Under the CAN-SPAM Act, once a recipient opts out, the merchant must cease all future communications. If they continue sending messages, they can be reported and blocked directly on any email platform or using third-party apps.