FTC to report on CAN-SPAM's effectiveness

Computerworld - Is the 2-year-old U.S. antispam law known as the CAN-SPAM Act working? The U.S. Federal Trade Commission will issue a report to Congress on that topic Tuesday, but those who make a living stopping spam believe that the answer is an unequivocal no.

The report, titled "Effectiveness and Enforcement of the CAN-SPAM Act," is scheduled to be released at a news event in Washington. Officials from state and federal enforcement agencies, as well as the Canadian Competition Bureau, will also announce "criminal law enforcement initiatives targeting illegal spam operations," the FTC said in a statement Friday.

But the difficulty in catching spammers has made the CAN-SPAM (Controlling the Assault of Non-Solicited Pornography and Marketing) Act largely ineffective, according to executives at spam-blocking companies.

"There isn't a lot of good news to report," said Andrew Lochart, senior director of marketing at Postini Inc. "The percentage of e-mail that's spam, phishing, viruses or a directory-harvesting attack continues to go up."

Currently, Postini processes about 500 million messages a day for its customers. About 12% of them are flagged as legitimate e-mail, Lochart said.

Jordan Ritter, chief technology officer at Cloudmark Inc., agrees that the law has been ineffective, but he doubts that the FTC report will say so. "I would expect it not to say that [the law] has been a dismal failure," he said.

Despite several high-profile enforcement actions, however, it has proved to be too difficult to catch and punish most spammers, many of whom operate outside of the U.S., Ritter said. "It's hard to track these people down," he said.

If there is any good news to report, it may be that CAN-SPAM is driving some spammers out of the U.S. Security research firm Sophos PLC recently found that while more spam originates in the U.S. than any other country, the percentage of worldwide spammers within U.S. borders is dropping. In the first six months of 2005, U.S. computers were responsible for about 26% of the world's spam, down from 42% the previous year.

The CAN-SPAM Act was signed into law two years ago Friday.