Proxy registrations and commercial email

Yesterday the law firm Venable, LLP published a document discussing the recent California appellate court decision in Balsam v. Trancos. Their take is that commercial email that contains a generic from line and is sent from a proxied domain is a violation of the California Business and Professions Code § 17529.5(a)(2).

The Trancos decision affects marketers using email to drive traffic to their websites, and the companies they hire, nationwide. The greatest impact this decision has is that each commercial email advertisement must have, in the from line, either a domain name that is registered to the sender which can be determined by performing a WHOIS look-up, or the name of the sender or marketer on whose behalf the email was sent. Therefore, marketers can no longer send commercial email that contains both a generic from line and is sent from a proxy/privately registered domain name. Therefore, In light of this development, and the substantial similarities between B&P Code § 17529.5(a)(2) and CAN-SPAM, marketers nationwide using commercial email advertisements must now revise and update their email protocols, and ensure they are compliant with this latest development in anti-spam law.

There’s a lot of spam sent from fake domains, like those I posted about in Email Fingerprinting. Those particular spammers are still spamming with 40+ emails already today from various addresses at None of them tell me who is actually sending the mail and that domain, and all the domains that spammer uses, are hidden behind privacy protection.

What kind of senders are going to be affected by this? A lot of fairly well known brands are hiring spammers (or hiring companies that hire spammers) to send acquisition mail for them.

I have long said that commercial companies should not use privacy protection in their whois registration. A business should not hide their identity and their contact information, period. I’m just glad some courts are finally recognizing that.


  1. Kent McGovern says

    Laura, will this affect only email going from / to California or have the same reach as CAN-SPAM?

    1. laura says

      That’s a legal technicality and I’m not sure what the answer is. I do know that some of the large, free providers have data centers in California (Hotmail, Yahoo and Google come to mind) so even if it only affects mail going to / from California, it may have quite a big reach.

      But that’s really one to ask the lawyers.

  2. Bill Silverstein says

    This will have a similar reach as to CAN-SPAM, as there is a dearth of cases interpreting the CAN-SPAM Act.

    Since Balsam borrows from the CAN-SPAM definition to make the state law ruling, other courts will give Balsam some persuasive authority (not binding).

    As Laura stated, this will have a wide reach. Where people with Yahoo/Hotmail/Google accounts access their e-mail with computers from computers in California (Yahoo’s/Google’s/Hotmail’s servers), California law may apply to the person in Havana using their Yahoo account. California Business & Professions Code 17529.1(b)(2) states, “An e-mail address ordinarily accessed from a computer located in this state.”


Your email address will not be published. Required fields are marked *

  • OTA joins the ISOC

    The Online Trust Alliance (OTA) announced today they were joining forces with the Internet Society (ISOC). Starting in May, they will operate as an initiative under the ISOC umbrella. “The Internet Society and OTA share the belief that trust is the key issue in defining the future value of the Internet,” said Internet Society President and CEO, Kathryn Brown. “Now is the right time for these two organizations to come together to help build user trust in the Internet. At a time when cyber-attacks and identity theft are on the rise, this partnership will help improve security and data privacy for users,” added Brown.No Comments

  • Friday blogging... or lack of it

    It seems the last few Friday's I've been lax on posting. Some of that is just by Friday I'm frantically trying to complete all my client deliverables before the weekend. The rest of it is by Friday I'm just tired. Today had the added complication of watching the Trumpcare debate and following how (and how soon) it would affect my company if it passed. That's been a bit distracting, along with the other stuff I posted about yesterday. I wish everyone a great weekend.1 Comment

  • Indictments in Yahoo data breach

    Today the US government unsealed an indictment against 2 Russian agents and 2 hackers for breaking into Yahoo's servers and stealing personal information. The information gathered during the hack was used to target government officials, security employees and private individuals. Email is so central to our online identity. Compromise an email account and you can get access to social media, and other accounts. Email is the key to the kingdom.No Comments