Know what you're promising, and keep your promises

Although we can’t always provide a personal response to your complaint, we do investigate all reports. Please don’t interpret a lack of response as a lack of action taken. If we find that a customer is violating our policies, we will take make sure they stop the violating activity.

That’s the response I had when I reported a particularly annoying spammer to a major ISP this afternoon. It’s also the response I had from them when I reported the same spammer, on the same IP address last week. And in June. And … well, you get the idea.
Either they don’t consider spamming from their network to be a violation of their policies, or they’re months behind on handling abuse issues, or the boilerplate response they’re sending isn’t entirely true.
That gives, if anything, a worse impression than not responding at all. It’s something that’s going to make me remember that ISP, and that they have an ineffective abuse desk. At best I’ll advise against people using their service for business use, due to deliverability concerns, and throw stale bread rolls at their representatives at the next MAAWG. At worst I’ll gather data to justify a blacklist for their space, which is something that can really ruin their stats.
I’m sure that they don’t actually have a “spamming from our business network is fine” policy, and that their abuse staff are just overworked and spending most of their time fighting the biggest fires. But I’m also fairly sure that their abuse staff don’t know what’s in their boilerplate response, or haven’t taken to heart the promise they’re making in response to every report. (It’s been in use pretty much unchanged for over a decade, probably longer than any of their abuse staff have been in that position.)
What are you promising to people who report spam? Are you keeping your promise?

Related Posts

Amendment is futile, part 2

When Yahoo filed for dismissal of the Holomaxx complaint, they ended the motion with “Amendment would be futile in this case.” The judge granted Yahoo’s motion but did grant Holomaxx leave to amend. Holomaxx filed an amended complaint earlier this month.
The judge referenced a couple specific deficiencies of Holomaxx’s claims in his dismissal.

Read More

Letters to the abuse desk

Ben over at Mailchimp has shared some of the mail that comes into the mailchimp abuse desk. It’s a post well worth a read.
One of the things that leaped out at me during that post is that the positive emails highlight how much the Mailchimp delivery and compliance people help their users get good delivery. They’re not just saying “you can’t do that” because they’re mean or they want to make life more difficult for their users. They are saying no because what the user wants to do is a bad idea.
I also appreciated the letter from the customer who had to tell Mailchimp that management had decided to not take Mailchimp’s advice. This is something that happens to me sometimes. Clients agree with my recommendations but management decides that they’re not going to implement them. It can be difficult to watch, particularly when I then see how much that company is struggling with blocks or see them show up on some of the big spam lists. But, it’s also part and parcel of the job. Not everyone, no matter how effectively I make my cases, will take my advice.
 
 

Read More

How to respond to an abuse complaint

There’s a lot of variation in how ESPs respond to a report of one of their customers sending spam. Almost all ESPs will suppress future email to the recipient. Most will also note that there was a complaint about the sender, and use a count of those complaints for reporting, triage and escalation of problems. Beyond that, though, there’s little consistency.
I sent a spam report to abuse@mailchimp last week. The spam was nothing special – it was an advert about bouncy castles from a small company local to me sent to a tagged address used to register a domain that expired several years ago, so I knew someone had purchased a “targeted” list. The mail I sent to mailchimp was just one line, mentioning where the email address had come from and a full copy of the email with headers – again, nothing special.
The response I got back from Meredith was particularly good, so I thought I’d share it.

Read More