Yes, it is legal as no business is obliged by US laws to give a response to such a letter. The only exception is when the request comes from a federal or state agency.
If you got an employment verification request, don't put it
as complying with such requests is in everyone's best interests.