Plain-English explainers on data brokers, robocalls, unwanted texts, spam email, your rights under federal and state law, and what violations are actually worth.
More guides
The Demand Letter: What a Cease-and-Desist to a Spam Caller Should Contain — A cease-and-desist to a spam caller should demand preservation of records, list each call, state the statutory basis plainly, ask for the consent record and set a deadline. Any release of claims goes through a licensed attorney.
Text Spam From Lead Generators: Who Is Actually Liable? — When a quote form turns into a flood of texts, the company that bought your lead and sent or commissioned the messages is usually the liable party, not the website. Here is how the chain works and where the consent fight stands.
Texas Telemarketing Texts: What Changed for Recipients in 2025 — Since September 1, 2025, a marketing text to a Texas number is a telephone solicitation under state law. SB 140 extended registration, no-call and enforcement rules to texts and opened DTPA remedies. Here is what it means for you.
The Texas No-Call List and Your State-Level Rights — The Texas no-call list is a state registry run under the Public Utility Commission's framework, separate from the national registry. Register on both: Texas law adds its own telemarketer duties and its own private action.
TCPA Class Action or Individual Claim: Which Gets a Consumer More? — A class action spreads one settlement across everyone who was called; an individual TCPA claim keeps the per-violation figure for you alone. It turns on your call count, the seller's identity and any arbitration clause.
Ringless Voicemail Drops: Are They Calls Under the TCPA? — Ringless voicemail is a call under the TCPA. The FCC ruled in 2022 that a voicemail delivered without ringing your phone is subject to the prerecorded-message rules, so a drop to a cell needs consent. Here is how to keep one.
How to Remove Your Home Address From the Internet, and Keep It Off — Your address reaches the internet through public records and data brokers. Remove it from the aggregators first, then the people-search sites and search results, and keep checking, because listings return.
Phishing vs Spam: Telling Them Apart and Responding to Each — Spam is bulk email trying to sell you something; phishing is a message built to take a credential, a payment or access. The tells, the header checks, where to report each, and the employee protocol that assumes someone will click.
How to Document Spam Texts So a Claim Actually Holds Up — Screenshot every spam text with the number and timestamp in frame, reply STOP once and keep everything after it, pull your carrier records, and log each message in a timeline. Never delete; the count and sequence are the claim.
Group Text Spam and iMessage Blasts: Why They Happen and What to Keep — Group text spam reaches dozens of numbers in one send, and iMessage blasts ride internet servers that carrier filters never see. Do not reply to the group; screenshot it, report it as junk, leave it, and keep the right evidence.
Debt Collection Robocalls: What the FDCPA and TCPA Allow and Forbid — A collector may robocall your cell phone only with your prior express consent, which you can revoke. The FDCPA separately limits how a third-party collector behaves. Here is where each statute draws its line and what to record.
Data Broker Opt-Outs: Which Sites to Hit First and Why Order Matters — Order your data broker opt-outs by reach: the aggregators that supply everyone else first, then the people-search sites that display you, then the marketing brokers. Log every request and ask for suppression, not just deletion.
The CAN-SPAM Act in Plain English: What Every Commercial Email Must Do — CAN-SPAM requires accurate headers, truthful subject lines, identification as an ad, a postal address and a working opt-out honored within the prescribed period. It is enforced by agencies and providers, not by recipients.
Your state privacy rights in 2026, in plain English — State privacy rights in 2026, mapped in plain English: who has deletion and opt-out rights, what California's new one-stop broker deletion platform changes, and what stays public.
The warm transfer: the moment a spam call becomes traceable — The recording that dialed you is anonymous. The live person it hands you to is not. Why the warm transfer is the moment a spam call becomes traceable, and what to note while the closer talks.
When clicking unsubscribe is safe — and when it isn't — The never-click-unsubscribe rule is half right. Two checks — do you know the sender, and does the mail authenticate — sort the legally binding links from the bait in about thirty seconds.
The 20-minute privacy audit — Search your own number, mine your inbox for breach notices, set three standing opt-outs, and map where your number lives publicly. Twenty minutes that end in a prioritized fix list.
Spoofed caller ID is not a dead end — The number is worthless as identification. The company that paid for the campaign usually is not — and there is a moment in most calls where it identifies itself.
Your business line has rights against spam texts — Funding offers and listing scams hit work cells all day because senders assume business numbers are fair game. The number is protected, and state statutes reach further.
The business owner's rights checklist — The operational checklist for business lines: sort your cells, make the internal do-not-call demand, put one person on the log, and turn disruption into documentation.
What a data broker actually knows about you — Not one tidy record — many, from different sources on different refresh cycles, topped with modeled guesses that are often wrong.
A sudden flood of newsletters? Check your bank first — A sudden flood of subscription confirmations is rarely a prank. Mailbox bombing exists to bury bank alerts and one-time codes while a fraud runs. The steps that matter, in the order that matters.
The seller vs. the dialer: who actually owes you — The company cashing the checks rarely places the calls. How on-behalf-of liability connects a robocall campaign to the seller who benefits from it, in plain English.
The auction that sells your form fill in seconds — One quote form and the phone rings within minutes. Ping trees auction your form fill in seconds, resell it for weeks, and stretch one checkbox across many callers. Here is the machinery.
Does replying STOP make it worse? — The common advice says never reply, even STOP, because it confirms your number is live. Half right. What STOP actually does legally, and when silence is the better move.
When spam floods the company inbox — CAN-SPAM does not stop at the office door — business inboxes are covered too. The real cost is payroll and missed leads. A triage playbook for shared inboxes, and when a pattern deserves a file.
The four-year window (and why waiting shrinks it) — Federal spam-call claims generally run on a four-year window, one clock per call. Waiting trades your oldest counts away while the evidence decays even faster.
DIY removal vs. a service: the honest math — DIY data-broker removal is free and genuinely works. The real cost is the re-check cycle across hundreds of sites, forever. The honest math on doing it yourself versus paying.
Do FCC and FTC complaints actually do anything? — An FCC or FTC complaint will not pay you. It feeds tracebacks, enforcement priorities, and carrier filtering. What complaint data actually does, and why it pairs with your own log.
Why the law prices texts per message — Every violating text is its own violation: $500 in statutory damages, up to $1,500 where willful. What per-message pricing means, and why your dated log is the multiplier.
Filters solve your inbox. They don't stop the sender. — Spam filters manage your experience of the problem; the sender keeps sending and the list keeps selling. When filtering alone is genuinely right, and what a preserved corpus of forged mail can open.
Opt-out words that count (and how to prove you said them) — Consent can be revoked by any reasonable means, and callers must honor it within ten business days. The exact words to use, and the thirty-second habit that proves you said them.
Why your mother shows up on your data-broker profile — People-search sites build household graphs from shared addresses, surnames and joint records. Your data lives on relatives' listings too, and one active relative can rebuild the whole graph.
The quote form that never stops texting — One insurance or loan quote form can turn into texts from a dozen companies you never named. How lead resale works, what the fine print claims, and what survives it.
What carrier blocking tools do — and what they can’t — Silence Unknown Callers, carrier apps, and Spam Likely labels treat your phone, not the campaign. What blocking tools actually do, where they fail, and what they can never reach.
How they got your address — Breach corpora, scrapers, pre-checked boxes, list brokers and data-broker profiles — the five routes your email travels into spam lists, and the habits that close each one going forward.
When you don't have a case (and what to do instead) — Purely spoofed scams with no identifiable seller, calls the rules treat differently, one-off contacts: the honest cases where there is no claim, and what still works.
After a breach: the first week, in order — A breach notice means a copy of your data is loose. The first week, in order: read what leaked, freeze credit free at all three bureaus, rotate reused passwords, and log the noise that follows.
New number, someone else's spam — A new phone number often arrives carrying the previous owner's sign-ups and marketing lists. Why recycled numbers come pre-spammed, and the cleanup sequence that works.
The state email laws that still pay — You cannot sue under the federal spam statute — but states still punish email that lies. Forged headers and misleading subjects carry $1,000 per email in California; the record decides everything.
How many calls does it take to have a case? — One unlawful robocall can violate the TCPA. A registry claim usually needs more than one call in a year from the same seller. How the counting works, and why the log is the case.
Small claims for spam calls: the honest guide — You can sue a robocaller in small claims court yourself. The honest version: the judgment is the easy part — identification, service, and collection are the real case.
The 'modeled you': the data they guessed, not gathered — Income bands, household headcounts, propensity scores: much of your marketing profile was never collected. It was guessed. Why wrong guesses still sell, and how to starve the model.
What the sender's number format tells you — Short codes, ten-digit numbers, toll-free senders and email gateways each say something about who is texting and how accountable they are. A field guide to reading the format.
The fake renewal invoice: anatomy of the scam — The invoice for an antivirus renewal you never bought has no links to click. The payload is the phone number — and the scam starts when you dial it. How the play works and what to do if you called.
The robocall consent rules, in plain English — Prerecorded and AI voices calling your cell phone need your prior express consent, and marketing needs it in writing. The robocall consent rules, translated into plain English.
Why the law prices a call at $500 without proving losses — Statutory damages price a violating call or text at $500 — up to $1,500 willful — with no proof of loss. Why Congress fixed the number, and how counts add up across a campaign.
Removed and back in 90 days: why listings repopulate — Your listing was removed and now it is back. Nothing malfunctioned: brokers re-acquire data on a schedule, and suppression rules match old records, not new ones. Removal is a cycle.
The "Hi, is this Sarah?" text is not a wrong number — The friendly misdirected text is an engagement test: any reply marks your number as live and human. How the long con opens, and why this differs from ordinary marketing spam.
SPF, DKIM and DMARC in plain English — Email lets senders write their own name tag. SPF, DKIM and DMARC are the three checks that call the bluff — what each verifies, what pass and fail mean, and why a failed verdict is evidence.
Should you answer, press 1, or stay silent? — Answering, pressing 1, and staying silent each do something specific to your number’s future on lead lists. The honest economics of engaging with spam calls, without the scolding.
The consent they claim you gave — Marketing robocalls to your cell require prior express written consent. The record is the caller's to produce, not yours to disprove — what the four words demand, and how to ask for proof.
What actually happens when you opt out of a people-search site — A people-search opt-out works, but not the way you think: it is suppression rather than deletion, it covers one record on one site, and it quietly expires. What happens after you click remove.
Why your dentist can text you but marketers can't — Appointment reminders, delivery updates and login codes ride on a different kind of consent than marketing blasts. The tiers explain which texts are legal and which are not.
Why spam calls come from your own area code — Neighbor spoofing puts a familiar area code on your screen because familiarity gets answered. How the trick works, what STIR/SHAKEN checks, and why the fake number was never the real story.