hiring the contractor. Review the lender's documents directly. Check the annual percentage rate, repayment period, late charges, prepayment terms, and whether your home secures the debt. Don't provide sensitive information through an unsolicited link, and don't sign loan documents at the door or during a rushed sales visit.

Should you unsubscribe?

If you've confirmed that the message came from a real contractor and you no longer want marketing, use the sender's legitimate unsubscribe method. Commercial senders generally must process opt-out requests within 10 business days under CAN-SPAM.

If the message looks like phishing, don't click its unsubscribe link. Mark it as spam or junk, create a filter, and contact the company through an independently verified channel if you need to ask whether your information is in its system.

Marketing preferences are separate from project communications. You may still need appointment, billing, or warranty messages after opting out of promotional email.

What to do if you clicked, paid, or shared information

Don't delete the message. Keep the original email, screenshots, sender address, link destination, estimate, contract, receipts, payment confirmations, and photos. Then work through the steps that apply:

  1. Secure any exposed accounts. If you entered a password, change it through the real website, enable multifactor authentication, and change the password anywhere else you reused it.
  2. Call the payment provider. Use contact information from an official statement or website to reach your bank, card issuer, payment app, or other provider. Explain what happened and ask about cancellation, recall, or dispute options. Card, debit, ACH, wire, check, and cash payments follow different procedures, so don't assume a payment can be reversed.
  3. Contact the real contractor separately. If someone impersonated the business, tell the actual company through a phone number or website you found independently.
  4. Put a dispute in writing. Record the dates, promised work, amounts paid, problem, and outcome you want. The FTC's home improvement guidance recommends following phone conversations with a letter sent by certified mail when a dispute needs a formal record.
  5. Report the conduct. Use the FTC's home improvement scam guidance for reporting information. Contact the state or local contractor regulator when the issue involves licensing, unfinished or unsafe work, or a contract violation.

If you suspect an unauthorized loan secured by your home, contact the lender immediately and preserve every document. Consider getting advice from a qualified local consumer or housing professional before signing anything else.

State and local rules may change the answer

Federal email rules and home improvement contract rules are different. Don't assume that a cancellation period, deposit limit, licensing requirement, or insurance rule mentioned in one state's guidance applies where you live.

For example, the District of Columbia says home improvement businesses must be licensed. Its licensing requirements include bonding and insurance, and its consumer alert on home improvement scams discusses written contracts and advance payments. Connecticut's official home improvement guidance describes required contract details and a three-business-day cancellation provision for Connecticut consumers.

Those are jurisdiction-specific examples, not nationwide rules. Check the official licensing or consumer protection authority where the property is located before relying on a cancellation right or payment restriction.

Before you respond

Confirm these points first:

If any answer is no, leave the message alone for now. Open the contractor's official website yourself and make the call from there.