Spam Email

Devonyu / iStock / Getty Images Plus / Getty Images

Quick Takeaways

Spam can't be prevented entirely, but REALTORS® can take steps to reduce the amount of unwanted email that comes into their in-boxes.
Learn how to spot the warning signs of a phishing attempt, how to protect yourself, and how to report an attack.
REALTORS® who use email to find and work with clients must ensure that their own electronic communications are compliant with the CAN-SPAM Act.

Unwanted, unsolicited email is a frustrating problem for almost everyone who uses the Internet. Spam email clutters inboxes, slows down web servers, and costs time and money to manage.

Spam can't be prevented entirely, but REALTORS® can take steps to reduce the amount of unwanted email that comes into their in-boxes. With a recent 30 percent increase in the volume of spam, it is important to be vigilant against potential email scams. The real estate industry is a common target of fraudsters, who may impersonate official real estate organizations and even NAR itself.

Phishing scams try to deceive people into sharing personal information such as passwords or account numbers. Learn how to spot the warning signs of a phishing attempt, how to protect yourself, and how to report an attack.

REALTORS® who use email to find and work with clients can take steps to ensure that their own electronic communications are compliant with the CAN-SPAM Act. Passed in 2003, this law sets rules for commercial email. Associations aren’t exempt from these requirements either, particularly if they offer products, classes, or events for purchase.

NAR strongly supports efforts to control fraudulent, misleading and abusive unsolicited emails and emailing practices.

See References for more information.

Spam Email Topics

Legal

Federal laws regulate the use of email, telephone, and fax for solicitation purposes. None of these requirements are new, and instead this article is intended to serve as a resource for basic compliance with each set of laws. It is important to remember that state laws continue to govern intrastate communications and so you will need to be familiar with any such laws in your state.

Email Requirements

CAN SPAM requires that all commercial electronic mail messages contain the following:

a legitimate return e-mail and physical postal address;
a clear and conspicuous notice of the recipient's opportunity to “opt-out,” or decline to receive any future messages;
an opt out mechanism active for at least 30 days after message transmission; and
a clear and conspicuous notice that the message is an advertisement or solicitation.

A consumer’s opt out request must be honored within ten days. The business can give the consumer a menu of opt out options If a consumer consents to receiving commercial electronic mail messages from the business, the business must still comply with CAN SPAM’s email requirements, except that the business does not have to mark the electronic mail message as an advertisement or solicitation.

CAN SPAM does not contain a private right of action for consumers, and so the law will be enforced by federal agencies and state attorneys general (Internet service providers may also bring lawsuits against egregious spammers). The recoverable damages are $250/message which violates the Act, up to $2 million total. There are treble damages available for willful violations of the Act.

There have been refinements to the rules over the years, such as how to evaluate an email with both commercial and noncommercial content. In addition, there are specific requirements on how to process opt-out requests. For a more thorough discussion of these rules, click below.

References

NAR Library & Archives has already done the research for you. References (formerly Field Guides) offer links to articles, eBooks, websites, statistics, and more to provide a comprehensive overview of perspectives. EBSCO articles (E) are available only to NAR members and require the member's nar.realtor login.

Avoiding Spam

Why You Shouldn't Unsubscribe From Spam Emails (Hacker Noon, Jun. 18, 2024)

Generally, it’s better to block junk mail to minimize the chances of any misclick resulting in a malware infection or privacy loss. The sender won’t receive a notification they’ve been blocked, so it doesn’t tip them off to an active account, either. While deleting them is a good idea, preventing unwanted emails is better.

How to Stop Spam Emails: Unlock Inbox Bliss with These Tips (Spike, Mar. 27, 2024)

Most email services include an option to report spam emails, which helps improve spam filters and prevents similar emails from reaching your inbox in the future.

In Gmail: Select the email, click the three dots in the top right corner of the email, and choose “Report spam.”
In Outlook: Right-click the message in your inbox, select “Junk,” then choose “Junk” or “Phishing” depending on the nature of the email.

How to Get Rid of Spam Emails (Norton, Apr. 4, 2025)

If the spam keeps rolling in, it could mean your email address was exposed in a data breach. It can be hard to prevent spam when cybercriminals have your information. One option in this case is to change your email address.

What is an Email Alias, and How Does it Protect Your Privacy? (Business Insider, Jul. 31, 2026)

“Email spam used to be one of the major annoyances of the digital world. But in recent years, email providers have taken steps to improve our overflowing inboxes, which were often riddled with distractions and unwanted mail, like hyperbolic promotions and attempts to steal your data. But that doesn't mean the problem has gone completely. While we can often feel helpless to this issue, there are a selection of ways to ease the problem. One of the easiest and best ways to go about it is with email aliases; an alternative email address that lets you receive emails without sharing your address.”

How to Get Less Spam in Your Email (Federal Trade Commission, Sep. 2024)

“At best, spam emails are annoying. At worst, they’re pushing scams or trying to install malware on your device. Here are some ways to get fewer spam emails: use an email filter, block unwanted emails, check to see how companies will use your email address, and unsubscribe from unwanted emails.”

CAN-SPAM

The CAN-SPAM Act: Consumer Protection From Unsolicited Commercial Email (FindLaw, Apr. 11, 2024)

Marketers write creative, punchy subject lines to make their emails more attractive than the other messages in your inbox. But they can't use deceptive trade practices like clickbait and false claims.

Misleading and deceptive email subject headers are illegal under the CAN-SPAM Act. Email header information includes the “From," “To," and subject line fields.

The CAN-SPAM Act: A Compliance Guide for Business (Federal Trade Commission, edited Jan. 2024)

“Despite its name, the CAN-SPAM Act doesn’t apply just to bulk email. It covers all commercial messages, which the law defines as “any electronic mail message the primary purpose of which is the commercial advertisement or promotion of a commercial product or service,” including email that promotes content on commercial websites. The law makes no exception for business-to-business email. That means all email – for example, a message to former customers announcing a new product line – must comply with the law.

"Each separate email in violation of the CAN-SPAM Act is subject to penalties of up to $50,120, so non-compliance can be costly."

Phishing: What You Need to Know

What Is Phishing? Understanding Cyber Attacks (Forbes, Feb. 13, 2024)

Individuals should be suspicious whenever they're asked to click on a link or supply personal or financial information. Other signs that an email isn't genuine include spelling and grammatical errors, claims of urgency or slightly-off email addresses. Hovering the cursor over a link should reveal whether the destination URL matches the legitimate website.

Anatomy of a Phishing Attack (Verizon, Jan. 5, 2024)

“A phishing attack is when bad actors impersonate legitimate institutions as a way to get potential victims to share sensitive data such as passwords, bank or credit card information and Social Security numbers. It’s a type of social engineering: When perpetrators pretend to be something they’re not (such as a company, an authority figure or family member) and use psychological manipulation or social pressure to get users to click links or divulge information because they think it’s for a legitimate request. The perpetrator’s attempt to contact you can happen via email, text or even a phone call.”

Subscriptions Bombing: Email Under Attack (Communications of the ACM, Apr. 15, 2026)

“Email subscription bombing (also known as subscription flooding or email spam bombing) is an attack technique that overwhelms a target’s inbox with a high volume of benign but unwanted emails. The emails themselves are benign and are sent by legitimate third parties (such as mailing lists), and therefore typically pass spam filters. In this study, we analyze 24 concrete subscription bombing attack campaigns using a large dataset from an email security provider, encompassing 46,970 involved unwanted emails. We define key metrics, outline attack timelines, and provide insight into the operational patterns of these campaigns. Mitigating these attacks is challenging due to the large set of email senders, but automated unsubscription may reduce the impact.”

Study Finds Phishing Scams Are on the Rise, Accelerated by AI (CNET, Mar. 2, 2026)

“The US Federal Trade Commission reported that Americans lost over $12 billion due to consumer fraud attacks and scams in 2024, a 25% year-over-year increase. These losses are only expected to grow as scams become more convincing, enabled by AI tools that allow scammers to clone voices, create deepfakes, localize messages and personalize the language used in scam emails, texts and social media posts.”

Useful Websites

Unwanted Emails, Texts, and Mail (Federal Trade Commission)

How to deal with unwanted text messages, spam phishing emails, and junk mail.

Internet Crime Complaint Center (IC3) (Federal Bureau of Investigation)

Anyone can become a victim of internet crime. Take action for yourself and others by reporting it. Reporting internet crimes can help bring criminals to justice and make the internet a safer place for us all.

ReportFraud.ftc.gov (Federal Trade Commission)

“ReportFraud.ftc.gov is the federal government's website where you can report fraud, scams, and bad business practices.”

eBooks & Other Resources

Books, Videos, Research Reports & More

As a member benefit, the following resources and more are available for loan through the NAR Library. Items will be mailed directly to you or made available for pickup at the REALTOR® Building in Chicago.

eBooks.realtor.org

The following eBooks and digital audiobooks are available to NAR members:

Blocking Spam & Spyware for Dummies® (eBook)

The Email Marketing Playbook--New Strategies to get your Emails Noticed (eBook)

Understanding Security Issues (eBook)

Have an idea for a real estate topic? Send us your suggestions.

The inclusion of links on this page does not imply endorsement by the National Association of REALTORS®. NAR makes no representations about whether the content of any external sites which may be linked in this page complies with state or federal laws or regulations or with applicable NAR policies. These links are provided for your convenience only and you rely on them at your own risk.