WHY DO I GET SO MUCH SPAM AND UNWANTED EMAIL IN MY INBOX? AND HOW CAN I GET RID OF IT?

Mon 25 September 2023:

Spam might not have brought an end to the internet or email, as some dire predictions in the early 2000s claimed it could – but it’s still a massive pain.

Despite all the spam being removed by spam-filtering technologies, most people still receive spam every day. How do these messages end up flooding our inboxes? And are there any legal consequences for the senders?

What is spam?

The Organisation for Economic Co-operation and Development (OECD) noted in 2004 “there does not appear to be a widely agreed and workable definition for spam” across jurisdictions – and this remains true today.

That said, “spam” generally refers to unsolicited electronic messages. These are often sent in bulk and frequently advertise goods or services. It also includes scamming and phishing messages, according to the OECD.

Most people think of spam in the form of emails or SMS messages. However, what we now call spam actually predates the internet. In 1854, a spam telegram was sent to British politicians advertising the opening hours of dentists who sold tooth-whitening powder.

The first spam email came more than 100 years later. It was reportedly sent to 600 people on May 3 1978 through ARPAnet – a precursor to the modern internet.

As for how much spam is out there, the figures vary, possibly due to the various definitions of “spam”. One source reports the average number of spam emails sent daily in 2022 was about 122.33 billion (which would mean more than half of all emails were spam). As for text messages, another source reports a daily average of 1.6 billion spam texts.

Where do spammers get my details?

Each time you enter your email address or phone number into an e-commerce website, you may be handing it to spammers.

But sometimes you may even receive spam from entities you don’t recognise. That’s because businesses will often transfer customers’ contact information to related companies, or sell their data to third parties such as data brokers.

Australia’s Privacy Act 1988 somewhat limits the transfer of personal information to third parties. However, these laws are weak – and weakly enforced.

Some entities also use “address-harvesting” software to search the internet for electronic addresses that are captured in a database. The collector then uses these addresses directly, or sells them to others looking to send spam.

Many jurisdictions (including Australia) prohibit these harvesting activities, but they are still common.

Is spamming against the law?

Australia has had legislation regulating spam messaging since 2003. But the Spam Act surprisingly does not define the word “spam”. It tackles spam by prohibiting the sending of unsolicited commercial electronic messages containing offers, ads or other promotions of goods, services or land.

However, if the receiver consented to these types of messages, the prohibition does not apply. When you buy goods or services from a company, you will often see a request to click on a “yes” button to receive marketing promotions. Doing so means you have consented.

On the other hand, if your phone or inbox are hit by commercial messages you haven’t agreed to receive, that is a breach of the Spam Act by the sender. If you originally signed up to receive the messages, but then unsubscribed and the messages kept coming after five business days, that is also illegal. Senders must also include a functioning unsubscribe facility in every commercial message they send.

Spammers can be penalised for breaches of the Spam Act. In the past few months alone, Commonwealth Bank, DoorDash and mycar Tyre & Auto were fined more than A$6 million in total for breaches.

However, most spam comes from outside Australia where the laws aren’t the same. In the United States spam is legal under the CAN-SPAM Act until you opt out. Unsurprisingly, the US tops the list of countries where the most spam originates.

Although spam sent to Australia from overseas can still breach the Spam Act – and the Australian Communications and Media Authority (ACMA) co-operates with overseas regulators – overseas enforcement actions are difficult and expensive, especially if the spammer has disguised their true identity and location.

It’s worth noting that messages from political parties, registered charities and government bodies aren’t prohibited – nor are messages from educational institutions to students and former students. So while you might consider these messages as “spam”, they can legally be sent freely without consent. Factual messages (without marketing content) from businesses are also legal as long as they include accurate sender details and contact information.

Moreover, the Spam Act generally only covers spam sent via email, SMS/MMS or instant messaging services, such as WhatsApp. Voice calls and faxes aren’t covered (although you can use the Do Not Call Register to block some commercial calls).

Staying safe from spam (and cyberattacks)

Spam isn’t only annoying, it can also be dangerous. Spam messages can contain indecent images, scams and phishing attempts. Some have malware (malicious software) designed to break into computer networks and cause harm, such as by stealing data or money, or shutting down systems.

The Australian Cyber Security Centre and ACMA provide useful tips for reducing the spam you get and your risk of being hit by cyberattacks. They suggest to:

use a spam filter and block spammers – email and telecommunications providers often supply useful tools as part of their services
unsubscribe from any emails you no longer want to receive – even if you originally agreed to receive them
remove as much of your contact details from websites as you can and always restrict the sharing of your personal information (such as name, birth date, email address and mobile number) when you can – beware of pre-ticked boxes asking for your consent to receive marketing emails
install cybersecurity updates for your devices and software as you get them
always think twice about opening emails or clicking on links, especially for messages promising rewards or asking for personal information – if it looks too good to be true, it probably is
use multi-factor authentication to access online services so even if a scam compromises your login details, it will still be difficult for hackers to break into your accounts
report spam to your email and telecommunications providers, and to ACMA.

Author:

Kayleen Manwaring

Senior Research Fellow, UNSW Allens Hub for Technology, Law & Innovation and Senior Lecturer, School of Private & Commercial Law, UNSW Law & Justice, UNSW Sydney

Kayleen Manwaring joined the School of Private & Commercial Law in the UNSW Faculty of Law & Justice in 2021. Prior to this, from 2011 Kayleen taught business associations and intellectual property law in the UNSW Business School and marketing law in the Business & Economics Faculty at Macquarie University.

Her research interests lie at the intersection between emerging technologies, particularly information technology, and the law of contract, consumer protection, intellectual property law and corporations law. She has particular expertise in commercial and private law implications of the Internet of Things and associated cyber-physical technologies.

Until March 2012, she spent many years working as a commercial lawyer and in law firm knowledge management, in Sydney and London. Her work in practice primarily focussed on technology acquisition and licensing, intellectual property, and communications.