Smart. Focused. Email.
Fast, cross-platform email designed to filter out the noise - so you can focus on what's important.
Definition
💡 CAN-SPAM Act: the US law that decides what your marketing and outreach emails have to say, and how easy you're required to make it for someone to tell you to stop. It's been on the books since 2003, and it's still the reason every promotional email you get has an unsubscribe link at the bottom. If you send commercial email to anyone in the US, whether that's a newsletter, a cold outreach campaign, or a product announcement, you're on the hook for CAN-SPAM compliance.
Why this isn't just a marketer's problem
CAN-SPAM isn't just about mass spam blasts. The Federal Trade Commission's compliance guide is clear that it covers any electronic message whose primary purpose is commercial advertising or promotion, and there's no carve-out for business-to-business email. So if you're a consultant emailing former clients about a new offering, or a founder announcing a product launch, you're covered. Not just the obvious spammers.
CAN-SPAM is also narrower than it sounds. It regulates commercial email content and consent, not data privacy broadly. If you're also collecting and storing customer data alongside your list, that's a separate question governed by laws like GDPR or CCPA, depending on where your recipients live.
If you're in sales, business development, or running your own shop, you're probably sending some mix of relationship email and promotional email every week. And the line between them matters. A follow-up thanking someone for a meeting? Fine. That same follow-up with a pitch deck and a "book a demo" link? Now it's commercial, and CAN-SPAM applies.
The penalties aren't theoretical, either. The FTC can pursue penalties of tens of thousands of dollars per violating email, and it doesn't cap the total. Ignorance isn't a defense here.
Sloppy compliance tends to get punished twice, too. Emails missing these basics are also the kind that trip spam filters, so you can lose the inbox before the FTC ever gets involved.
The good news is that the actual requirements are short. You don't need a lawyer on retainer to get this right.
What CAN-SPAM actually requires
You've got eight core obligations and most of them are just good email hygiene:
Accurate header information. Your "From," "To," and routing info have to reflect who you actually are. No spoofed addresses, no misleading display names.
Honest subject lines. If the email is about a webinar, the subject line can't promise a free gift card. Simple as that.
Clear identification as an ad. You don't have to slap "ADVERTISEMENT" across the top. But it has to be obvious, at a glance, that this is promotional.
A real postal address. A street address, PO box, or registered mailbox. Not optional.
A working opt-out mechanism. An unsubscribe link, a reply option, whatever you use, it just has to be easy to find and easy to use.
Prompt honoring of opt-outs. You get 10 business days once someone unsubscribes. After that, continuing to email them isn't just annoying, it's a violation.
No selling opted-out addresses. Once someone's out, they're out. You can't pass their address along either.
Monitoring what others send on your behalf. If you hire an agency or use affiliates, their emails are still your liability.
Miss the address or the opt-out, and you're exposed. That's the part people forget.
How to comply
Start by auditing your own outbound: does every promotional email include your business address and a real unsubscribe option? Most email marketing platforms build compliant opt-out mechanisms into their templates automatically, which takes one variable out of the equation. If you're running double opt-in signups, a verification email confirming someone actually wants your list doubles as useful proof of consent later. But if you're sending outreach manually through Gmail or Outlook, you need to add that footer yourself, every time.
Set a hard internal rule: no promotional send goes out without a postal address and opt-out link, full stop. And if someone replies "unsubscribe," honor it that day. Waiting for the 10-day window to expire is technically legal, but it's also a great way to annoy someone who might've become a customer.
Where CAN-SPAM compliance trips people up
Does CAN-SPAM apply to business-to-business email?
Yes. The law makes no exception for B2B messages. If the primary purpose is commercial, it's covered, regardless of who's on the receiving end.
How long do I have to honor an unsubscribe request?
Ten business days, maximum. Faster is always better. Recipients notice when you stop right away, and they notice when you don't.
Do I need to write the word "advertisement" somewhere in the email?
No. The law gives you flexibility in how you disclose it, as long as an ordinary person can tell at a glance that the message is promotional.
Is a PO box acceptable for the required postal address?
Yes. A street address, PO box, or a registered private mailbox all satisfy the requirement.
What actually happens if I violate CAN-SPAM?
The FTC can pursue penalties of tens of thousands of dollars per violating email, with no cap on the total. Multiple parties, including agencies sending on your behalf, can be held liable at once.
Related terms