Various legal frameworks exist to combat email spoofing. The CAN-SPAM Act in the United States, for example, sets rules for commercial emails and gives recipients the right to stop receiving them. Violators of the act can face significant penalties. Organizations can also work with cybersecurity firms and law enforcement agencies to track and prosecute perpetrators.