CFO Email Lists: Buy, Rent or Build, and What They Cost

Buy a CFO file, rent data seats, or have it built?

For cold outreach, build your CFO list around your own offer and buyer profile, or pay someone to build it for you. Do not buy a generic national CFO file. There is one narrow exception. If all you need is CFO names at US public companies, SEC filings give you those for free. You then find and verify each address yourself.

• A file is priced per record, but you actually pay per usable contact, and the two numbers are far apart.
• CFOs change seats often enough that a file starts aging the day it is exported.
• In the US, the UK, the EU and Canada, the legal duties stay with whoever presses send, no matter who sold the data.

A disclosure before the table. My team does not sell ready-made CFO files. We build lists one client at a time, sometimes as a custom list for a company whose sending already works and simply needs more of the right people. So I lean toward building. Check my arithmetic before you trust my preference.

I have not found an independent source that publishes comparable prices for any of the three. File sellers print prices on their own sales pages, next to record counts and accuracy claims you cannot check. Seat prices vary by vendor, plan and billing term, and custom builds are quoted.

The number you can compare across all three is the cost per usable contact, worked out below on your own sample. If you are choosing between buying and building for a different role, the same logic is covered in whether to buy a B2B email list, building a CEO email list and HR email lists.

How to choose:

• Buy a file only as research material, and never import it straight into a sequence. Google's guidelines for senders advise against buying email addresses from third parties (Google email sender guidelines).
• Rent seats and build when one person can give the searches real hours every week and run verification as a separate step. A list built in rented tool seats beats a scraped one. That is how my team builds. List building sits inside our monthly fee, and the client pays for the subscriptions, data and mailboxes directly.
• Have it built when sending works and research time is the bottleneck. Ask how every record was sourced before you pay. The cheapest version is a bargain freelancer file. In my experience those bring low open rates and high bounces.

How do you work out what a CFO list really costs per usable contact?

The sticker price divides the file cost by the number of records. The real price divides it by the records that survive cleaning:

Cost per usable contact = file price divided by (records, minus wrong titles, minus companies outside your ICP (ideal customer profile), minus failed verification, minus people who have left the role)

The numbers below are an invented example to show the math. They come from no vendor's file. Swap in counts from your own sample.

On paper this file costs $0.50 a record. Each person you can actually write to costs $1.79, so in this example the real price is about 3.6 times the sticker. Your own sample will give a different multiple. Run it before you pay.

Look at where the biggest cut came from: 4,000 records, 40% of the file, sat at companies outside the ICP. That is a targeting loss, and no vendor accuracy figure can fix it.

How fast does a CFO file go stale?

Russell Reynolds Associates found that CFO turnover at S&P 500 companies hit 12% in the first half of 2025, a seven-year high, with 61 new CFOs appointed. H1 2025 was the latest period on its page at the time of writing (Russell Reynolds Associates).

That covers only the most visible finance chiefs in the US, so it is not an annual decay rate for the private mid-size firms you probably sell to. Still, at the most closely watched companies in the country, one seat in eight changed hands in six months.

A file bought once and mailed for a year describes an org chart that no longer exists. And this goes well beyond the biggest companies. The BLS tenure release for January 2026 has a telling figure. 20.6 percent of US wage and salary workers had spent a year or less with their current employer.

Even the steadiest group moves. BLS puts their median tenure at 6.1 years, the longest of any major occupation group. Every exit still leaves a stale record behind. Other roles age the same way, as I show in how fast B2B contact data decays.

A verifier covers only part of this risk: a mailbox that accepts mail may now belong to the CFO's successor, or to nobody who reads it.

Why is advertised accuracy different from your usable rate?

Vendor accuracy percentages usually arrive without a published test: no sample size, no test date, no definition of accurate. A record can also be accurate and still useless, because the company is the wrong size or sits in a country you do not serve.

So test before you pay:

1. Ask for 100 random records pulled with your own filters, so the count reads straight as a percentage. Refuse the seller's showcase sample.
2. Look up each person and run every address through your own verifier.
3. Count the ones you would really send to. That is your usable rate.
4. Multiply the file size by that rate, then divide the price by the result.

If the seller will not give you a random sample, do not buy the file.

The second risk is a list that ends up too small. With a tight ICP, the same cuts can leave a few hundred people in total, or 50 to 100 perfect-fit contacts a month.

I see B2B teams work a stream like that for months and then ask why the pipeline stays flat. Most of those CFOs are busy, not ready or not interested this month. That is a coin flip on timing, and most teams call it a strategy.

Is the CFO always the person who signs?

Often not. Who signs depends on company size, country and what you sell. A finance system, an audit service and a working capital product each land on a different desk.

Treat the table as a draft, because your own deals beat it. The first thing I ask a client is who said yes on the deals they have already won. Then I search with the finance titles that niche really uses, which for UK targets puts finance directors next to CFOs.

My team takes assistant, associate and bare "manager" titles out of every search on purpose. In finance, that one rule is what drops the accounts payable and finance assistant records.

Fractional CFOs advise several companies at once. Write to them about what your offer does for their clients. Keep them in their own segment, so the counts in the rest of your list stay honest.

Where can you find CFO names for free?

For US public companies, the law does the research for you. SEC Regulation S-K Item 401 requires registrants to identify their executive officers in their filings, with a brief note on each officer's business experience over the past five years (eCFR, 17 CFR 229.401). Annual reports and proxy statements give you a dated CFO name and a short career history.

Three limits apply:

1. A filing gives you a name and no email address, so the address still has to be found and verified.
2. The disclosure rule says nothing about whether you may contact that person. The anti-spam and privacy laws below decide that.
3. It covers SEC registrants only.

For private companies, cross-check the leadership page against LinkedIn and confirm the current title before the record goes near a sequence.

Is it legal to email a CFO list in the US, UK, EU and Canada?

Buying a list moves none of your duties onto the seller in any of these regions, which is the core of whether cold email is legal at all. The FTC says plainly that hiring another company does not take the legal responsibility off you. This is not legal advice, so read the regulator pages below and get counsel for your own case.

The ICO's B2B marketing page is marked as under review because of the Data (Use and Access) Act, so expect it to change.

Two regulators put a number on the maximum penalty. Each email that breaks CAN-SPAM can draw up to $53,088 (FTC). In Canada, the CRTC can impose up to CAD 10,000,000 per violation on a business. In its report for October 2025 to March 2026, lack of consent appeared in 93% of complaints to the Spam Reporting Centre, with more than one reason allowed per complaint (CRTC).

The EU row hits bought files hardest. Article 14 means you must be able to tell a CFO where you got their data, and a file with no record of its source makes that impossible. A vendor's compliance badge describes the vendor's own processing. Before you lean on one, compare what each data provider says about GDPR.

Germany gets a separate answer in the FAQ below.

How do you build a CFO list that is worth sending to?

Work in this order. Skip ahead and the list fills up with the wrong people.

1. Offer and ICP first. One sentence: which companies, what size, where, and which finance problem you solve. Every later step filters against it. If you cannot write it, you are not ready to pull names.
2. Company filters from your own clients. Look at the clients you already have, then find lookalikes. That is where industry, headcount band and country come from.
3. Apply the title map per size band. A 40-person firm and a 4,000-person firm need different rows.
4. Pull names from data tools, SEC filings and leadership pages.
5. Find addresses in your data tools. Filings carry no email addresses and leadership pages rarely do.
6. Verify every address. My team runs each one through NeverBounce or DeBounce before it goes near a sequence, and our rule is to keep bounces below 0.5% of sends.
7. Suppress past opt-outs from every tool and domain you have used, before the first message.
8. Check random rows by hand, then send a small batch. Follow the steps to audit a lead list before you send, and watch bounces and spam complaints before you add volume.

My team sets both filters from what already worked. Company filters come from lookalikes of current and past clients. Titles come from past projects, where we check who really signed off on each deal.

Google publishes the rules every bulk sender has to meet (Google's sender requirements). Everyone sending to Gmail accounts needs SPF or DKIM, and senders above 5,000 messages a day need SPF, DKIM and DMARC. The spam rate in Postmaster Tools must stay under 0.3%, with 0.10% as the target. Set up SPF, DKIM and DMARC on every new sending domain before any volume.

Why won't better copy rescue a bad CFO list?

When a CFO campaign goes quiet, the team edits the subject line, because the email is the part everyone sees and the spreadsheet stays closed. A weak sender or a bad list sinks even good copy. You can send 5,000 "personalized" messages a week and still get ignored when the foundations are broken. A perfect subject line will not make an accounts payable clerk approve a finance system. So I open the list before anyone rewrites a sequence.

Check three things in the file: what share of titles sit on the include side of the title map, when and by whom each record was verified ("the seller said so" does not count), and whether company sizes match the titles you picked. A financial controller at a 30-person firm and one at a 3,000-person firm are different buyers.

Fix those first, because the problem may turn out to be your list.

What I would do Monday morning

Pull 100 random records from the file you are considering and check every title against the title map. Verify the addresses, then count how many records are usable. Divide the price by that usable count and compare it with what rented seats or a built list would cost you. If the seller refuses the random sample, walk away. Fix the list first. Then write the email.

If you are comparing a CFO file quote against building your own, book a call and I will run the cost-per-usable-contact sums on your numbers with you.