Do I Need a Physical Address in My Emails?

Why the Physical Address Requirement Exists

The CAN-SPAM Act of 2003 established the physical address requirement as one of several provisions designed to reduce deceptive commercial email. The requirement serves multiple purposes that protect both email recipients and the broader email ecosystem.

• Sender identification: A physical address confirms the sender is a legitimate, traceable business rather than an anonymous operation
• Accountability: It provides a way for recipients, regulators, and law enforcement to contact the sender outside of email channels
• Legal recourse: The address enables formal legal correspondence and service of process if violations occur
• Spam deterrence: Anonymous senders cannot easily comply, which acts as a natural barrier against illegitimate email operations
• Trust building: Recipients are more likely to engage with emails from senders who openly share their physical location

The requirement applies to all commercial electronic messages, which CAN-SPAM defines broadly as any email whose primary purpose is the commercial advertisement or promotion of a product or service. This includes newsletters, promotional campaigns, re-engagement emails, and any message that primarily advertises or promotes something.

Acceptable Address Types

Business Street Address

The most straightforward option for businesses with a dedicated office, storefront, or warehouse. Your company's actual physical location satisfies the requirement with no additional setup needed.

• Must be a real, existing location where you conduct business
• Must be capable of receiving postal mail through USPS or other carriers
• Can be any legitimate location tied to your business operations
• Ideal for businesses that want to project an established, local presence

Post Office Box (PO Box)

A PO Box rented through the United States Postal Service is fully acceptable under CAN-SPAM. This is a popular option for small businesses and sole proprietors who want to keep their home address private.

• Must be registered in your name or your business name
• You must regularly check and be able to receive mail at the box
• Standard format: PO Box 123, City, State ZIP
• Costs typically range from $20 to $60 per six months depending on box size and location
• Does not include mail forwarding or scanning services

Private Mailbox (PMB)

Commercial mail receiving agencies such as The UPS Store and similar providers offer private mailbox rentals that satisfy CAN-SPAM requirements. These services provide a street address format rather than a PO Box number.

• Registered with the agency under USPS Form 1583 requirements
• Uses "PMB" or "#" designation in the address format
• Provides a street address appearance: 123 Main St #456, City, State ZIP
• Often includes package receiving capabilities that PO Boxes lack
• Must maintain active registration and be able to receive mail

Virtual Mailbox Services: A Modern Alternative

Virtual mailbox services have emerged as one of the most popular address solutions for email marketers, remote businesses, and companies without a fixed physical location. These services provide a real street address where mail is received, scanned, and forwarded digitally or physically to your actual location.

How Virtual Mailboxes Work

A virtual mailbox provider assigns you a street address at their physical facility. When mail arrives at that address, staff receive it on your behalf. Depending on your plan, the provider will scan the envelope exterior, open and scan the contents, forward the physical mail to another address, shred unwanted mail, or deposit checks.

Types of Virtual Mailbox Services

• Basic virtual mailbox: Provides an address, receives mail, and forwards it. Suitable for businesses that need a compliant address with minimal mail volume
• Virtual office with mail handling: Combines a business address with additional services like a local phone number, meeting room access, and receptionist services. Useful for businesses that occasionally need in-person meeting space
• Mail scanning and digital delivery: Focuses on digitizing all incoming mail. Providers open, scan, and upload your mail to a dashboard. Best for fully remote businesses that rarely need physical mail
• Registered agent services: Primarily designed for legal compliance (receiving legal and government documents), but many also serve as a valid postal address for CAN-SPAM purposes

What to Look For in a Virtual Mailbox Provider

• USPS Form 1583 compliance, which is required for any commercial mail receiving agency
• A real street address (not a PO Box rebranded as a street address)
• Clear pricing with no hidden fees for mail scanning or forwarding
• Digital dashboard for managing incoming mail
• Reliable forwarding times if you need physical mail sent to your location
• Availability of addresses in professional business districts

Comparing Address Options for Email Compliance

The table below compares the four main address types that satisfy the CAN-SPAM physical address requirement. Your best option depends on your budget, privacy needs, and the image you want to project to email recipients.

Factor	Street Address	PO Box	Virtual Mailbox	Registered Agent
Monthly Cost	Included with lease	$3 - $10/mo	$10 - $50/mo	$10 - $25/mo
Privacy	Low (public address)	Medium	High	High
Professionalism	High	Low-Medium	High	Medium
Setup Time	Immediate	Same day	1 - 3 days	1 - 5 days
Mail Forwarding	No	Limited (USPS only)	Yes (physical + digital)	Yes (limited)
Street Address Format	Yes	No (PO Box format)	Yes	Varies
Best For	Established businesses	Budget-conscious senders	Remote / online businesses	LLCs and corporations

Where to Place the Address in Your Emails

CAN-SPAM does not prescribe a specific location for the physical address within the email, but industry convention and best practice place it in the email footer. The address should be clearly visible and not hidden through small font sizes, low-contrast colors, or obscured formatting.

• Place the address at the bottom of the email body, typically in the footer area
• Position it near the unsubscribe link for a clean, compliant footer
• Use a legible font size (at minimum, the same size as other footer text)
• Do not use the same color text as the background to hide the address

Example Footer Format

Company Name
123 Main Street, Suite 100
City, State 12345

Or with PO Box:

Company Name
PO Box 456
City, State 12345

Or with virtual mailbox:

Company Name
789 Business Parkway #200
City, State 12345

What Is NOT an Acceptable Address

Not every form of contact information satisfies the CAN-SPAM physical address requirement. The following are explicitly not acceptable:

• Fake or fictitious addresses: Non-existent locations, made-up street names, or addresses where you have no presence or mail receiving capability
• Email addresses: An email address does not satisfy the postal address requirement, even if it is a valid way to contact you
• Website URLs: A web address or contact page link is not a postal address
• Phone numbers: A phone number alone does not satisfy the requirement
• Addresses where you cannot receive mail: Using an address where mail will be returned as undeliverable violates the requirement
• Expired PO Boxes or virtual mailboxes: If your rental lapses and mail cannot be delivered, you are no longer in compliance

CAN-SPAM Penalties for Non-Compliance

The CAN-SPAM Act is enforced by the Federal Trade Commission (FTC), and the penalties for non-compliance are substantial. Failing to include a valid physical postal address is one of several violations that can trigger enforcement action.

Beyond FTC enforcement, non-compliance carries additional consequences:

• Internet Service Provider (ISP) action: ISPs and email service providers can terminate your account for CAN-SPAM violations, even without an FTC complaint
• Deliverability damage: Emails missing required elements like a physical address are more likely to be filtered as spam, reducing inbox placement rates
• Blocklist risk: Repeated violations can lead to your sending IP or domain being listed on industry blocklists, affecting all email from your organization
• State-level enforcement: Many US states have their own anti-spam laws with additional penalties. State attorneys general can bring actions under both state and federal law
• Reputational harm: Publicized enforcement actions damage brand trust and can be difficult to recover from

Transactional Email Exception

True transactional emails are largely exempt from CAN-SPAM's commercial email requirements, including the physical address mandate. Transactional messages include order confirmations, shipping notifications, password resets, account alerts, and similar communications where the primary purpose is to facilitate an existing transaction or relationship.

However, the exception has important limits:

• The email must be primarily transactional in nature, and the commercial content cannot be the main purpose
• If promotional content dominates the email or appears before the transactional content, the entire email may be classified as commercial
• Mixed-content emails that blur the line between transactional and promotional may still require a physical address
• Best practice is to include your physical address in all emails regardless of classification, as it adds legitimacy and avoids ambiguity about the email's purpose

International Email Address Requirements

CAN-SPAM is the US regulation, but if you send commercial email to recipients in other countries, you may need to comply with additional laws. Many international anti-spam regulations include their own identification and address requirements.

GDPR (European Union)

The General Data Protection Regulation does not specifically require a physical address in the body of each email. However, GDPR mandates that your privacy policy include full contact details for the data controller, including a physical address. In practice, most GDPR-compliant email marketers include a business address in their email footer because it supports the transparency and accountability principles central to GDPR. Additionally, the ePrivacy Directive requires that the identity and address of the sender be clearly stated in commercial communications.

CASL (Canada)

Canada's Anti-Spam Legislation is one of the strictest anti-spam laws in the world. CASL requires that every commercial electronic message include the sender's name, mailing address, and either a telephone number, email address, or web address. The mailing address must be valid for at least 60 days after the message is sent. Unlike CAN-SPAM, CASL also requires explicit opt-in consent before sending commercial email.

Australian Spam Act 2003

Australia's Spam Act requires that commercial electronic messages include accurate sender identification information. This includes the sender's name or business name and contact details, which must include a physical address or a way to find the physical address (such as an ABN lookup). The Australian Communications and Media Authority (ACMA) enforces these requirements with penalties of up to AUD $2.2 million per day for individuals and greater amounts for corporations.

PECR (United Kingdom)

The Privacy and Electronic Communications Regulations apply to email marketing sent to UK recipients. PECR requires that the sender's identity is not disguised or concealed and that a valid contact address is provided. Following Brexit, the UK GDPR operates alongside PECR, requiring data controller contact details in privacy policies. The Information Commissioner's Office (ICO) enforces PECR with fines of up to 500,000 GBP for serious violations.

Best Practice for International Senders

If you send commercial email to recipients in multiple countries, include a physical postal address in every email regardless of the specific legal requirements of each jurisdiction. This single practice satisfies the address component of CAN-SPAM, CASL, the Australian Spam Act, PECR, and the transparency expectations of GDPR. It is far simpler to include the address universally than to segment compliance by recipient location.

Email Address Requirements by Email Platform

Beyond legal requirements, the email service providers (ESPs) and platforms you use to send email enforce their own address policies. These platform-level requirements apply regardless of the laws in your jurisdiction, because the platforms themselves must comply with CAN-SPAM and other regulations to maintain their sending infrastructure.

How ESPs Enforce the Physical Address Requirement

Most major ESPs require you to provide a physical mailing address when you create your account. This address is automatically inserted into the footer of every email you send through their platform. If you do not provide an address, you typically cannot send email at all.

• Mailchimp: Requires a physical address during account setup. The address is automatically added to campaign footers using a merge tag. Removing this from your template may violate their terms of service
• SendGrid: Requires sender identity verification including a physical address. The address must be included in every email sent through their platform, whether using templates or the API
• Constant Contact: Mandates a physical address in all email campaigns. The platform adds it automatically and does not allow you to remove it from campaign emails
• HubSpot: Requires a company address in your account settings. The CAN-SPAM footer (including address and unsubscribe link) is automatically appended to marketing emails
• Amazon SES: While SES gives senders more flexibility as a lower-level sending service, their acceptable use policy still requires CAN-SPAM compliance. You are responsible for including the physical address in your email content

Meeting Gmail's sender requirements and other mailbox provider policies also depends on including proper identification in your messages, which starts with a valid physical address in your email footer.

How to Choose the Right Address Option for Your Business

Selecting the right address type depends on several factors specific to your business situation. Consider the following decision criteria when choosing an address for your email footer.

Privacy Requirements

If you are a home-based business, freelancer, or solo entrepreneur, privacy is likely a primary concern. Sharing your home address in every email you send exposes it to every recipient, and that address can be forwarded, published, or aggregated by data brokers. In this case, a PO Box or virtual mailbox is the better option.

Professional Image

A street address in a recognized business district projects more credibility than a PO Box number. If your business serves enterprise clients or operates in a trust-sensitive industry (financial services, legal, healthcare), a virtual mailbox with a professional street address may be worth the additional cost over a basic PO Box.

Mail Volume and Type

If you rarely receive physical mail and only need an address for CAN-SPAM compliance, a basic PO Box is the most cost-effective solution. If you receive packages, legal documents, or need mail scanning and forwarding, a virtual mailbox or PMB service will serve you better.

Budget

PO Boxes are the least expensive option at roughly $20 to $60 per six months. Virtual mailboxes range from $10 to $50 per month depending on features and location. Registered agent services typically cost $10 to $25 per month. Weigh the cost against the value of privacy, professionalism, and convenience for your specific situation.

Geographic Considerations

If your business operates nationally or internationally but you want an address in a specific city or state for branding or legal purposes, virtual mailbox services offer the most flexibility. Many providers allow you to choose addresses in major metropolitan areas regardless of where you actually live or work.

Common Mistakes to Avoid

Even senders who intend to comply with the physical address requirement make errors that put them at risk. These are the most common mistakes we see in email compliance audits.

• Using an expired or lapsed address: If your PO Box rental expires or your virtual mailbox subscription lapses, mail sent to that address will be returned as undeliverable. You are no longer in compliance even though the address was once valid. Set calendar reminders to renew well before expiration
• Hiding the address with formatting tricks: Making the address text the same color as the background, using a 1-pixel font size, or placing it in a hidden HTML element violates the spirit and likely the letter of CAN-SPAM. The address must be clearly visible to the recipient
• Using someone else's address without authorization: You cannot use a friend's address, a random business address, or any location where you do not have a legitimate right to receive mail. The address must be yours
• Forgetting to update after a move: When your business relocates, update the address in your ESP, email templates, and any automated sequences immediately. Sending emails with an address where you no longer receive mail is a compliance gap
• Omitting the address from automated sequences: Drip campaigns, welcome sequences, and automated follow-ups must include the physical address just like manually sent campaigns. Audit all your automated flows to confirm the address is present
• Assuming transactional emails never need an address: While true transactional messages are exempt, many emails that senders classify as transactional actually contain enough promotional content to be treated as commercial under CAN-SPAM. When in doubt, include the address
• Using a foreign address without understanding the implications: If you send to US recipients, a foreign address is technically permissible under CAN-SPAM but may raise deliverability concerns. Some ESPs and spam filters treat foreign addresses with additional scrutiny. For US-focused sending, a US-based address is recommended
• Not including the address in plain-text versions: If you send multipart emails with both HTML and plain-text versions, the physical address must appear in both. The plain-text version is what some email clients and spam filters evaluate

Step-by-Step Compliance Checklist

Use this checklist to verify your emails meet the physical address requirement and broader CAN-SPAM compliance standards.

1. Choose an address type: Select a street address, PO Box, PMB, or virtual mailbox based on your privacy, budget, and professionalism needs
2. Verify the address can receive mail: Send a test letter to the address and confirm delivery before using it in email campaigns
3. Update your ESP account settings: Enter the address in your email service provider's account or list settings so it populates automatically in email footers
4. Audit all email templates: Check every active template, automated sequence, and drip campaign to confirm the address appears in the footer
5. Check both HTML and plain-text versions: Verify the address is present and legible in both formats of your emails
6. Confirm the address is visible: Open a test email and visually confirm the address is readable and not hidden, truncated, or obscured by formatting
7. Include the unsubscribe link alongside the address: CAN-SPAM requires both a physical address and a functioning unsubscribe mechanism in commercial emails
8. Set renewal reminders: If using a PO Box or virtual mailbox, set calendar alerts to renew the service before it expires
9. Review compliance quarterly: Schedule regular audits of your email footer content to catch any issues before they become violations