## Computer Misuse and Unauthorized Access Using someone else's personal information, such as their email address, to sign them up for services without their consent can also violate computer crime laws. At the federal level in the US, the Computer Fraud and Abuse Act (CFAA) addresses unauthorized access to computers and networks. While the CFAA is typically used to prosecute hacking, using automated tools or scripts to flood an email address, or accessing subscription portals under false pretenses, can cross the line into unauthorized computer use. This is especially true if the action causes documented financial damage or disrupts business operations. ## The CAN-SPAM Act and Consent
Many people wonder if the CAN-SPAM Act applies to this situation. The Controlling the Assault of Non-Solicited Pornography and Marketing (CAN-SPAM) Act of 2003 is a federal law that establishes rules for commercial email. However, the CAN-SPAM Act primarily regulates the businesses sending the emails, not the third-party individuals who sign others up. Under CAN-SPAM, senders must provide a clear way for recipients to opt out of future mailings. When someone signs you up for a legitimate newsletter, the sender believes they have consent. While the sender may not be violating the law, the person who fraudulently provided your email address without your consent is the party committing the wrongful act. ## Violations of Terms of Service Beyond criminal laws, signing someone else up for spam violates the Terms of Service (ToS) of almost every website and email service provider.
When signing up for a newsletter or service, users must agree to terms that generally prohibit submitting false information or using the platform to harass others. Violating these terms can result in: * IP address bans from the hosting platforms. * Suspension of the perpetrator's own email or internet service provider (ISP) accounts. * Civil lawsuits if the action causes documented financial harm to an individual or business. ## What to Do If You Are Targeted by Email Bombing If you find your inbox flooded with subscription confirmation emails, you are likely the victim of an email bomb. Taking the right steps can help mitigate the damage:
* **Check your financial accounts immediately:** Email bombs are often used as a distraction technique. Attackers flood your inbox so you miss legitimate notifications about unauthorized purchases, bank transfers, or password changes. * **Do not click "unsubscribe" links in suspicious emails:** If the emails are from illegitimate or malicious sources, clicking unsubscribe can confirm that your email address is active, leading to even more spam. Only unsubscribe from recognizable, legitimate companies. * **Set up spam filters:** Create rules in your email client to automatically send emails containing words like "subscription," "confirm," or "welcome" to a temporary folder until the attack stops. * **Report the harassment:** If you know who is doing it, keep records of the emails and report the behavior to local law enforcement or the Internet Crime Complaint Center (IC3). ## Conclusion Signing someone else up for spam email lists is not a harmless joke. When done to harass or disrupt someone's life, it can lead to criminal charges under cyberharassment and computer misuse statutes, as well as civil liability. If you are experiencing this type of online harassment, document the activity and take steps to secure your personal accounts immediately.
