Online Services | Commonwealth Sites | Help | Governor

top image Virginia Home Page
 
 

SPAM/TECHNOLOGY CRIMES:  Virginia’s New Anti-SPAM Statute

__________________________________________

Why is this law needed?
Hardly a day goes by in which the news media do not report new examples of the use of computers and the Internet to commit fraud and economic crimes such as online auction fraud and identity theft.Equally troublesome is the problem of "spam." Unsolicited bulk e-mail, sometimes referred to as "spam" or "Unsolicited Commercial Electronic mail", is electronic mail which is unsolicited and sent for the purpose of selling the recipient goods, services, or properties. Commercial Electronic mail advertisements are most often used for multi-level marketing schemes, get-rich-quick schemes, work-at-home schemes, questionable products or pornography. Unsolicited e-mail from adult-oriented Web sites has increased 450 percent since June of 2001. In fact, adult oriented spam comprises 8 percent of all unsolicited messages --- double the percentage from last year. Not only does SPAM affect consumer and citizen email users but it can cripple businesses and Internet Service Providers.

Former Attorney General Jerry W. Kilgore worked with the Virginia hi-tech community and Internet Service Providers as well as Delegate Jeannemarie Devolites and Senator Ken Stolle to draft and support the new Anti-Spam Legislation passed by the 2003 Virginia General Assembly. This law is a first of its kind in the United States and is a comprehensive and leading effort to revise the Code of Virginia to address crimes committed via computers or computer networks involving spam and obscenity over the Internet.

Back to Top

What does this new law do?                           

  • Creates a new Anti-SPAM criminal section, § 18.2-152.3:1, that punishes the use of fraudulent means, such as forging headers or changing routing information to send SPAM. If the sending of SPAM is accompanied by any of the following aggravating factors, the crime will be punishable as a Felony:

    • Volume of SPAM transmitted exceeds 10,000 in any 24 hour time period, 100,000 in any 30-day time period, or 1 million in any 1 year period;

      Revenue generated from specific SPAM exceeds $1,000, or total revenue generated from all SPAM transmitted to any ISP exceeds $50,000; or

      Where defendant knowingly hires, employs, uses or permits any minor to assist in the transmission of SPAM.
    • All other SPAM sent with fraudulent use of header or routing information, but without these factors is punishable as a Class 1 Misdemeanor.

  • Creates a Forfeiture Provision for violations of the Virginia Computer Crimes Act so that any assets/proceeds earned by a Spammer as a result of a violation of the law may be seized and forfeited to the Commonwealth.

  • Includes "Kingpin SPAMMERS" in the definition "use" of a computer or computer network to allow victims to "reach through" and get to the mastermind behind the spamming activity. This affords law enforcement the ability to get "Kingpin SPAMMERS." Kingpin SPAMMERS are those who fund the spamming operations by hiring others to transmit SPAM. Formerly these Kingpin SPAMMERS could escape prosecution because they were not technically "using" the computer or computer network.

  • Creates Protections for Privacy Rights of Consumers who complain about SPAM. Spammers often threaten to depose or otherwise communicate with the complainants to question them about their Internet viewing habits and whether they asked to receive the messages.

  • Enhances Penalties for Computer Crimes Involving Obscenity. If a person uses a computer (including the illegal sending of SPAM sent by FRAUDULENT means) in connection with a violation of Virginia’s obscenity laws, he is now subject to enhanced penalties. Keep in mind that this is limited to obscenity. Not all pornographic or adult-oriented email is obscene and will be punishable under this provision.

Back to Top

I think I may have received illegal SPAM, what should I do?
If the unsolicited bulk e-mail appears to use false headers or routing information or appears to be sent using fraudulent means, you should first inform your Internet Service Provider as the suspected SPAMMER may have violated the terms and conditions of your Internet Service Provider’s usage policies. Criminal SPAM and other computer crimes cases can be prosecuted by local law enforcement. You should contact your local police department or Commonwealth Attorney’s offices. The Office of the Attorney General’s Computer Crimes Unit may also be able to help you or your local law enforcement in the prosecution of a criminal case. Keep in mind, the Virginia Computer Crimes Act also gives citizens a civil remedy and you can take the SPAMMER to court yourself.

Who investigates and prosecutes SPAM cases?
Local police, the state police, the Attorney General’s Office Computer Crimes Unit and Federal Law Enforcement may all investigate and prosecute criminal SPAM cases where unsolicited bulk e-mail is sent using FRAUDULENT means. Some of the larger Internet Service Providers have fraud and security departments who may conduct their own investigations and assist law enforcement.

What are the penalties?                                      
If the SPAM is sent with fraudulent header or routing information and is accompanied by one of the following aggravating factors then it is punishable as a Class 6 Felony. A Class 6 Felony is punishable by a one to five year prison sentence and up to $2500 fine or both.

All other SPAM sent with fraudulent use of heading or routing information, but without these aggravating factors is punishable as a Class 1 Misdemeanor. A Class 1 Misdemeanor is punishable by up to twelve months in jail, a $2500 fine or both.
SPAM sent with fraudulent use of heading or routing information and containing obscene material is also punishable as a Class 1 Misdemeanor and for a second or subsequent offense it is punishable as a Class 6 Felony.

When will the new law take effect?                              
The new law will took effect on July 1, 2003.
If you have further questions about SPAM or other computer crimes, please call the Computer Crime Unit of the Office of the Attorney General. 804.786.2071.