An Indian-based web development agency, Web IT Namo (webitnamo.com), has been identified as a central figure in a sprawling global spam operation that’s been bombarding inboxes of businesses worldwide with unsolicited emails.

Over the past year, business owners and IT professionals across Australia, the United States, the UK, and Europe have reported receiving persistent, unwanted emails advertising web development, mobile app design, and SEO services.

The spam messages are often sent from free personal email accounts—Outlook.com, Gmail.com, and sometimes even Hotmail.com addresses—instead of the companies real business domain.

Cybersecurity analysts say this kind of approach is not only unethical but also likely in breach of anti-spam laws in several jurisdictions, including the CAN-SPAM Act in the United States, Australia’s Spam Act 2003, and the UK’s Privacy and Electronic Communications Regulations (PECR).

Vikas Sharma, listed as the Business Development Manager at Web IT Namo, is now under fire for his direct involvement in the company’s global spam operation.

Sources and leaked communications suggest Sharma is fully aware of the mass unsolicited email tactics being used to generate leads—emails that flood inboxes daily, offering web and app development services to unsuspecting businesses.

Small business owners say the barrage of unsolicited emails has made it harder to distinguish legitimate leads or service providers.

“It clogs our inboxes daily,” says Greg Templeton, who runs a boutique ecommerce site in Canada,”

“One day it’s Web IT Namo, the next it’s someone pretending to be from Google support. But it’s all spam—and we didn’t ask for any of it.”

Despite the mounting complaints, Web IT Namo continues to operate openly online, promoting services ranging from WordPress design to custom Android apps.

Reports suggest that hundreds of freelancers from countries like Bangladesh, Nigeria, India, and the Philippines are participating in a low-tier lead gen commission hustle, unknowingly (or knowingly) violating anti-spam laws and putting businesses at risk.