Last year (before CAN-SPAM was even in place), the FTC sued a couple of spammers for using deceptive subject lines and spoofed email addresses to send people to a porn site. The spammers have now settled with the FTC and agreed to give back $112,500 that they received from the spam. Of course, I wonder if that's all they really received from the spam. Besides, if they just are giving back what they made from the spam, then there seems to be no actual punishment on top of that for spamming. Also, if the FTC could go after people for misleading subject lines and spoofed return addresses, why did we need CAN-SPAM in the first place?