Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Let's say I receive a spam which mentions a fictive company

If I follow the link, upload files, and finalize the transaction, clearly has made some profit. But is it the only one which just made profit ? Has somebody at necessarily made the decision to use spam (whether they name it spam internally or not) as a way to find new customers? The URL in this spam doesn't link directly to, but through The reply-to is also not directly related to the company.

share|improve this question

This largely depends on the legal system in the country the complaint is filed, so the usual IANAL disclaimer applies. In general this kind of thing is an investigative matter. If the company's site is mentioned in spam, an investigator will assume that the site is involved or responsible. Further investigation will likely involve looking for money trails to known spammers, rogue advertising networks, malware factories, etc. However, if a jury can be convinced that the company was aware of and directly involved in the spam, it may be possible to convict them under a conspiracy charge.

share|improve this answer
And there is also the issue of companies with promotional programs (tell your friends about and get 10%) with promo coded URLs. Then other people end up doing the spamming with URLs having their promo codes. So both end up profiting. But many companies doing these promos "know" people will spam. – Skaperen Jan 27 '13 at 6:00

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.