Costco has agreed to pay $14 million to resolve a class action lawsuit in King County Superior Court accusing the retailer of sending promotional emails with subject lines that were not true when they were sent. The complaint cites messages like “Today is the last day to access Member-Only Savings” and “Hot Buys available for 5 Days Only,” arguing that Costco had already decided to extend those promotions before the deadline in the subject line ever arrived. Costco denies wrongdoing. It agreed to the settlement anyway, and it is now the largest payout to date in the wave of litigation built on Washington’s Commercial Electronic Mail Act.
Anyone who received a Costco commercial email in Washington State between June 2, 2021, and July 7, 2026, can file a claim through August 24, 2026. A final approval hearing is set for October 2, 2026. Net proceeds, after attorneys’ fees and administrative costs, will be split evenly among everyone who files, with early estimates putting individual payouts as high as $500.
Why This Settlement Is Different From the Rest of the Wave
CEMA litigation has been building since a 2025 Washington Supreme Court ruling in Brown v. Old Navy confirmed the law reaches any false or misleading subject line, not just emails that disguise themselves as non-commercial. Over a hundred cases have followed against national retailers. Most have settled quietly or remain in progress, and dollar figures rarely become public before a case resolves.
Fourteen million dollars is not a quiet number. It is a data point every general counsel and every marketing leader at a national retailer can now point to when arguing about how much exposure a subject-line playbook actually carries. Countdown language tied to a promotion that marketing already planned to extend is no longer a hypothetical legal risk described in a memo. It has a settlement figure attached to it, a claims website, and a court date.
The Deliverability Problem Sitting Inside the Legal One
The subject lines at the center of this case were not spam in the traditional sense. They came from a real, opted-in sender to real subscribers, correctly authenticated, landing in the inbox exactly as intended. That is precisely why this case matters for deliverability, not despite it.
Fabricated urgency works until a subscriber notices the pattern. A recipient who sees “last day” three separate times for what turns out to be the same ongoing sale does not usually unsubscribe quietly. A meaningful share hits the “report spam” button instead, because it is faster and because platforms like Gmail increasingly treat it as the honest description of how the message felt. Spam complaint rate is the single metric Gmail, Yahoo, and Microsoft weigh most heavily when deciding how a sending domain gets treated, with 0.3% widely cited as the threshold past which inbox placement starts collapsing regardless of how clean the authentication is underneath it.
That is the part authentication cannot touch. A message with perfectly aligned SPF, DKIM, and a DMARC policy at reject is, by definition, provably from the domain it claims to be from. It says nothing about whether the claim in the subject line is true. Mailbox providers do not stop watching once authentication passes. They keep scoring the domain on how recipients actually respond, and a domain that trains its own subscribers to distrust its urgency language is quietly funding its own complaint rate.
What This Means for Your Program
Treat every deadline claim in a subject line as a commitment, not a copywriting device. If a promotion might get extended, do not put a hard date in the subject line. The legal exposure and the deliverability exposure come from the exact same sentence.
Watch complaint rate trends around your highest-urgency campaigns specifically, not just in aggregate. A spike tied to repeated “last chance” sends is an early warning that shows up in Google Postmaster Tools and similar reporting well before a lawsuit would.
Audit your CRM and ESP for subject-line history against actual promotion end dates. If your own records would embarrass you in front of a claims administrator, they are also the records training subscribers to stop trusting your urgency messaging.
Keep authentication at full enforcement regardless. It is a separate control from message honesty, but it remains the baseline that ensures the reputation damage from bad subject lines lands only on your own domain, not on forged traffic riding alongside it.
The Takeaway
Costco’s $14 million settlement will be read mostly as a privacy and consumer-protection story, and that reading is correct as far as it goes. It is also a reminder that the line between legal risk and deliverability risk in email marketing is thinner than most programs treat it. The same fabricated urgency that draws a class action complaint is the exact behavior that trains subscribers to hit report spam, and mailbox providers have been quietly keeping score the whole time.
Excello Mail gives you continuous visibility into your DMARC authentication health and the sending reputation built on top of it, so the trust your subject lines promise is backed by a domain mailbox providers actually trust. Sign up for free to Excello Mail and see how your authentication and reputation are holding up today.