> ## Documentation Index > Fetch the complete documentation index at: https://docs.lettr.com/llms.txt > Use this file to discover all available pages before exploring further. # CAN-SPAM Requirements > What the US CAN-SPAM Act requires for commercial email, who must comply, and the seven rules for headers, opt-out, and sender identification. ## What Is CAN-SPAM? The **CAN-SPAM Act** (Controlling the Assault of Non-Solicited Pornography And Marketing Act) is a United States federal law enacted in 2003 that sets the rules for commercial email. It is enforced by the **Federal Trade Commission (FTC)** and establishes requirements for commercial messages, gives recipients the right to stop receiving emails, and spells out penalties for violations. CAN-SPAM applies to **any commercial email sent to US recipients**, regardless of where the sender is located. If you send marketing emails to people in the United States, you must comply. *** ## Who Must Comply CAN-SPAM applies to any sender of **"commercial electronic mail messages"** — any email whose primary purpose is the commercial advertisement or promotion of a product or service. This includes: * Marketing and promotional emails * Newsletters with commercial content * Transactional emails that contain significant commercial content beyond the transaction itself Even if your business is based outside the United States, CAN-SPAM applies to you if your emails reach US recipients. *** ## The Seven Requirements Your **From**, **To**, **Reply-To**, and routing information must be accurate and identify the person or business that initiated the message. In Lettr, always send from a verified domain that belongs to your organization. ```html theme={null} From: Sarah Johnson Reply-To: support@yourcompany.com From: Account Security ``` The subject line must accurately reflect the content of the message. Do not use misleading language to trick recipients into opening the email. ``` ✓ "25% off all shoes this weekend" ✓ "Your monthly product newsletter" ✗ "Re: Your account has been compromised" ✗ "You have a new message from a friend" ``` If your email is commercial or promotional in nature, you must clearly and conspicuously disclose that the message is an advertisement. The law gives you flexibility in how to do this, but it must be clear. ```html theme={null}

This email is a promotional message from Your Company Name.

``` Every commercial email must include your valid **physical postal address**. This can be a street address, a PO Box registered with the US Postal Service, or a private mailbox registered with a commercial mail receiving agency. ```html theme={null}

Your Company Name

123 Main Street, Suite 400

New York, NY 10001

``` You must provide a **clear and conspicuous** mechanism for recipients to opt out of future commercial emails. The opt-out process must be easy to find, easy to use, and available for at least 30 days after the message is sent. ```html theme={null}

Don't want to receive these emails? Unsubscribe here

``` Lettr handles unsubscribe processing automatically when you use the `data-msys-unsubscribe="1"` attribute on your unsubscribe link. The recipient is added to your suppression list and no further action is needed on your part. Once a recipient opts out, you must stop sending them commercial email within **10 business days**. You cannot charge a fee, require any information beyond an email address, or make the recipient take any step other than sending a reply email or visiting a single web page. When using Lettr's built-in unsubscribe mechanism, opt-outs are processed **immediately** — well within the 10-business-day requirement. You can monitor unsubscribe activity through the `unsubscribe` webhook event. Even if you hire another company to handle your email marketing, **you are still legally responsible** for compliance. Both the company whose product is promoted and the company that sends the message can be held liable. *** ## Transactional vs Commercial Email CAN-SPAM treats transactional and commercial emails differently. Transactional emails have lighter requirements but must still meet basic honesty standards. | Requirement | Commercial Email | Transactional Email | | --------------------------- | ---------------- | ------------------- | | Accurate header information | Required | Required | | Non-deceptive subject line | Required | Required | | Identify as advertisement | Required | Not required | | Physical postal address | Required | Not required | | Unsubscribe mechanism | Required | Not required | | Honor opt-out requests | Required | Not required | A **transactional email** is one that facilitates an already agreed-upon transaction, provides warranty or product information, updates account status, or delivers goods or services. Examples include order confirmations, shipping notifications, and password resets. If a transactional email contains significant commercial content, it may be reclassified as commercial. *** ## Implementation in Lettr ### Physical Address in the Footer Include your physical address in every commercial email template: ```html theme={null}

This email was sent by {{company_name or 'Your Company'}}

{{company_address or '123 Main Street, Suite 400, New York, NY 10001'}}

Unsubscribe  |  Email Preferences

``` ### Unsubscribe Link Use the `data-msys-unsubscribe="1"` attribute on any link to enable Lettr's automatic unsubscribe processing: ```html theme={null} Unsubscribe from these emails ``` When a recipient clicks this link, Lettr will: 1. Add the recipient to your suppression list 2. Fire an `unsubscribe` webhook event 3. Prevent future emails from being delivered to that address ### Accurate From Address Always send from a verified domain in Lettr. Use a From address that clearly identifies your business: ```html theme={null} From: Your Company ``` ### Honest Subject Lines Use Lettr's template variables to create dynamic but accurate subject lines: ``` {{if sale_active}}{{discount_percent}}% off — this weekend only{{end}} {{if order_shipped}}Your order #{{order_id}} has shipped{{end}} ``` *** ## Penalties Violations of the CAN-SPAM Act can result in fines of up to **\$50,120 per email** per violation. Both the sender and the company whose product is promoted can be held liable. In severe cases, criminal penalties including imprisonment may apply. Multiple parties can be held responsible for a single violation: * The **company** whose product or service is promoted * The **individual** who originated or transmitted the message * Any **third party** that assists in the transmission *** ## Common Mistakes Making the unsubscribe link tiny, low-contrast, or buried in dense text violates the requirement that the opt-out mechanism be "clear and conspicuous." Place the unsubscribe link in a visible location, typically the email footer, with legible text and adequate contrast. CAN-SPAM requires opt-outs to be honored within 10 business days. Some senders use manual processes that cause delays. With Lettr's `data-msys-unsubscribe="1"` attribute, unsubscribes are processed instantly, eliminating this risk. Every commercial email must include a valid physical postal address. This is one of the most commonly overlooked requirements. Add your address to your email templates and ensure it is present in every commercial send. Using subject lines like "Re:" or "Fwd:" on emails that are not replies or forwards is deceptive. Similarly, implying urgency or personal familiarity that does not exist violates the Act. Keep subject lines honest and reflective of the email content. CAN-SPAM does not require prior consent to send commercial email — it follows an **opt-out** model. However, purchased lists are still risky because they often contain invalid addresses, spam traps, and unengaged recipients, which will damage your deliverability. Even though sending to a purchased list may technically comply with CAN-SPAM, it is strongly discouraged. *** ## CAN-SPAM vs GDPR If you send email to recipients in both the US and the EU/EEA, you need to understand the differences between these two frameworks. | | CAN-SPAM (US) | GDPR (EU/EEA) | | --------------------------- | ---------------------------------------------- | ------------------------------------------------------------------------ | | **Consent model** | Opt-out — you can email until they unsubscribe | Opt-in — you need explicit consent before sending | | **Geographic scope** | Applies to emails sent to US recipients | Applies to emails sent to EU/EEA residents | | **Consent standard** | No prior consent required for commercial email | Freely given, specific, informed, and unambiguous consent required | | **Unsubscribe requirement** | Must provide opt-out mechanism in every email | Must provide opt-out, and consent must be as easy to withdraw as to give | | **Record keeping** | No specific consent record requirements | Must maintain records proving valid consent | | **Maximum penalties** | Up to \$50,120 per violation per email | Up to 4% of annual global turnover or €20 million | If you send to both US and EU audiences, the simplest approach is to comply with GDPR for all recipients, since its requirements are stricter and encompass CAN-SPAM compliance. *** ## Related Topics Understand GDPR requirements for email marketing to EU recipients. Implement effective unsubscribe flows that keep you compliant and protect your reputation. Meet the sender requirements enforced by major mailbox providers. Optimize your sending practices for maximum inbox placement.