Ask Laura: Is it spam?

MarinHeadlandsSmall


Dear Laura,

I’ve been having a discussion with a colleague who is particularly frustrated by unwanted email he gets from retailers. Specifically, these are retailers who he’s never given an email address, but whose sites he’s browsed recently. He understands how retargeting works with web ads, but questions if it’s really acceptable to retarget in the email channel or if that violates CAN-SPAM or other anti-spam legislation.

I think it’s an interesting discussion, but I’m pretty sure that my colleague is wrong. These companies can retarget because people opt-in to “partner” emails all the time, and “partners” often equals “retargeters”. It’s not spam, and it’s not in violation of CAN-SPAM. 

So what do you think? Spam or not-spam?

Yours in contradictions,

Schrödinger’s Box-of-Spam


Dear Schrödy,
I understand this paradox of which you speak. Let me explain the process a bit for those who don’t.

Through email a retargeter sets a cookie on a machine, linking the web browser to the email address that received the cookie. As people use that web browser to surf, they can land on sites that belong to the retargeter’s customers. This triggers a process that can result in the address owner receiving mail. This mail is often unexpected and sometimes unwanted from the website that’s been browsed.

This may seem like a violation of CAN-SPAM, but that law doesn’t define spam as unexpected or unwanted email. CAN-SPAM says you can send mail to anyone until they tell you to stop. That mail has to meet certain criteria (opt-out, no falsified headers, clearly marked as advertising), but there is nothing in CAN-SPAM that prohibits buying and selling of lists or email addresses or even sending mails to people who simply visit your website.

ISP standards are different than legal standards and there is extensive case law stating that ISPs can block whatever mail they deem problematic. This case law predates CAN-SPAM and was not overruled by CAN-SPAM.

Sending mail to lists that you purchased, rather than directly collected opt-ins, is generally frowned upon by most of the folks handling filters, both at the ISP level and the commercial filter levels. From the ISP perspective, what the recipient wants is the gold standard. ISPs, particularly the free webmail providers, make money the longer the user stays in the inbox. They want the user to like visiting the inbox, so they filter mail they believe (through analysis of the user and analysis of the overall mail coming into the ISP) is unwanted.

It is certainly legal to use retargeting sites, partner sites or co-registration sites to collect permission to send mail to people. Some of them even are up front about the permission. But the reality is that many of the “partner” and “co-reg” and “database” sites are cesspools of permission. It might be permission on the outside, in that the person willingly gave their email address to the website. But it’s not real permission because they didn’t know what they were consenting to.

A few months ago I was investigating an address source for a client and spent nearly an hour reading the various terms and conditions pages and privacy policy pages. I was trying to determine if the address source was allowed to sell addresses to my client. I never could quite interpret the legalese enough to figure it out. What was clear was that your average petition signer would not realize they were agreeing to have their address sold.

So is it spam? Yes and no. Is it a best practice for customer acquisition and retention? Absolutely not. Will it ultimately impact deliverability for the brand? I think so, and I advise my clients not to do it.

Hope this helps,
Laura


Confused about delivery in general? Trying to keep up on changing policies and terminology? Need some Email 101 basics? This is the place to ask. We can’t answer specific questions about your server configuration or look at your message structure for the column (please get in touch if you’d like our help with more technical or forensic investigations!), but we’d love to answer your questions about how email works, trends in the industry, or the joys and challenges of cohabiting with felines.

Related Posts

June 2016: The Month in Email

We’re officially halfway through 2016, and looking forward to a slightly less hectic month around here. I hope you’re enjoying your summer (or winter, for those of you in the Southern Hemisphere).
 

Read More

What not to do when buying lists

Saturday morning I check my mail and notice multiple emails from the DMA. Yes, I got three copies of an email from the US Direct Marketing Association with the subject line Kick It Up A Notch With The DMA Career Center. It seems the DMA are buying addresses from various companies. Because I use tagged email addresses, this means their naive de-duping doesn’t realize that laura-x and laura-y are the same email address. Of course, they’ve also managed to send to an untagged email address, too. I have no idea where they got that particular address; I’m sure I’ve never handed that address over to the DMA for any reason.
Saturday afternoon, I check one of the professional filtering / anti-spam mailing list.  Some subscribers are asking for copies of spam from 97.107.23.191 to .194. They’d seen a lot of mail to non-existent email addresses from that range and were looking to see what was going on and who was sending such bad mail. Multiple people on the list popped up with examples of the DMA mail.
Sunday morning, I checked the discussions wherein I discovered the DMA was added to the SBL (SBL 202218, SBL 202217, SBL 202216). It seems not only did they hit over a hundred Spamhaus spamtraps, they spammed Steve Linford himself.

Read More

Ugg, a spammer.

I’ve written before about how there is some (I’m sure lovely) woman in the UK who has been connected to my email address. I get a lot of mail for her. Mostly spam. She doesn’t seem to be using the address, but I regularly get mail addressed to MRS. LAURA CORBISHLEY (all caps, always). Typically these messages are advertising various UK stores and products. Sometimes they’re mortgage offers. A few have been sweepstakes only open to UK residents.
ShadyGuyWebsite
I generally forward these spams off to various blocklists with the note it’s my “UK spamtrap” and they take whatever actions seem appropriate to them.
2016-03-21_14-33-39Today, though, I got my first US spam to Mrs. Laura Corbishly. From a Yesmail customer called sanuk.com. I’m getting a website error (they get smacked for spamming already?) but a little research tells me this is shoe company that owns a bunch of brands, including Ugg.
Yes, Ugg a Spammer. They even even have a disclaimer at the bottom of the email telling me they’re a spammer!
2016-03-21_14-35-54
Not so much, no. It appears, though, that the data brokers selling Mrs. Corbishley’s name connected to my email address have figured out that no one ever actually acts on any of their UK offers. So now they’re selling into the US market in hopes that they might entice a purchase?
On a purely nosy level, I’d love to know who was selling the address. First off, I’d love to know where they got this info in the first place. Secondly, what horrible database are they using that keeps name data in all caps? (When I get email to this trap I think they’re shouting at me, as if I’m the one who is wrong about my name. Maybe they think if they yell at me loud enough will I decide I really am the happy wife of Mr. Corbishley of Swindon, UK. )
I do tell clients that it’s useful to remind customers that they signed up for mail, especially if they haven’t mailed for a while. So I know not every email with a “you opted in” reminder is spam, but I only notice those things when I haven’t opted in. It’s something I mostly gloss over if I really did opt-in. I wonder if this is how other folks react to “you opted in” notices, too.
I do recommend the reminder be much more specific than “you opted in at our website.” Give the user a date, a time, something that isn’t just something any company can, and many do, make up.
 
 

Read More