Guides on spam email: why CAN-SPAM gives recipients no private right of action, where state falsity law applies, and why raw headers decide everything.
Phishing vs Spam: Telling Them Apart and Responding to Each — Spam is bulk email trying to sell you something; phishing is a message built to take a credential, a payment or access. The tells, the header checks, where to report each, and the employee protocol that assumes someone will click.
The CAN-SPAM Act in Plain English: What Every Commercial Email Must Do — CAN-SPAM requires accurate headers, truthful subject lines, identification as an ad, a postal address and a working opt-out honored within the prescribed period. It is enforced by agencies and providers, not by recipients.
When clicking unsubscribe is safe — and when it isn't — The never-click-unsubscribe rule is half right. Two checks — do you know the sender, and does the mail authenticate — sort the legally binding links from the bait in about thirty seconds.
A sudden flood of newsletters? Check your bank first — A sudden flood of subscription confirmations is rarely a prank. Mailbox bombing exists to bury bank alerts and one-time codes while a fraud runs. The steps that matter, in the order that matters.
When spam floods the company inbox — CAN-SPAM does not stop at the office door — business inboxes are covered too. The real cost is payroll and missed leads. A triage playbook for shared inboxes, and when a pattern deserves a file.
Filters solve your inbox. They don't stop the sender. — Spam filters manage your experience of the problem; the sender keeps sending and the list keeps selling. When filtering alone is genuinely right, and what a preserved corpus of forged mail can open.
How they got your address — Breach corpora, scrapers, pre-checked boxes, list brokers and data-broker profiles — the five routes your email travels into spam lists, and the habits that close each one going forward.
The state email laws that still pay — You cannot sue under the federal spam statute — but states still punish email that lies. Forged headers and misleading subjects carry $1,000 per email in California; the record decides everything.
The fake renewal invoice: anatomy of the scam — The invoice for an antivirus renewal you never bought has no links to click. The payload is the phone number — and the scam starts when you dial it. How the play works and what to do if you called.
SPF, DKIM and DMARC in plain English — Email lets senders write their own name tag. SPF, DKIM and DMARC are the three checks that call the bluff — what each verifies, what pass and fail mean, and why a failed verdict is evidence.