What Is CAN-SPAM? The US Rules for Commercial Email | BounceZero
Glossary›Leads and prospecting

What Is CAN-SPAM?

CAN-SPAM, the Controlling the Assault of Non-Solicited Pornography and Marketing Act of 2003, is the US federal law on commercial email. Unlike UK and EU rules it does not require consent before sending; it requires accurate header and sender information, a non-deceptive subject line, identification as an advertisement where applicable, a valid physical postal address, a clear opt-out mechanism honoured within ten business days, and it prohibits sending to harvested addresses. Each violating message can carry a civil penalty in the tens of thousands of dollars.

By Ayoub Lebda, founder of BounceZero, a UK-registered email verification service|10 October 2026

How it is measured and used

Compliance is a checklist per message template: sender identity, subject accuracy, postal address, opt-out link, and a suppression process that applies within ten days. Harvesting, meaning collecting addresses by scraping sites or guessing combinations, is the provision outbound teams most often forget.

Deliverability rules are stricter than the law. CAN-SPAM permits sending to an unconsented US business address; Google and Microsoft still throttle at 2% bounces and 0.3% complaints. Verification before sending satisfies the mailbox providers, which is the constraint that bites first.

Example with numbers

A US sequence template is reviewed: real sender name and reply address, subject describing the content, company postal address in the footer, one-click unsubscribe synced to the suppression list within a day. The list is finder-sourced rather than scraped, and verified before load, so the harvesting provision and the 2% bounce line are both cleared.

Related terms

Go deeper

Email GDPR Compliance Guide 2026

CAN-SPAM, PECR and GDPR compared

Check whether your leads are reachable

Verify a list or a single address. 100 free checks a month, unknowns refunded.

Verify Leads - Free
AL

Written by

Ayoub Lebda

Founder, BounceZero - Email-infrastructure engineer

Ayoub built BounceZero's 5-stage validation pipeline, its dedicated BGP-announced IP infrastructure, and the Patroni HA PostgreSQL cluster behind every verification. Previously built high-volume email delivery infrastructure. Trained at 1337 Benguerir (École 42 network, 2019). Open-source: bgp_analyzer.