ONLINE
Bento

CAN-SPAM and PO Boxes: Clearing Up the Confusion

By Jesse HanleyFebruary 11, 20266 min read

Can You Use a PO Box for CAN‑SPAM? Yes.

If you’re starting a newsletter, you’ll hit this question sooner than you’d think: do I really have to put my home address in the footer?

Short answer: CAN‑SPAM does require a “valid physical postal address,” but that does not mean a street address. A PO box you’ve accurately registered with USPS (or a private mailbox you’ve accurately registered with a CMRA) can satisfy the requirement.

TL;DR

  • You need a valid physical postal address in commercial marketing emails.
  • The FTC says that can be a street address, a PO box accurately registered with USPS, or a private mailbox accurately registered with a commercial mail receiving agency (CMRA).
  • Use something real, keep it up to date, and don’t forget the rest of CAN‑SPAM (especially unsubscribe).

What the FTC Says (In Plain English)

The FTC’s CAN‑SPAM compliance guide spells out what counts. It states:

“Your message must include your valid physical postal address. This can be your current street address, a post office box you’ve registered with the U.S. Postal Service, or a private mailbox you’ve registered with a commercial mail receiving agency established under Postal Service regulations.”

For most creators and small teams, that settles it. If you want privacy (or you don’t have a stable office address), a PO box is perfectly fine.

What “Valid Physical Postal Address” Means in Practice

The statute itself requires a “valid physical postal address of the sender” in commercial messages. The FTC guidance above explains the practical options.

In practice, “valid” boils down to three things:

  • It’s real: mail can be delivered there, and you can receive it.
  • It’s yours: it’s properly registered to you/your business (PO box) or through a CMRA (private mailbox).
  • It’s maintained: you check it and update it when things change.

If you can’t receive mail at the address you list, it’s hard to argue it’s “valid,” even if it looks professional in a footer.

The Mistakes That Actually Cause Problems

Where people get spooked is the vague “you’ll get fined” advice. The problems are usually simpler (and fixable):

  • Using a fake or stale address (a random location, an old office, or something you don’t control)
  • Burying or breaking unsubscribe (or making people jump through hoops)
  • Misleading “From” names or subject lines (trying to trick people into opening instead of being clear)

If you’re using a real PO box and you honor opt‑outs, you’re already in good shape.

  • Include a valid physical postal address (street address, USPS PO box, or CMRA mailbox).
  • Include a clear unsubscribe that works and is easy to spot.
  • Make sure unsubscribe requests are honored within 10 business days (15 U.S.C. § 7704(a)(4); FTC guidance).
  • Keep your opt‑out mechanism working for at least 30 days after you send the email (15 U.S.C. § 7704(a)(3)).
  • Keep your “From” and subject line truthful and consistent.

Sending internationally? (Australia, Canada, UK, Germany, France, Netherlands)

CAN‑SPAM is a US law. If you have subscribers abroad (or you’re intentionally marketing to them), you may need to follow local rules too. Here’s the high-level shape:

  • Australia (Spam Act / ACMA): Consent first. Identify the sender and include contact details. Include an unsubscribe option that’s clear, free, works for at least 30 days, and is actioned within 5 working days.
  • Canada (CASL / CRTC): Consent (express or implied). Your message needs sender identification plus a mailing address and at least one other contact method (phone, email, or web). Include an unsubscribe mechanism and honor opt-outs within 10 business days. You’re expected to be able to prove consent, and the mailing address must remain valid for at least 60 days after sending.
  • UK (PECR / ICO): Marketing emails to individuals generally require consent (with a narrow “soft opt‑in” for existing customers). Don’t conceal identity, and provide a valid address to opt out/unsubscribe. Separately, UK companies also have trading‑disclosure rules for certain business communications and websites.
  • Germany (UWG): Email advertising generally requires prior express consent, with a narrow existing-customer exception (and you must clearly tell customers they can object each time). Don’t hide who you are, and include a valid way to tell you to stop. If you’re a registered company (e.g., GmbH/AG), there are also “business letter” disclosure requirements that often apply to business emails/signatures.
  • France (CNIL guidance): For consumers, consent is the default. For professionals, outreach is often possible on an opt‑out basis if the message relates to their role — but every message should identify the sender and include a simple, free way to object/unsubscribe.
  • Netherlands (ACM + RVO): Opt‑in is the default, with an exception for existing customers and similar products/services. You must clearly identify the sender and make unsubscribing easy and free. Business correspondence (including emails) generally needs at least a trade name and Chamber of Commerce (KVK) number.

If you want a single “global-ish” footer that usually keeps you out of trouble, include:

  • Who you are (company/legal name or brand)
  • A real contact method (reply-to or support email)
  • A mailing address
  • One-click unsubscribe + a process to honor it fast
  • Any required company registration details for the jurisdictions you operate in

Sources

This is general information, not legal advice. If you’re unsure, get advice for your specific situation.


Questions? Feedback? Hit us up — we're all ears.

Enjoyed this article?

Get more email marketing tips delivered to your inbox. Join 4,000+ marketers.

No spam, unsubscribe anytime.

Ready to try better email marketing?

Start your 30-day free trial. Cancel anytime.

Free30-day trial·No credit card required·Book a demo