Rules
CASL Spam Law Canada: Unsubscribe Traps to Avoid
CASL spam law Canada gives every inbox real unsubscribe rights. Here is how senders dodge them, what to keep as evidence, and how to complain to the CRTC.
Everscroll readers live much of their online life inside an inbox, and this guide is about the rules that shape it. A Canadian law can feel far away from a US reader, but the unsubscribe traps it covers often show up outside Canada too. The same dark patterns, the same ignored clicks, the same quiet inbox rot.
That is why the CASL spam law Canada enforces belongs on a site about digital culture. Spam law is not just policy. It is the daily user interface of consent. When an unsubscribe link becomes a confirmation trap, the law shapes what you click, what you ignore, and what you can prove later.
What to take away
- CASL requires a clear unsubscribe mechanism in every commercial email, and the sender must honour it within 10 business days.
- The CRTC enforces the law, not the courts, so a complaint goes to the regulator rather than to a private lawsuit.
- Penalties run up to $10 million per violation for businesses under the Act, but the real risk to users is a silent inbox, not a headline fine.
- Most harm happens when people unsubscribe the wrong way, or fail to keep the evidence that a sender ignored them.
The costly mistake: unsubscribing into a trap
The worst outcome is not spam itself. It is confirming to a sender that your address is live and read by a human.
Unsubscribe or Report
Do you recognise the sender?
Use the unsubscribe link
Mark as spam and report to CRTC
A reader in Guelph clicks unsubscribe in a message from a list she never joined. The link opens a page asking her to re-enter her email address, then a second page asking why she is leaving. She completes both. Nothing changes.
Within a week the volume doubles. The click told the sender the address is active.
CASL does not permit this. Section 11 of the Act requires that the unsubscribe mechanism be functional and that the request be processed without further action from the recipient. The full text sits on the Justice Canada site for anyone who wants to check the wording.
The prevention is simple. Use the unsubscribe link only from senders you recognize. For everything else, mark the message as spam in your mail client and report it to the CRTC through its online complaint form, run by the Spam Reporting Centre. That route does not confirm your address to the sender.
A working unsubscribe link is a legal requirement, not a courtesy. If it takes more than one step, the sender is already offside.
The ones that look fine at first
Three failures look harmless in the first week and only bite later.
Three Quiet Failures
- Unsubscribing from one list, not all
- Reporting to provider, not CRTC
- Deleting messages before the 10-day window
- You unsubscribe from one list and assume the company has stopped all of them. Most firms run separate marketing, transactional and partner lists. CASL treats each as its own consent record.
- You report spam to your mail provider and stop there. Providers filter for you, but they do not fine anyone, and they do not create a record the CRTC can act on.
- You delete the messages after unsubscribing. Without the original headers and the date, you cannot show that the 10 business day window passed.
The pattern behind all three is the same: treating a personal annoyance as a private matter rather than a regulatory one.
The ones that only show up later
The quiet failure stays hidden for months. It is consent that was never really given.
Implied Consent Clock
- Purchase or business relationshipImplied consent begins
- Within 2 yearsSender may keep mailing
- After 2 yearsImplied consent expires
- 8-9 months onMessages still arriving unnoticed
CASL allows implied consent in narrow cases, like an existing business relationship within the previous two years. A retailer can rely on that window and keep mailing you long after you stopped shopping there. Nothing looks wrong, so you ignore it.
Eight or nine months on, the messages are still arriving, and by then the implied consent period has expired without anyone noticing.
That gap matters because the burden sits with the sender. Under the Act, a business that cannot produce a consent record is in breach. The Act and the Electronic Commerce Protection Regulations set out the consent categories and the two year clock.
The prevention is a dated note. Keep one folder for marketing mail you did not ask for, and check it once a season. If a sender is still writing after the implied window, you have a complaint with a timeline attached.
What they have in common
Every case above fails for the same reason: the user does the sender's work for them.
Clicking, replying, confirming a preference, or simply staying silent all shift effort onto the person who was targeted. CASL was written to put that effort on the sender. The Act, the regulations and the CRTC's guidance all assume the business will prove consent, identify itself, and make exit easy.
Two habits close most of the gap. First, use the spam button for unknown senders and the unsubscribe link only for known ones. Second, keep the message headers when you complain, because the CRTC asks for the full email rather than a description. A complaint with headers and dates moves; a complaint without them usually does not.
It also helps to understand why the same tactics keep appearing across platforms. The FTC Click-to-Cancel Rule on dark patterns and the wider dark pattern overview explain the subscription traps that many inboxes now mirror.
CASL penalties reach $1 million for an individual and $10 million for a business per violation, and the CRTC publishes its enforcement decisions. Those numbers are real, but they arrive slowly. Your own records are faster.
![500px provided description: You Re A Passive Observer And It Is All Moving [#concert ,#phone ,#iphone ,#frame ,#event ,#screen ,#out of touch ,#life passing by ,#screen time ,#watching through iphone ,#experience the world through a screen]. Digital wellbeing problems: when simple screen-time rules fail](/covers/digital-wellbeing-problems-640.webp?v=74182220)
