When the FBI Comes Calling…®
COMPUTER CRIME
SPAM
There are a number of classifications where the use of email to commit a crime is involved. On one level, simply sending "spam" is a crime in itself. On another level, when the email does something nefarious, that is a whole different level of crime.
18 U.S.C. § 1037 (2005).
Under 18 U.S.C. § 1037(a), it is a crime to do or conspire to do one, some, or all of the five things outlined in section 1037(a)(1)-(5). The first is accessing a protected computer without authorization and intentionally initiating the transmission of multiple commercial electronic mail messages (for simplicity, hereinafter "emails") from or through that computer. The second is using a protected computer to relay or retransmit multiple commercial emails, intending to deceive or mislead recipients about the origin of such a message. The third is materially falsifying header information in multiple emails and intentionally initiating the transmission of such emails. The forth is registering, "using information that materially falsifies the identity of the actual registrant, for five or more electronic mail accounts or online user accounts or two or more domain names, and intentionally initiates the transmission of multiple commercial electronic mail messages from any combination of such accounts or domain names." Finally, the fifth category of crime is falsely representing "oneself to be the registrant or the legitimate successor in interest to the registrant of 5 or more Internet Protocol addresses," and intentionally initiating the transmission of multiple emails from such addresses.
Under 18 U.S.C. § 1037(b), there are 3 different categories of punishment. The first category carries a punishment of a fine, imprisonment for not more than 5 years, or both, if the offense is committed in furtherance of a felony under Federal or State law, or if the defendant has previously been convicted under 18 U.S.C. § 1037, 18 U.S.C. § 1030, or under the law of any State for conduct involving the transmission of multiple emails or the unauthorized access to a computer system. The second category carries a punishment of a fine, imprisonment for not more than 3 years, or both if section 1037(a)(1) is violated, if section 1037(a)(4) is violated and 20 or more falsified accounts or 10 or more falsified domain name registrations were involved, if the volume of emails transmitted exceeded 2,500 during any 24-hour period, 25,000 during any 30-day period, or 250,000 during any 1-year period, if the offense caused loss to one or more persons aggregating $ 5,000 or more in value during any 1-year period, if any individual committing the offense obtained anything of value aggregating $ 5,000 or more during any 1-year period; or if the offense was undertaken by the defendant in concert with three or more other persons with respect to whom the defendant occupied a position of organizer or leader. In any other situation, the punishment is a fine, imprisonment for not more than 1 year, or both.
A person who is convicted under section 1037 will be ordered to forfeit to the United States any real or personal property which constitutes or is traceable to gross proceeds obtained by that person, as well as any equipment, software, or other technology used or intended to be used to commit or to facilitate the commission of the offense.
Some terms should be clarified. "Materially falsified" header or registration information, for example, as used in section 1037(a)(3)-(4), means it is altered or concealed in a manner that would impair the ability of a recipient of the message, an Internet access service processing the message on behalf of a recipient, a person alleging a violation of this section, or a law enforcement agency to identify, locate, or respond to a person who initiated the electronic mail message or to investigate the alleged violation. "Multiple" under section 1037 does not simply mean more than one; "multiple" means more than 100 electronic mail messages during a 24-hour period, more than 1,000 electronic mail messages during a 30-day period, or more than 10,000 electronic mail messages during a 1-year period.
Case Law Interpreting Section 1037
There are no cases reported referring to section 1037 at this time.