JUNKBUSTERS Guide to Staying Off Junk Email Lists

Harvesting · Disclosure by browsing · Requesting Anonymity · Remove lists · (Spam Headlines)


An ounce of prevention is worth a pound of cure


Once your email address is on a spammer's list, it can be very hard to get off, especially if he's selling it. Here are some tips on how to stop spam before it starts.

[Feedback]  Reduce your exposure to ``harvesting''

Don't display your email address(es) in public more than necessary, at least not in a form that's easy prey for scavenger bots (programs that spammers run to ``harvest'' email addresses).

If you publish web pages, don't put your address in a click-to-email link (HTML's HREF MAILTO). This means people have to cut-and-paste your address rather than emailing your with a single click, but it can save you a lot of spam.

Rather than putting your email address on every page of your site, it may be better to have it on only one page, with links to it. Many spammers don't even bother to remove duplicates from their lists.

If your address appears on a very well-indexed site you might want to use one of the many common tactics to disguise or ``munge'' it to fool scavenger bots, (such as splitting the components of the address as Junkbusters does on its feedback page), or inserting HTML code in the middle of the address (as JUNKBUSTERS SPAMOFF does).

If you post to Usenet or chat, consider disguising your address. There are dozens of ways of doing this so that humans who really want to contact you can figure out how to do so: look at a few postings and choose one you like. We have heard reports that some harvesters are already wise to addresses such as me@nospam.myisp.com so try a variation on the nospam. There are plenty of adjectives that could be added. Of course almost any method can be thwarted by sufficiently intelligent scavenger bots, but most of them aren't very smart.

An alternative is getting a free forwarding address from companies such as Bigfoot.com or NetAddress.com. Many of them include free filtering facilities.

Your choice of email address can affect the amount of spam you get. A common user name such as jsmith will typically get more spam than a weird unique name such as jsm93x98, particularly at a large ISPs, due to a technique called dictionary spamming. A name with a letter late in the alphabet also gets less spam, because many lists are sold sorted in alphabetical order, and spamming sessions are often terminated before they complete. [RCN explaining "phone book" spamming attacks] Choosing an email address that begins with a letter late in the alphabet may reduce the amount of spam you get, because many lists are sold sorted in alphabetical order, and spamming sessions are often terminated before they complete.

[Feedback]  Check your browsing isn't giving you away

In a very small number of cases, your email address may be discovered by a web site you visit. This has occurred through bugs in places such as Web-based email services. Early versions of some browsers gave away email addresses routinely. A quick and easy way to check for this is to visit our privacy check page that displays these headers. If your address is being disclosed, reconfigure your browser or use a free product such as Internet Junkbuster to block it.

Check that your ISP or company isn't running the identd demon, a background program that Web servers can ask for your user ID while you wait for a page. It was originally intended to restrict access to authorized users, but spamming sites can use it to guess your email address. Our test lets you quickly find out whether your identity is being revealed in this way.

[Feedback]  Requesting anonymity from sources of addresses

If you use an on-line service that offers a member directory, opt out of it; they are favorites of spammers.

Some larger companies sell or give away email addresses. Most have policies and terms that prohibit use of their information for spamming, but this doesn't seem to stop some spammers.

You can tell email lookup services such as those listed in Yahoo to remove your name and email address.

Some of the giant companies that sell mailing lists to catalog companies are now also selling email addresses. Most of these don't have Web-based ``opt-out'' forms, but JUNKBUSTERS DECLARATION gives you an easy way to draft physical letters to them.

[Feedback]  Reporting spammers to ISPs and email providers

The instructions given in spam to have your name removed from the spammer's lists are often bogus. The address may not exist: if it doesn't mailing to it will only result in another piece of email saying it wasn't delivered. One spammer has even included the URL for this page in fake instructions for removal.

A free service that does the sleuthing and complaining for you is Spamcop. [Wired on Spamcop]

If the spam asks invites responses to an address at one of the major online providers or at a ``disposable'' address such as the free accounts provided by Hotmail or Juno, your course is clear: simply forward the spam to the postmaster at the company named. All these companies have strict policies against spam and should terminate the account promptly, if it is really being used by a spammer. If not, they may decide to track down and cut off or sue the spammer.

[Feedback]  Reporting spammers to law enforcement

There are various law enforcement agencies where you can report spam.

  1. If the spam involves fraudulent or deception practices, you can forward it to uce@ftc.gov for the Federal Trade Commission to add to their database.
  2. If a Nigerian says they have millions of dollars waiting for you to collect, forward the email with the subject "419 sample - no financial loss" to 419.fcd@usss.treas.gov for the US Secret Service to investigate. Nigerian Advance Fee Fraud (also called 419 Fraud) has been going on since the 80's with faxes, and has recently become common with email. If you receive faxes for this, you can forward them to the USSS on 202 406-6930 with a cover sheet giving your contact details and stating "no financial loss". [Secret Service Alert]

[Feedback]  What about removal services?

Be cautious also about sites where you can register to have your email address removed from spammer's lists. Some are ineffective; some actually add your address to other spammers' lists.

Some services say they will not giving addresses to spammers: they have to submit their lists for ``cleansing.''

Anyone can start a removal service site; the difficult part is getting spammers to pay any notice. Due to the strange economics of the Internet, it's easier for spammers to spam everyone. They already know that almost nobody wants to hear from them, so why should they go to the trouble of removing those names? The only motivation we can think of is the fear of being sued. Some large online providers do sue spammers to protect their customers, and the Federal Trade Commission has said that they will go after spammers who use fraudulent tactics such as fake remove addresses. But what can the average person do to stop a persistent spammer?

The threat of litigation is the basic idea behind many anti-spam tactics. A carefully-worded ``offer'' to receive spam for a fee of $10 per piece is provided in JUNKBUSTERS SPAMOFF for anyone to use in reply to spammers. You can even publish it on your Web space if you wish. Ten dollars is an amount which can be the subject of a suit in small claims court, giving everyone a credible way to sue spammers. Other commonly used legal threats include claims that spam is an unsolicited fax under the Telephone Consumer Protection Act, and statements that spam will be interpreted as an order for proofreading services.

[Feedback]  Spam, spam, spam, spam

For more information about spam, see our headlines page, our page of news, or our huge list of links on junk email.

--- Back to Top of Page ---

Home · · Site Map · Legal · Privacy · Cookies · Banner Ads · Telemarketing · Mail · Spam · Opt Out
  ·  Surf The Web Faster Without Ads, Free!

Copyright © 1996-2005 Guidescope Inc ®. Copying and distribution permitted under the GNU General Public License. 2005/01/15 http://www.junkbusters.com/harvesting.html