Email marketing for banks and credit unions: the statement is not the campaign, and every rate in the inbox carries its disclosures

Email marketing for banks and credit unions works best as two separate streams. The first is service mail: statements, alerts, rate changes and security notices, which customers expect and which the law treats as transactional. The second is marketing mail: a CD rate, a checking bonus, a home equity offer or a welcome series for new members. Keep them apart, send the marketing stream only to people who have a reason to hear from you, and build each campaign around one product for one group of customers who do not have it yet. Every marketing email is an advertisement, so a rate in the inbox needs the same disclosures as a rate on a billboard, and in some respects more.

Service mail and marketing mail are two different jobs

A bank already sends more email than most businesses: statements ready, low balance alerts, payment reminders, password resets. Under the US CAN-SPAM rule, the FTC treats an email as "transactional or relationship" when it exists to confirm a transaction, give safety or security information, report a change in the terms of an account, or send an account statement at regular intervals (16 CFR 316.3(c), read 21 October 2026). Those messages are not marketing.

The trap is the promotional banner. The same rule says that when an email mixes transactional content with an advertisement, it counts as commercial if a reader of the subject line would think it is an ad, or if the transactional part does not appear "in whole or in substantial part, at the beginning of the body" (16 CFR 316.3(a)(2)). So a statement notice with a large CD offer at the top can become a commercial email, with every commercial email duty attached. If you want to cross-sell inside service mail, keep the account information first and the offer small and below it, and ask your compliance team to sign off on the template once.

The marketing emails worth sending

Most of a bank's email marketing money is made with existing customers, not with cold lists. These are the campaigns community banks and credit unions run most often, and the trigger for each.

Campaign	Who gets it	What it asks for
New account welcome series	Everyone who opened an account in the last 60 days	Set up direct deposit, download the app, turn on alerts
Second product offer	Checking customers with no savings, or deposit customers with no card	Open the one product they are missing
CD maturity reminder	Customers whose certificate matures in the next 30 days	Renew, or move the money to another product with you
Home equity or auto loan offer	Homeowners and members with a car loan elsewhere, where you know it	Start an application
Business banking update	Small business customers	Treasury services, merchant services, a business card
Financial education newsletter	Customers who opted in to it	Read, and come back to the branch or app for advice

The welcome series usually matters most. A new customer who sets up direct deposit and uses the app in the first weeks tends to stay, and the series is where you ask for both. Use one action and one button per email.

Bank email marketing examples, written to pass review

Two short examples show the shape of a compliant marketing email. The details in brackets are placeholders, not real terms.

A CD renewal reminder

Subject: "Your certificate matures on [date]: your options." The body names the maturity date, lists the terms available today with each rate stated as an annual percentage yield, and links to a page with the full terms. The subject line is honest about what the email is, which matters because CAN-SPAM bars subject lines likely to mislead a reasonable reader about the contents (15 USC 7704(a)(2)).

A checking bonus

Subject: "A [amount] bonus when you open checking and set up direct deposit." The body states what the customer must do, by when, the minimum balance, and when the bonus will be paid. Those are the items Regulation DD requires when an advertisement states a bonus (12 CFR 1030.8(d)).

The rules that apply to a bank's marketing email

CAN-SPAM

Every commercial email must identify itself as an advertisement (unless the recipient gave prior affirmative consent), tell the reader how to opt out, and show a valid physical postal address. Opt-outs must be honoured within 10 business days, and the opt-out mechanism must keep working for at least 30 days after you send (15 USC 7704). The FTC's rule adds that you may not charge a fee or ask for anything beyond the email address and preferences to process an opt-out, and the reader must be able to do it by replying or visiting a single web page (16 CFR 316.5).

Regulation DD for a rate or a bonus

If a bank's email states a rate of return, it must state it as an "annual percentage yield", and once the APY appears, the ad must also state, where they apply, whether the rate can change, how long it is offered or the date it is accurate as of, the minimum balance, the minimum opening deposit, that fees could reduce earnings, and for time accounts the term and the early withdrawal penalty (12 CFR 1030.8(b) and (c)). The word "free" is not allowed if any maintenance or activity fee can be charged (1030.8(a)(2)).

Some banks assume email counts as "electronic media" and gets the shorter disclosure set allowed for television and radio. It does not. The official commentary to Regulation DD says the exemption "does not extend to advertisements posted on the Internet or sent by email", and that an electronic ad with a triggering term must clearly refer the reader to where the additional information begins, for example with a link that goes straight to it.

The FDIC statement

FDIC rules define an advertisement as "a commercial message, in any medium", and an insured bank must include the official advertising statement, such as "Member FDIC", in ads that promote deposit products or the bank's banking services generally (12 CFR 328.6). Put it in the email footer template so nobody has to remember it.

Credit unions

Credit unions follow the NCUA's version of the same rules. Part 707 mirrors Regulation DD, with the "dividend rate" allowed beside the APY (12 CFR 707.8). Part 740 requires the official advertising statement, such as "Insured by NCUA" or "Federally insured by NCUA", in all advertisements, in print no smaller than the smallest font used elsewhere in the ad (12 CFR 740.5).

Deliverability and the phishing problem

Banks are a favourite target for phishing, so your real email has to be easy to tell apart from a fake. Authenticate your sending domain: Gmail requires SPF or DKIM for every sender, and senders of more than 5,000 messages a day to Gmail accounts must also set up SPF, DKIM and DMARC, offer one-click unsubscribe, and keep the spam rate reported in Postmaster Tools below 0.30% (Google support answer 81126, read 21 October 2026). Then keep every marketing email consistent: one sending address, no requests for passwords, and links only to your own domain. Tell customers in the welcome series exactly what your emails will never ask for. That sentence protects them and makes your real email more trusted.

What to measure

Opens are a weak signal for a bank, because many customers read the subject and act later in the app. Measure each campaign by the product result: accounts opened, direct deposits set up, certificates renewed, applications started, and products per customer for the group you emailed against a group you held back. The wider plan, including paid search and the account opening path, is covered in our guide to digital marketing for banks.

Questions about email marketing for banks and credit unions

Do banks need consent to send marketing email to customers in the US?

CAN-SPAM does not require prior consent, but it does require an opt-out, a postal address and honest headers and subject lines. Many banks still ask for consent at account opening, because a list of people who agreed to hear from you performs better.

Is a monthly statement email a marketing email?

Not when it exists to deliver the statement. It can become commercial if a promotion dominates the subject line or the top of the message, so keep the account information first.

Can a bank say "free checking" in an email?

Only if no maintenance or activity fee can be charged on the account. Regulation DD bars "free" or "no cost" otherwise.

Does every bank marketing email need "Member FDIC"?

Ads that promote deposit products or the bank's services in general need it under 12 CFR 328.6(c). An ad for a loan product alone falls outside that paragraph, so confirm the specific email with compliance.

What is a good first email campaign for a credit union?

A welcome series for new members, asking for direct deposit, app setup and alerts, one action per email. It is aimed at people who just chose you and it is easy to measure.

When a customer asks an assistant where to open an account

Email reaches people who already bank with you. The next customer often starts somewhere else: they ask ChatGPT or Gemini which local bank or credit union has the best CD rate or the easiest business account. The assistant answers from rate pages, review sites and local news, and it may name the bank down the road. Whether your institution is in that answer, and with current terms rather than last year's, is what AI Knows Us checks for financial institutions.