Home » Data Protection » Malware/Cybercrime

News

Spammer Ordered to Pay Facebook $711 Million

Facebook was awarded US$711 million in damages from a convicted spammer on Thursday, but the social networking site is hoping a separate criminal action will eventually send him to jail.

By Jeremy Kirk

October 30, 2009 — IDG News Service — Facebook was awarded US$711 million in damages from a convicted spammer on Thursday, but the social networking site is hoping a separate criminal action will eventually send him to jail.

Sanford Wallace was sued by Facebook in February along with Adam Arzoomanian and Scott Shaw for allegedly obtaining the login credentials for accounts. The accounts were then used to send spam to those users' friends starting around November 2008.

The spam either linked to other phishing sites that sought to collect more Facebook account credentials or linked to other commercial Web sites that paid spammers for referrals.

Facebook "doesn't expect to receive the vast majority of the award," according to a company blog. According to court filings, Wallace filed a bankruptcy petition in U.S. Bankruptcy Court for the District of Nevada earlier this year, although the petition was eventually dismissed.

However, the U.S. District Court for the Northern District of California has sent a request to the U.S. Attorney's Office to prosecute Wallace for criminal contempt. The court came up with the $711 million figure by awarding $50.00 per violation of the CAN-SPAM Act.

Wallace is alleged to have violated a temporary restraining order issued on March 2 as well as a preliminary injunction granted on March 24. The orders banned Wallace, Arzoomanian and Shaw from phishing and spamming on Facebook.

"In addition to the judgment, he now faces possible jail time," wrote Sam O'Rourke of Facebook's legal team. "This is another important victory in our fight against spam."

Facebook is not pursuing claims against Arzoomanian and Shaw. The company may choose to close the file once the default judgment is entered against Wallace, the court filing said.

In May 2008, Wallace was found guilty of violating the CAN-SPAM act and was ordered to pay $230 million for spamming and phishing on MySpace. The spam led to gambling, ringtone and pornography sites.