Your unsubscribe button could bankrupt you.
The Tiny Email Footer
That little gray footer at the bottom of your emails? The one you copied from a template 2 years ago and never looked at again?
For micro businesses in the US, that footer is federal legal paperwork. And if it’s wrong, the FTC can theoretically fine you up to $53,088 per email. Not per campaign. Per email.
If you sell on Etsy, Shopify, do coaching, real estate, or run any email list under 10 employees – this one is for you.
This post is the written version of our 17-minute training where we break down the CAN-SPAM Act in plain English. No lawyer mumbo jumbo.
Who This Is Really For
We made this for the Texas garage business. You know the story – you’re selling from your garage in Texas, you get your first 500 emails, you start emailing every week. You think you’re doing marketing. The FTC thinks you’re doing regulated commercial email.
Gmail and Yahoo changed the game in February 2024. If you send bulk email (5,000+ a day), you now MUST have one-click unsubscribe, authenticated email (SPF, DKIM, DMARC), and keep your spam rate under 0.3%. If you don’t, you don’t even hit the inbox. But even if you send 50 emails a day, federal law still applies to you.
Chapter 1: Our Own Screw-Up at 1212 Lavaca Street
We learned this the hard way.
We moved our Austin office and forgot to update our footer address. For 3 months, every email we sent had our old address at 1212 Lavaca Street. That’s not just sloppy – under CAN-SPAM, that’s a violation. Your physical address must be valid, real, and current. No old apartment, no fake suite, no “I’ll update it later.”
That mistake is what forced us to build the system we use now.
Chapter 2: Your Footer Is Not Marketing. It’s Legal Paperwork.
Most micro businesses treat the footer like design. Small text, light gray, pushed to the bottom.
The FTC treats it like a legal disclosure. Two things must be there and must be crystal clear:
- Your valid physical postal address. A real street address, PO Box you actually check, or private mailbox. Not just your city and state.
- A clear way to opt out. And “clear and conspicuous” does not mean tiny gray text hidden under 5 social icons. It means a reasonable person can see it and understand it instantly.
The 7 CAN-SPAM Rules the FTC Actually Enforces
Here are the 7 rules in plain English:
- Don’t lie about who is emailing. Your “From” name and email domain must be accurate and not misleading.
- Don’t lie in your subject line. Your subject must reflect what’s actually inside the email. No “Re: Your Order” when they never ordered.
- Tell them it’s an ad. If it’s an advertisement, you must disclose it. You can do this in the footer, but it has to be there.
- Tell them where you are. Your valid, current physical address must be in every commercial email.
- Tell them how to stop. You must include a clear and conspicuous way to opt out of future emails.
- Honor opt-outs fast. When someone unsubscribes, you have 10 business days to stop. You can’t charge them, ask them to log in, or ask for more than their email address.
- You’re responsible for who you hire. If you hire a VA or marketing agency to send emails for you, YOU are still legally responsible. You have to monitor them.
Break one of these per email and the penalty adds up. That $53,088 figure is the FTC’s inflation-adjusted maximum civil penalty per separate email as of January 2024. It’s the theoretical max to show exposure – actual fines and settlements vary, but that’s why demand letters start so high.
The State Twists That Get You Even If You Follow Federal Law
CAN-SPAM is federal, but states have their own weapons.
California (CCPA/CPRA): If you email Californians and you keep their data, you need to tell them what you collect and honor deletion requests.
New York (GBL 349): New York can go after deceptive business practices, including misleading email practices, with its own penalties.
Texas (DTPA) & Florida: Both are known for aggressive consumer protection statutes. Florida in particular allows for attorney fees, which is why so many “footer trolls” file there.
Following CAN-SPAM doesn’t make you immune to state claims. It just keeps you compliant federally.
Why Mailchimp, ConvertKit, and Free Tools Don’t Protect You in Court
This is the biggest myth we see every week.
“We use Mailchimp, so we’re compliant.”
Mailchimp gives you a footer template. You still have to fill it with YOUR correct address. They provide an unsubscribe link. You still have to honor it correctly and not add tricks like “enter your reason to unsubscribe.”
The tool is not your lawyer. In court, “Mailchimp made me do it” is not a defense. The liability is yours.
The Footer Troll Business Model Explained
Here’s how small businesses get shaken down:
Someone subscribes with a clean email address specifically to track you.
They wait for you to make a footer mistake – old address, no address, hard-to-find unsubscribe.
They screenshot 20, 50, 100 emails.
You get a demand letter: “You violated CAN-SPAM 50 times at $53,088 per email. Pay $15,000 to settle or we’ll go to the FTC / sue.”
They aren’t the FTC. They’re private plaintiffs using the threat of that big per-email number to force a settlement. Whether their claim holds up or not, you still have to pay a lawyer to respond.
10 Dumb Footer Mistakes We See Every Week
Using your old apartment or an old business address
No physical address at all
Unsubscribe link in 8px light gray text on white background
Making people log in or create an account to unsubscribe
Making people email you to unsubscribe instead of one-click
Asking for more info than just the email to opt out
Charging a fee or saying “pay to unsubscribe”
Still emailing after 10 business days
Using “noreply@…” with no way to reply and no other opt-out
Using a fake suite number to hide your home address without a real mailbox
If you’re doing 2 of these, fix it today.
Our 4-Document Bulletproof System
After our Lavaca Street screw-up, we built a system that has had 0 complaints in 18 months. It’s not fancy. It’s just disciplined.
- Footer Audit Sheet: A one-page checklist you run every month to verify address, unsubscribe link, and from name.
- Unsubscribe Log: A simple sheet where you log every unsubscribe request, date received, and date honored. This is your proof if someone says you kept emailing.
- Consent Tracker: Where did each email come from? Etsy checkout, freebie, coaching call? If you can’t prove consent, you can’t prove anything.
- Sample Footer Template: The exact footer language we use now, tested and attorney-reviewed as a template.
If You Get a Demand Letter, Don’t Panic – And Don’t Ignore It
A real demand letter will cite 15 U.S.C. § 7701, list your alleged violations, count your emails, and demand money in 10-14 days.
Don’t admit anything in email. Don’t ghost it either. Document everything, pull your unsubscribe log, and talk to a local business attorney who knows email marketing. Most letters want a quick settlement, not a federal case.
What To Do In The Next 10 Minutes
Open your last marketing email. Check your address. Is it current?
Click your own unsubscribe link. Is it one click? No login?
Check your last 3 unsubscribes. Did you stop emailing within 10 business days?
Download the kit and run the Footer Audit.
That 10 minutes could save you a five-figure headache.
DEBATE: We want to hear from you.
Where do you stand? If someone gave you their email once to buy something or get a freebie, should you be able to email them forever until they unsubscribe? Or should a one-click unsubscribe mean a lifetime ban – no win-back emails ever?
Drop your take in the comments. We reply to the first 50.
Next week on the blog: STOP – Your LLC Name Could Cost You $50K – The Trademark Search You Skipped
About Us: We’re Shameem and Emma from the USA. On Micro Biz Legal and Growth we help micro businesses under 10 employees grow fast without getting sued fast. Straight talk, American style.
Disclaimer: This post and video are for educational and informational purposes only and do not create an attorney-client relationship and are not legal advice. Laws, regulations, and enforcement, including CAN-SPAM (15 U.S.C. § 7701 et seq.), FTC penalties, and state laws like CCPA/CPRA, NY GBL 349, and Texas DTPA, change frequently and vary by state and situation. The $53,088 figure is the FTC’s inflation-adjusted maximum civil penalty per separate email as of Jan 2024 and is for illustration of theoretical exposure – actual penalties and settlements vary. You should consult with a licensed attorney in your state for advice regarding your specific business. We are not your lawyers. Use of any forms, templates, or checklists is at your own risk.
