Mailing bot illegal? [Social Experiment]
<p>Hope I am in the right place for this type of question. I am a developer that would like to start up a little project that is kind of a social experiment.</p>

<p>The idea is that I setup a mailing bot with a list of emails (say a few million from a online email dump). This bot will send an email that is somewhat misleading, maybe notifying the user they may have won a prize with a link to collect it. </p>

<p>The idea being that I can notify the user once the link is clicked that this was a fake mail designed to spread awareness of scam emails/virus emails and how easy it is to be tricked.</p>

<p>I would also like to collect this information and display on a webpage how many emails are sent out and how many people have clicked the link.</p>

<p>With the information I could collect it anonymously (not linked to the email address) but it would be better to put it against the email so they can visit the site later and see more stats about the project/social experiment.</p>

<p>So the overall question is... <strong>Is this possible to do without being in any sort of trouble with laws etc?</strong> This will be a worldwide project and poses no threat other than being classed as a spam email.</p>

<p>In the US, your experiment is problematic in several respects according to the CAN-SPAM Act of 2003 <a href="https://en.wikipedia.org/wiki/CAN-SPAM_Act_of_2003" rel="nofollow noreferrer">CAN-SPAM Act of 2003 - Wikipedia</a>.</p>

<p>You <em>can legally send unsolicited email</em>, as long as you have an unsubscribe link in the message, and you have obtained those email addresses in a legal manner.</p>

<p>Your project is problematic because</p>

<p>1) you using emails from an online dump, which more than likely came from a spam harvester, and those emails were probably not legally obtained.</p>

<p>2) the subject lines (and content) of the emails you send will be deceptive, because you are trying to get people to click on the link to give you data on the people who respond while not telling them the true nature of the email.</p>

<p>3) you will be displaying your collected data in a public manner related to those personal email addresses, after deceiving those people to the nature of your emails, and this could possibly be illegal in terms of privacy outside of the CAN-SPAM Act of 2003.</p>

<p>Beyond the CAN-SPAM Act of 2003, in order to send all of those emails in the US, you will need to use internet service provider, which will either be a commercial business, a government entity, or and an NGO. All of those will have terms of service which probably restrict sending mass unsolicited emails using their services.</p>

<blockquote>
  <p>This will be a worldwide project and poses no threat other than being
  classed as a spam email....</p>
</blockquote>

<p>Wrong. You will more than likely be violating many email and privacy laws and those of many interest service providers in all of those jurisdictions, and will open yourself up to both civil and criminal liability.</p>

united-states united-kingdom internet email spam