Signing someone up for junk mail without their consent can be illegal, depending on the type of mail and the intent behind the act. It is not always a harmless prank. In some cases, it crosses into criminal territory.
Most people assume this is just a petty annoyance. But federal law, specifically the CAN-SPAM Act, sets real penalties for unauthorized email sign-ups. Physical mail harassment has its own set of legal teeth through USPS regulations and state harassment statutes.
This article covers every angle: what the law actually says, which states take this seriously, what penalties look like, and how victims can document and report it.
Is It Illegal to Sign Someone Up for Junk Mail
Yes, signing someone up for junk mail without their consent can be illegal, and the severity depends on the type of mail and the intent behind doing it.
At the federal level, electronic junk mail falls under the CAN-SPAM Act of 2003. Physical junk mail is governed by USPS regulations. Neither type of unsolicited mail is entirely outside the law when it is used deliberately to target someone.
The key legal question is always intent. A one-time prank is treated differently than a sustained campaign designed to overwhelm or intimidate someone. Courts and law enforcement agencies look at whether the person signing someone up intended to cause harm, embarrassment, or distress.
If you did this to an ex-partner, a coworker, or a neighbor as part of a conflict, you are in riskier legal territory than most people realize. The line between “annoying prank” and “harassment” is thinner than it looks.
Quick Facts:
- Federal law (CAN-SPAM Act) governs email junk mail sign-ups
- Physical mail falls under USPS regulations and state harassment statutes
- Intent to harass elevates the act from civil to potentially criminal
- Repeated acts strengthen any legal case against you
Is Signing Someone Up for Spam Illegal
Signing someone up for spam is illegal when it violates the CAN-SPAM Act or constitutes a pattern of harassment under state law.
The CAN-SPAM Act (15 U.S.C. 7701 et seq.) makes it unlawful to send commercial email using false or misleading header information. When someone signs another person up for bulk commercial email using that person’s email address without consent, they are potentially triggering a violation. The act specifically prohibits deceptive practices tied to electronic commercial messaging.
The FTC enforces the CAN-SPAM Act and has the authority to pursue civil penalties. Individual penalties can reach up to $51,744 per separate email violation as of current FTC penalty adjustment tables. That figure is not per campaign. It is per email.
Beyond federal law, many state spam statutes add another layer. California, Virginia, and Washington have passed their own anti-spam laws that work alongside the federal framework.
| Law | Jurisdiction | Key Prohibition |
|---|---|---|
| CAN-SPAM Act (15 U.S.C. 7701) | Federal | False headers, deceptive commercial email |
| California Business & Professions Code 17529 | California | Unsolicited commercial email with false info |
| Virginia Computer Crimes Act | Virginia | Unauthorized spam using another’s identity |
| Washington Spam Law (RCW 19.190) | Washington | Falsified transmission info in bulk email |
Can You Go to Jail for Signing Someone Up for Junk Mail
You can go to jail for signing someone up for junk mail, but only under specific circumstances where criminal laws are triggered.
A random one-time sign-up is unlikely to result in criminal charges. But when the behavior is repeated, targeted, and intended to harass, it can qualify as criminal harassment, cyberstalking, or misuse of electronic communications under both federal and state statutes.

The Computer Fraud and Abuse Act (CFAA, 18 U.S.C. 1030) can apply when someone uses a computer to engage in unauthorized acts that damage another person. Courts have interpreted “damage” broadly in harassment contexts. Prosecutors in some states have used cyberstalking statutes to charge people who orchestrated mass spam subscription campaigns against victims.
In extreme cases, federal prosecutors have charged individuals with wire fraud and computer crimes for subscription bombing attacks. Jail time in those cases ranged from months to years depending on the scale of the campaign and the harm caused to the victim.
Bold Fact: In 2016, a man was federally charged after conducting a targeted subscription bomb attack against a journalist, signing her up for thousands of email lists in hours. The case set a precedent for treating this type of behavior as criminal.
Is It Harassment to Sign Someone Up for Mailing Lists
Yes, signing someone up for mailing lists can legally constitute harassment when it is done repeatedly, deliberately, and with the intent to annoy, alarm, or distress the victim.
Harassment under most state statutes requires a pattern of conduct, not a single act. A single sign-up is unlikely to meet that threshold. But signing someone up for dozens or hundreds of lists over days or weeks creates a documented pattern that fits the legal definition in many states.
Several states have electronic harassment statutes that specifically apply to this type of behavior. Illinois, under the Harassment by Electronic Communications Act (720 ILCS 135/1-2), makes it illegal to use electronic communications to harass or cause emotional distress. Florida Statute 784.048 defines cyberstalking to include repeated electronic contact that causes substantial emotional distress.
The practical test courts apply is whether a reasonable person would find the conduct harassing. If the victim had to spend hours unsubscribing from hundreds of lists, that creates a strong factual basis for a harassment claim.
| State | Relevant Statute | Threshold for Electronic Harassment |
|---|---|---|
| Illinois | 720 ILCS 135/1-2 | Repeated electronic communications with intent to harass |
| Florida | Fla. Stat. 784.048 | Repeated contact causing substantial emotional distress |
| California | Cal. Penal Code 653m | Repeated electronic contact with intent to annoy |
| Texas | Tex. Penal Code 42.07 | Repeated communications with intent to harass |
| New York | N.Y. Penal Law 240.30 | Communications with intent to harass or alarm |
Key Takeaway: The act of signing someone up for junk mail sits in a legal gray area at first glance, but federal spam law and state harassment statutes can both apply depending on intent, frequency, and the harm caused to the victim.
CAN-SPAM Act and Signing Someone Up Without Consent
The CAN-SPAM Act does not require affirmative consent before sending commercial email, but it absolutely prohibits using false information to subscribe someone without their knowledge.
This is a distinction a lot of people miss. The CAN-SPAM Act was designed to regulate commercial emailers, not individuals pulling pranks. But it has provisions that reach individual bad actors. Specifically, Section 5 of the Act (15 U.S.C. 7704) prohibits false or misleading transmission information. Signing someone up for a commercial list using their email without consent involves providing false subscription consent, which falls under this prohibition.
The FTC has clarified in its guidance documents that the Act applies to anyone who causes commercial email to be sent, not just the original sender. If you sign someone up for a mailing list, you are a proximate cause of the emails they receive.
Businesses that receive complaints about fraudulent sign-ups are also protected under the Act. They have grounds to pursue legal action against the person who abused their lists.
Key Provisions of the CAN-SPAM Act Relevant to Unauthorized Sign-Ups:
- Prohibition on false or misleading header information
- Ban on deceptive subject lines
- Requirement for a valid physical postal address
- Civil penalty of up to $51,744 per violation
- Criminal penalties for willful violations including fines and imprisonment up to 5 years
Physical Junk Mail Laws in the US
Physical junk mail sent to someone’s mailbox is regulated differently than email spam, but deliberately flooding someone with physical mail still has legal consequences.
The USPS operates under 39 U.S.C. 3008, which allows recipients of pandering advertisements to request that the Postmaster General prohibit a mailer from sending future material to them. This is the “Prohibitory Order” mechanism. While this law targets mailers, using it against someone who is flooding another person with physical junk mail is possible through creative legal application.
More directly, deliberately arranging for someone to receive unwanted physical mail as part of a harassment campaign can trigger state mail harassment laws. Some states treat persistent unwanted postal contact as a form of stalking or harassment under their criminal codes.
Signing someone up for physical catalogs, magazine trials, or product samples without consent also raises identity theft concerns when you use their personal information without authorization. Misusing someone’s personal details to initiate commercial relationships can violate state identity theft statutes in several jurisdictions.
| Regulation | Governing Body | What It Covers |
|---|---|---|
| 39 U.S.C. 3008 | USPS / Congress | Pandering mail, Prohibitory Orders |
| State harassment statutes | State legislatures | Physical mail as part of harassment pattern |
| State identity theft laws | State attorneys general | Misuse of personal info for unauthorized sign-ups |
| Postal Service Act (various sections) | USPS / DOJ | Criminal mail fraud and mail abuse |
Difference Between Spam and Junk Mail Legally
Legally, spam refers to unsolicited commercial electronic messages, while junk mail refers to unsolicited physical mail sent through postal services. The laws governing each are entirely separate.
Spam falls under the CAN-SPAM Act at the federal level, plus a patchwork of state electronic communications laws. Physical junk mail is governed by USPS regulations and the federal Postal Reorganization Act. Neither word has a universal legal definition that applies to both types, which is why so many people get confused when researching this topic.
The legal consequences for abusing each type are also different. Email spam violations can result in civil penalties up to $51,744 per email from the FTC. Physical mail abuse typically escalates through USPS complaints, Prohibitory Orders, and then state harassment or stalking charges if behavior continues.
One key practical difference: email spam is far easier to trace and document. IP addresses, server logs, and email headers create a digital trail. Physical mail harassment is harder to trace back to a specific person unless they used their real name or a traceable payment method when signing someone up.
Key Takeaway: Email and physical junk mail are governed by completely different legal frameworks. Knowing which type of mail is involved is the first step in figuring out which laws apply and which agency to contact.
Penalties for Signing Someone Up for Unwanted Mail
Penalties for signing someone up for unwanted mail range from civil fines to criminal charges, depending on intent, scale, and the laws triggered.
Under the CAN-SPAM Act, civil penalties reach up to $51,744 per separate email for FTC enforcement actions. Criminal penalties for willful CAN-SPAM violations include fines and imprisonment of up to five years under 18 U.S.C. 1037. These criminal provisions apply when someone intentionally sends or causes to be sent commercial email with the purpose of deceiving.
State-level harassment charges carry their own penalties. In Illinois, criminal harassment by electronic communications is a Class B misdemeanor, carrying up to 180 days in jail and fines up to $1,500. In California, repeated electronic harassment under Penal Code 653m can be charged as a misdemeanor with penalties including up to one year in county jail.
| Violation Type | Law | Maximum Penalty |
|---|---|---|
| Email spam (civil) | CAN-SPAM Act | $51,744 per email |
| Email spam (criminal) | 18 U.S.C. 1037 | 5 years imprisonment |
| Electronic harassment | Illinois 720 ILCS 135 | 180 days jail, $1,500 fine |
| Cyberstalking | Florida Stat. 784.048 | 1 year jail (first offense) |
| Electronic harassment | California Penal Code 653m | 1 year county jail |
| Mail fraud | 18 U.S.C. 1341 | Up to 20 years imprisonment |
Can You Sue Someone for Signing You Up for Spam
Yes, you can sue someone for signing you up for spam, and there are multiple legal theories available to support that lawsuit.
The CAN-SPAM Act allows Internet Service Providers (ISPs) to bring civil suits under 15 U.S.C. 7706. While private individuals do not have a direct private right of action under CAN-SPAM itself, state laws in California, Virginia, and Washington do allow private lawsuits for spam violations. California’s Business and Professions Code 17529.5 explicitly permits recipients of illegal spam to sue for $1,000 per email or actual damages, whichever is greater.
Beyond spam-specific laws, victims can pursue civil harassment claims, intentional infliction of emotional distress (IIED) claims, and in some states, civil stalking or harassment tort claims. IIED requires showing the conduct was extreme and outrageous and caused severe emotional distress. Courts have found that sustained subscription bombing campaigns meet this standard.
Small claims court is a realistic option for individual victims when documented damages are modest. For larger campaigns, civil suits in state or federal court become more appropriate.
Your Civil Legal Options as a Victim:
- File a complaint with the FTC (FTC.gov/complaint)
- File a complaint with your state attorney general’s office
- Pursue a civil harassment claim in state court
- Sue under California’s anti-spam law if your state allows private actions
- File an IIED claim if the emotional harm was severe and documented
Civil vs Criminal Liability for Junk Mail Harassment
Civil and criminal liability for junk mail harassment operate on completely different tracks and can both be pursued simultaneously for the same conduct.
Civil liability means the victim sues the person responsible and seeks money damages. Criminal liability means the government prosecutes the offender and seeks fines or imprisonment. Nothing stops a victim from pursuing both at the same time, and in serious harassment cases, both tracks are worth exploring.
For civil liability, the plaintiff needs to prove their case by a preponderance of the evidence, which means “more likely than not.” For criminal charges, the prosecutor must prove guilt beyond a reasonable doubt. This is why it is easier to win a civil case than to secure a criminal conviction for the same conduct.
Think of it like the O.J. Simpson situation: acquitted criminally, but found liable civilly. The same principle applies here. Someone can escape criminal charges for junk mail harassment but still lose a civil lawsuit and owe thousands in damages.
| Track | Who Pursues It | Standard of Proof | Outcome if Successful |
|---|---|---|---|
| Civil | Victim | Preponderance of evidence | Money damages |
| Criminal | Government | Beyond reasonable doubt | Fines, jail, probation |
| FTC action | FTC | Regulatory standard | Civil penalties |
| State AG action | State attorney general | Regulatory standard | Fines, injunctions |
Key Takeaway: Both civil and criminal legal paths exist for junk mail harassment. The civil route is more accessible to victims and often more likely to produce a tangible result, especially when the criminal standard of proof is harder to meet.
State Laws on Mail Harassment
State laws on mail harassment vary significantly, but nearly every state has at least one statute that can apply when someone deliberately floods another person with unwanted mail as part of a harassment campaign.
The states most likely to criminally prosecute this behavior have explicit electronic harassment or cyberstalking statutes that cover electronic communications broadly, including email subscriptions. Illinois, California, Florida, Texas, and New York are the most aggressive states in this area.
Some states require a formal “cease and desist” or formal notice to the harasser before charges can be filed. Others do not. This matters practically because documenting that you told the person to stop, and they continued, strengthens both civil and criminal cases.
States without specific electronic harassment laws still have general harassment, stalking, and disorderly conduct statutes that prosecutors can use. The behavior needs to fit the general pattern: repeated, unwanted contact designed to distress the victim.
| State | Primary Applicable Statute | Key Requirement |
|---|---|---|
| California | Penal Code 653m | Repeated contact with intent to annoy |
| Texas | Penal Code 42.07 | Repeated communications with intent to harass |
| New York | Penal Law 240.30 | Intent to harass or alarm |
| Florida | Stat. 784.048 | Substantial emotional distress, repeated contact |
| Illinois | 720 ILCS 135/1-2 | Electronic communications to harass or distress |
| Georgia | O.C.G.A. 16-11-39.1 | Harassing communications, repeated conduct |
| Washington | RCW 9.61.260 | Cyberstalking, intent to harass |
Cyberstalking Laws and Spam Mail
Cyberstalking laws can apply to spam mail campaigns when the sign-up behavior is part of a broader pattern of targeted harassment against a specific individual.
The federal cyberstalking statute (18 U.S.C. 2261A) makes it a crime to use electronic communications or internet services to engage in conduct that causes substantial emotional distress to another person. Courts have increasingly interpreted “electronic communications” broadly. A sustained spam subscription bombing campaign directed at a specific person can fit within this definition.
The key legal element in cyberstalking cases is the specific targeting of an individual. Random spam affects thousands of people. Cyberstalking involves deliberately targeting one person to cause them specific harm or distress. When signing someone up for junk mail is paired with other harassment behaviors, like threats, physical contact, or property damage, prosecutors build stronger cyberstalking cases.
Penalties under the federal cyberstalking statute range from one year to five years imprisonment for a first offense, scaling up significantly when the conduct involves threats or results in bodily injury.
When Spam Mail Becomes Cyberstalking:
- The sign-up is targeted at one specific victim
- The conduct is repeated over a period of time
- The intent is to cause distress, embarrassment, or emotional harm
- The behavior is part of a broader harassment pattern
- The victim experiences measurable emotional distress as a result
USPS Regulations on Junk Mail and Harassment
The USPS has specific regulatory tools to address unwanted physical mail, and using those tools is often the first practical step for victims of physical junk mail harassment.
Under the Postal Reorganization Act (39 U.S.C. 3008), recipients of sexually oriented advertisements or pandering materials can file a PS Form 1500 to obtain a Prohibitory Order from the Postmaster General. This order legally prohibits the named sender from mailing anything further to that recipient. Violating a Prohibitory Order is a federal offense.
For general unwanted mail that does not meet the “pandering” threshold, USPS offers the Mail Preference Service through the Direct Marketing Association. Consumers can register to reduce promotional mail deliveries. While this does not criminalize the behavior, it creates a documented record of attempts to stop the unwanted contact.
When physical mail is clearly part of a harassment campaign, the USPS Postal Inspection Service investigates. The Postal Inspection Service is a federal law enforcement agency with authority to investigate mail fraud and mail harassment under 18 U.S.C. 1341 and 18 U.S.C. 1708.
USPS Tools Available to Victims:
- PS Form 1500 (Prohibitory Order for pandering mail)
- Complaint to USPS Postal Inspection Service
- Mail Preference Service registration
- Request for carrier notification of suspicious mail patterns
- Evidence preservation through documented mail receipts
FTC Rules on Unsolicited Mail
The FTC enforces the CAN-SPAM Act and has issued detailed rules governing what is permissible in commercial electronic communications, with real consequences for violations.
The FTC’s CAN-SPAM Rule (16 C.F.R. Part 316) operationalizes the CAN-SPAM Act. It requires that commercial emails identify themselves as advertisements, include a valid physical address, and honor opt-out requests within ten business days. These rules apply to anyone who initiates commercial email, including people who fraudulently sign others up for commercial lists.
The FTC has brought enforcement actions against both large commercial spammers and individuals who used spam as a harassment tool. Civil penalties in FTC enforcement actions can reach millions of dollars for large-scale violators. Individual bad actors face penalties per email sent.
Beyond spam, the FTC also handles complaints about identity misuse in commercial contexts. If someone used your name and email address to sign you up for services you did not request, that can constitute identity-related deception under FTC guidelines on unfair or deceptive acts.
Key Takeaway: The FTC is the primary federal enforcement agency for email spam violations, and filing a complaint directly with the FTC creates an official record that supports both FTC action and any private legal claims a victim wants to pursue.
What Happens If You Sign Someone Up for Junk Mail
What actually happens depends on the scale of the act, whether the victim reports it, and which jurisdiction you are in.
For a one-time, small-scale prank, the practical outcome is often nothing beyond the victim being annoyed and unsubscribing from a few lists. Law enforcement has limited resources and typically does not pursue minor isolated incidents. That said, “nothing happened this time” is not the same as “this was legal.”
When the victim reports the behavior to the FTC, their state attorney general, or local law enforcement, the situation escalates. An FTC complaint creates a documented record even if no immediate action follows. A state harassment complaint can lead to a warning, a civil court action, or criminal charges depending on the state and the documented pattern of behavior.
The worst outcomes occur when the sign-up is part of a larger harassment context. If there is any existing conflict between the parties, like a restraining order, a workplace dispute, or a domestic situation, prosecutors are far more likely to pursue charges aggressively.
Realistic Outcomes by Severity:
| Scenario | Likely Outcome |
|---|---|
| One-time prank, not reported | No legal action, victim unsubscribes |
| One-time prank, FTC complaint filed | FTC record created, possible warning |
| Repeated sign-ups, victim reports to police | Investigation, possible harassment charge |
| Subscription bombing campaign | Criminal harassment, cyberstalking charges |
| Part of existing harassment pattern | Aggressive prosecution, multiple charges |
| Commercial email fraud at scale | FTC civil action, up to $51,744 per email |
How to Prove Someone Signed You Up for Junk Mail
Proving someone signed you up for junk mail requires documentation, digital evidence, and in some cases professional forensic assistance.
The most straightforward evidence is the subscription confirmation email. Most legitimate mailing lists send a confirmation email to the new subscriber. That email contains metadata, including the IP address from which the sign-up was submitted. IP addresses can be subpoenaed through the courts to identify the device and often the person who initiated the subscription.
Screen capture every piece of incoming spam with timestamps. Export your email folder showing the volume and timing of the sign-ups. This documents the scale and the sudden spike in unwanted mail, which suggests deliberate action rather than your email being sold by a data broker.
If you already have a suspect, look for circumstantial evidence: timing correlations with a conflict or break-up, the specific type of lists you were signed up for (embarrassing categories, services specific to your location), or witness testimony from people who saw the person admit to it.
Evidence to Collect Immediately:
- Screenshot and save every subscription confirmation email
- Document the sending IP addresses in email headers
- Record the volume and timing of incoming spam
- Save any communications where the perpetrator hinted at or admitted the act
- File a complaint with the FTC to create an official record
- Contact your email provider to preserve account access logs
How to Stop Someone from Signing You Up for Spam
You can stop someone from signing you up for spam through a combination of legal, technical, and reporting steps.
The fastest technical fix is using a service like Unroll.me or your email provider’s bulk unsubscribe feature to remove yourself from lists quickly. But these are reactive solutions. For prevention, the stronger move is to use email aliases or separate email addresses for public-facing activities so your primary address is harder to abuse.
On the legal side, sending a formal cease and desist letter to the person responsible, if you know who they are, creates a legal record. If the behavior continues after receipt of that letter, the documented continuation strengthens a harassment or cyberstalking case significantly.
For reporting: file with the FTC at ReportFraud.ftc.gov, contact your state attorney general’s office, and report to your local police if you believe this is part of a broader harassment pattern. For email spam, you can also report the abuse to each email service provider involved, many of whom take subscription fraud seriously and can help trace the source.
Step-by-Step Response Plan for Victims:
- Document all incoming spam with timestamps and email headers
- Use email filters to reduce incoming volume immediately
- Identify the source through IP address metadata if possible
- Send a formal cease and desist to the responsible party if known
- File a complaint with the FTC (ReportFraud.ftc.gov)
- File a complaint with your state attorney general
- Contact local law enforcement if the behavior is part of ongoing harassment
- Preserve all evidence for potential civil or criminal proceedings
Key Takeaway: Victims of junk mail harassment have more legal and practical tools available than most people realize. Documentation is the foundation of every legal option, so start collecting evidence the moment you suspect deliberate action.
Frequently Asked Questions
Can you press charges against someone for signing you up for junk mail?
Yes, you can press charges if the behavior meets your state’s threshold for harassment or cyberstalking.
A single isolated incident rarely leads to charges, but a pattern of deliberate sign-ups designed to distress you can be criminally charged under state harassment statutes.
You report the behavior to local law enforcement, who then refer the case to prosecutors if there is sufficient evidence.
The stronger your documentation, the more likely a prosecutor will pursue the case.
Is it illegal to sign someone up for email lists without their permission?
Signing someone up for email lists without permission can violate the CAN-SPAM Act and state electronic harassment laws, depending on the circumstances.
The CAN-SPAM Act prohibits false or misleading information in commercial email, which includes fraudulently submitting another person’s email address for sign-up.
If done as part of a harassment campaign, state laws add additional criminal exposure.
Even a single fraudulent sign-up can violate federal law when a commercial mailer sends email based on that submission.
What is the penalty for violating the CAN-SPAM Act?
The civil penalty for CAN-SPAM Act violations is up to $51,744 per separate email under current FTC penalty schedules.
Criminal penalties for willful violations under 18 U.S.C. 1037 include fines and imprisonment of up to five years.
Penalties increase when violations involve other crimes like identity fraud or computer intrusion.
The FTC brings civil enforcement actions, while the Department of Justice handles criminal prosecutions.
How do you prove someone signed you up for junk mail on purpose?
The most direct proof is IP address data embedded in subscription confirmation emails, which can be linked to a specific device through court-ordered subpoena.
Circumstantial evidence including timing of sign-ups correlated with a personal conflict, the nature of the lists chosen, and any admissions by the responsible party all strengthen the case.
Filing with the FTC and local law enforcement creates an official record that supports any legal proceedings.
An attorney specializing in cyberstalking or harassment cases can assist with obtaining digital evidence through proper legal channels.
Can signing someone up for spam be considered cyberstalking?
Yes, signing someone up for spam can constitute cyberstalking under federal law (18 U.S.C. 2261A) and multiple state statutes when it is part of a targeted, repeated campaign against one individual.
The act must be part of a course of conduct designed to cause substantial emotional distress to the victim.
A single sign-up almost never qualifies, but a subscription bombing attack against one person fits the legal definition used in federal and state courts.
Prosecutors have used cyberstalking statutes successfully in cases involving mass spam sign-ups as a harassment tool.
Closing
Signing someone up for junk mail is not the harmless prank most people assume it is. Federal law, state harassment statutes, and USPS regulations all create real legal exposure depending on how often it happens and why.
If this was done to you, start documenting immediately. If you are wondering whether something you did could get you in trouble, the answer may be closer to yes than you expect. The legal framework around unsolicited mail keeps expanding in 2026, and the consequences are real.







