The FTC's own guide turns a statute into a sender checklist

The revenue mechanism

The CAN-SPAM Act is the US federal statute governing commercial email, but a statute's wording is not the same thing as a working checklist. The Federal Trade Commission maintains its own compliance guide for business, which restates the law's requirements in plain operational terms: accurate header and routing information identifying who initiated the message, a subject line that reflects the content, clear disclosure that the message is an advertisement where required, a valid physical postal address, and a clear, conspicuous way for a recipient to opt out of future messages. The guide, as retrieved on 16 September 2026, states it was originally published in August 2023 and most recently edited in January 2024, though as a living compliance resource its content can be revised again without changing that framing.

What the documents show

The guide states that a sender must honour an opt-out request within 10 business days and must keep the opt-out mechanism functioning for at least 30 days after a message is sent. It states that a sender remains legally responsible for compliance even when a third-party email service provider is hired to send messages on its behalf. It states a per-email penalty: the guide names a maximum of $53,088 for each separate email found in violation. The FTC's own CAN-SPAM Rule page, which houses the codified regulation at 16 CFR Part 316, is the underlying rule the compliance guide translates into plain language; it is the FTC's rulemaking record, not the guide's own prose, that carries the force of a formal regulation.

The assumptions exposed

The compliance guide is written for a general business audience and does not attempt to address the mailbox-provider requirements that Gmail and Yahoo separately enforce; a newsletter can be fully CAN-SPAM compliant by the FTC's own description and still be blocked by a mailbox provider for an unrelated reason such as a high spam-complaint rate. The per-email penalty figure is a statutory maximum the FTC states it can seek, not a typical or average fine, and the guide does not report how often that maximum has actually been assessed. Publishers commonly conflate being compliant with being guaranteed delivery, a distinction the guide itself does not make explicit but that follows directly from what it does and does not cover.

What to check before you rely on it

This is an editorial checklist drawn from the guide's own stated requirements. A publisher should confirm the physical address shown in each send is current, test the opt-out link to see whether it processes within the stated window, and remember that hiring an email service provider does not transfer legal responsibility away from the sender.

• Does every commercial send include a physical postal address that is actually monitored?
• Is the opt-out mechanism tested end to end, not just visually present?
• Has anyone confirmed which entity the FTC would treat as the sender if a complaint were filed?

The guide is a reliable translation of the statute's own text, not a certificate that a message will reach any particular inbox.