Sued by Facebook, Spam King surrenders to FBI

Sued by Facebook, Spam King surrenders to FBI

Summary: Sanford Wallace has surrendered to the FBI after being indicted by a federal grand jury in San Jose for spamming Facebook.


Sanford Wallace, also known as the Spam King, Spamford, and David Frederix, turned himself in to the FBI after being indicted by a federal grand jury in San Jose for spamming Facebook. The US Department of Justice (DOJ) confirmed that the 43-year-old had been indicted by a federal grand jury on multiple counts of fraud, intentional damage to a protected computer, and criminal contempt.

"We applaud the efforts of the US Attorney's Office and the FBI to bring spammers to justice," Chris Sonderby, Facebook Lead Security and Investigations Counsel, said in a statement. "Two years ago, Facebook sued Wallace and a federal court ordered him to pay a $711 million judgment for sending unwanted messages and wall posts to people on Facebook. Now Wallace also faces serious jail time for this illegal conduct. We will continue to pursue and support both civil and criminal consequences for spammers or others who attempt to harm Facebook or the people who use our service."

After a two-year FBI investigation, a July 6, 2011 indictment concluded that Wallace accessed Facebook's computer network in three separate attacks (November 2008, December 2008, and February 2009). He managed to compromise 500,000 Facebook accounts and fill the social networking website's servers with 27 million spam messages. Facebook officials claimed they spent a lot of time and money fixing the vulnerabilities the Spam King exploited in order to prevent future attacks.

Wallace wrote a script that automatically logged in to the accounts he had compromised and retrieve a list of all the users' friends so that he could post spam messages to their Walls, after figuring out how to bypass the site's spam filters. The messages looked fishy, but as we still see today, many clicked the included link anyway and entered their email addresses and passwords. Spamford then used their login credentials and to repeat the process, and got paid each time he drove traffic to a given spam site.

Wallace made his initial court appearance yesterday, was released on $100,000 unsecured bond, and was ordered not to access Facebook or MySpace. He faces six counts of electronic mail fraud, three counts of intentional damage to a protected computer, and two counts of criminal contempt. Spamford has been ordered to return to court in San Jose on August 22, 2011. If convicted on all counts, he faces a maximum sentence of 16 years in prison and more than $2 million in fines.

Facebook originally sued Wallace two years ago, alleging that he had hijacked legitimate Facebook accounts and used them to distribute spam messages. In March 2009, a judge banned Wallace from using Facebook. He could not stay away though, and logged onto an account while aboard a Virgin Airlines flight from Las Vegas to New York just a month later. In January 2011, he registered a new Facebook account under the name David Sinful-Saturdays Fredericks, again violating the judge's orders.

In October 2009, Facebook was awarded $711 million for a default judgment against Wallace because he violated the Can-Spam Act. Spamford filed for bankruptcy not long after. He was also found to have "willfully violated" a temporary restraining order and preliminary injunction issued in the case, and was thus referred to the US Attorney's Office for prosecution of criminal contempt.

In May 2008, MySpace won statutory damages of more than $230 million against him and his friend. Those that have been reading ZDNet for even longer, here are two articles from 1998 that show Wallace was spamming in the days before social networking even existed (he pretty much invented junk faxes and junk emails): 'Spamford' Wallace builds new marketing site and Sanford Wallace: Life after spam.

Topics: Government US, Social Enterprise

Emil Protalinski

About Emil Protalinski

Emil is a freelance journalist writing for CNET and ZDNet. Over the years,
he has covered the tech industry for multiple publications, including Ars
Technica, Neowin, and TechSpot.

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.


Log in or register to join the discussion
  • RE: Sued by Facebook, Spam King surrenders to FBI

    Good article. Thanks.
  • Life in prison...

    ...would be too good for this miscreant!
  • RE: Sued by Facebook, Spam King surrenders to FBI

    I guess reports that Wallace had given up spamming were too good to be true. Assuming he's guilty, I think 5-10 years in Club Fed should help to straighten him out. I don't really want my kids to be providing for his retirement (which is what would happen if he got life in prison).

    He should also forfeit any advertising revenue he may have earned from his Facebook venture (the $711 million he owes Facebook should be a separate charge). Ideally, convicted felons would also be required to pay the cost of their own prosecution and imprisonment (assuming they have enough money), but the law doesn't work that way.

    Jail would be more of a deterrent against white collar crime if those convicted of such crimes were highly likely to leave it broke.
    John L. Ries
    • RE: Sued by Facebook, Spam King surrenders to FBI

      They're not gonna get a dime. Wallace has declared bankruptcy which means he's protected from the courts. I doubt he has much, anyway. Every venture he's created has either been declared bankrupt or been liquidated.<br><br>16 years would be about the best we can hope for that fat piece of_sh!t.
      bunker buster
      • RE: Sued by Facebook, Spam King surrenders to FBI

        @bunker buster You hate on fat people?
    • RE: Sued by Facebook, Spam King surrenders to FBI

      @John L. Ries Federal jail is easy for those people. Throwing them in a city or county jail will teach them some lessons.
  • RE: Sued by Facebook, Spam King surrenders to FBI

    I hope he had to surrender his passport.
    • The question is...

      ...who would grant him a visa? That said, I'd be surprised if he didn't have to surrender his passport as a condition of release.
      John L. Ries
  • RE: Sued by Facebook, Spam King surrenders to FBI

    In a related scam, who are the criminals behind the so-called XP ANTISPYWARE 2012? Can some whizkid identify them? One of the files is "ain.exe" --would that help send them to jail, hopefully?
  • RE: Sued by Facebook, Spam King surrenders to FBI

    Why give him a "comfortable tax payer funded jail cell".
    Give him the jail cell but with Hard Labour in a rock quarry, havent got one - there create one - for the time of sentence, with no right of appeal; then he has plenty of time to reflect and create a salable item for the county - gravel
  • A small victory against the flood of #$^^&#

    Wallace's indictment and surrender represent a small and symbolic victory against the flood of spam, phishing, and malware that the forces of darkness keep sending out.

    As much as I hate having the FBI, CIA, and other Big Brother agencies spying on all of us all of the time, their current efforts are woefully inadequate to keep up with, defeating, arresting, and imprisoning the Wallaces of this world. (Cyber crime units do not even exist at all at most local levels of law enforcement, leaving many of us without any recourse when w are attacked.)