# CMRA compliance explained: the rules behind your virtual address > A plain-English deep dive into Commercial Mail Receiving Agency (CMRA) regulations — what a CMRA is under USPS rules, why Form 1583 exists, how to format a CMRA address, what you can and can't do there, state-specific quirks, how to spot a properly licensed CMRA, and what happens if a provider (or you) cuts corners. Canonical URL: https://mailnow.ai/articles/cmra-compliance-explained Every virtual mailbox in the United States — the one we offer at mailnow.ai included — is regulated under a single, fairly old chunk of US Postal Service rules called the Commercial Mail Receiving Agency rules. CMRA is the official USPS term for any business that receives mail on behalf of someone else for compensation. The rules are not complicated, but they are specific, and they're the reason your address has a 'PMB' or '#' in it, the reason you had to fill out a notarized Form 1583, and the reason a real virtual address provider can't just hand you a suite number on the spot. Most providers will not explain any of this to you. We'd rather you understand exactly what you're signing up for, what you're allowed to do at the address, and how to tell whether the provider you're considering is actually compliant — because if they're not, the postal service can simply stop delivering your mail. This guide walks through the entire regulatory picture in plain language, with no fluff. > **Where the CMRA rules live** — The official source is USPS Domestic Mail Manual section 508.1.8 ("Commercial Mail Receiving Agencies"), with supporting detail in Publication 508 and the language of Form 1583 itself. Everything in this article traces back to those documents. ## What a CMRA actually is A Commercial Mail Receiving Agency is, in USPS's own definition, a private business that — as a service to customers, for a fee — accepts delivery of mail from the Postal Service and then makes it available to those customers, either by holding it for pickup, scanning it, or forwarding it elsewhere. The 'for a fee' piece is what makes it a CMRA. Your friend who picks up your mail while you're traveling is not a CMRA. A UPS Store, a Postal Annex, a Mail Boxes Etc., and every virtual mailbox provider in the country are CMRAs. The rule applies whether the provider has a physical storefront or operates behind the scenes scanning mail in a warehouse. The defining test is whether someone other than the named recipient is accepting delivery of the recipient's mail for payment. If yes, USPS considers it a CMRA, and the full rule set kicks in — registration with the local postmaster, a signed Form 1583 on file for every customer, the address-formatting requirements, and the recordkeeping and inspection obligations. ## Why CMRAs require Form 1583 Form 1583 — full name 'Application for Delivery of Mail Through Agent' — is the only thing that gives a CMRA legal authority to accept your mail. Without it on file, USPS technically cannot deliver mail addressed to you at the CMRA's address; in practice the carrier delivers and the CMRA stores it, but if a postal inspector audited the location and found mail being held for a customer with no Form 1583, the CMRA could be ordered to refuse all further deliveries for that recipient. The form, in other words, is the consent that turns 'someone else handling your mail' from a federal mail-handling violation into a legitimate, compensated agency relationship. Form 1583 captures three things USPS cares about. First, your identity, verified by a notary against two forms of ID — at least one of which must be a government-issued photo ID with a serial number. Second, the address you are authorizing the agent to receive mail at, and the names (yours, plus any business or trade names) the agent is permitted to receive mail under. Third, an explicit acknowledgment that the agent will turn your information over to law enforcement if served with appropriate process. None of this is optional, and a CMRA that signs you up without a complete, notarized 1583 is breaking the rule on the very first day of your service. > **Why notarization is non-negotiable** — USPS requires the notary because the form is a federal sworn statement. The notary's seal is what makes it an enforceable identity verification — without it, the form is just a piece of paper anyone could fill out for anyone. Remote online notarization counts; it just has to be a licensed notary, on the record, verifying two real IDs. ## Address formatting: the PMB and # rules Probably the most visible part of the CMRA rules is how your address must be written. Every customer of a CMRA has to be assigned a unique mailbox identifier, and that identifier has to appear on the address line in one of two USPS-approved formats. If it doesn't, USPS reserves the right to mark mail Undeliverable as Addressed and return it to sender. The formats are simple, but the placement matters. - PMB format — "Jane Doe / 123 Main St PMB 4567 / Anytown, ST 12345". The letters "PMB" stand for "Private Mail Box" and signal to USPS that this is a CMRA address. - Pound-sign (#) format — "Jane Doe / 123 Main St # 4567 / Anytown, ST 12345". USPS treats the standalone "#" before the box number as equivalent to PMB and accepts it for delivery. What you cannot do is dress the box number up as "Suite 4567", "Apt 4567", "Unit 4567", or anything else that implies you have a real, leased commercial unit at the building. USPS specifically prohibits this because it disguises a private mailbox as a tenancy, which historically was used to hide the residential nature of a sender or recipient from law enforcement, banks, and senders running compliance checks. If a CMRA address you've seen advertised uses the word 'Suite,' that is a hard red flag — the provider is either out of compliance, or they've quietly stopped following the rule and are betting USPS won't notice. Either way, the moment USPS does notice, your mail can be returned. ## What you can — and can't — do at a CMRA address A properly registered CMRA address is more flexible than people expect. It is a real US street address, accepted by virtually every major bank, by the IRS, by Stripe, by state Secretaries of State for LLC formation, by domain registrars, and by carriers including UPS, FedEx, and DHL (something a PO Box cannot match). You can use it as your business address on websites, business cards, and tax returns, and most banks will accept it as the principal place of business for opening an account, especially when it's paired with formation documents and the operating agreement. What you can't do is use it as a residence. CMRA addresses are commercial mailbox locations — there is no apartment, no living quarters, no overnight presence. That distinction matters in three specific places: (1) you cannot register to vote at a CMRA address, because voter registration requires a residential address; (2) you cannot get a state driver's license at a CMRA address in any state we've checked, because state DMVs require proof of residence; and (3) you cannot truthfully use a CMRA address as a residence on a federal background check, security clearance, or immigration form. Some banks will also flag a CMRA address if you list it as your personal residence (rather than your business address). The rule of thumb is straightforward: CMRA addresses are for businesses and for receiving mail; they are not where you live. - Allowed — LLC and corporation registered office, IRS Form SS-4 mailing address, business bank account address, vendor invoicing address, Stripe and merchant-account business address, USPS package delivery, UPS/FedEx/DHL package delivery, business website and footer. - Not allowed — voter registration, driver's license, residential lease, residence-of-record on federal forms, addresses where state law specifically requires a physical residential address. - Mixed — some Secretaries of State accept a CMRA address as the registered agent address; others require a physical address with a real human present during business hours. Check the specific state, or use a registered-agent service for that line. ## State-specific quirks worth knowing USPS regulates CMRAs federally, but a handful of states layer on extra rules — usually around business formation, registered-agent service, or licensing of the CMRA itself. None of these change the underlying USPS requirements; they just add additional state-level requirements on top. - California — requires CMRAs to obtain a Private Postal Mailbox license under Business & Professions Code §17538.5, including a separate identity-verification step on top of Form 1583. The state also forbids using a CMRA address as the address of record for a registered agent for service of process. - Florida — requires registered agents to maintain a physical street address with a person present during business hours, which a typical CMRA address does not satisfy on its own. Use a separate registered-agent service for the formation; you can still use the CMRA address as the principal place of business. - New York — Department of State accepts a CMRA address as the address for forwarding service of process, but requires the LLC's publication-requirement notices to be served on a real address. - Texas — state filings explicitly accept CMRA addresses; no extra registration burden. - Washington and Oregon — accept CMRA addresses for business formation, but require the registered agent to have a physical address — generally a separate filing. ## How to recognize a properly licensed CMRA There is no public, federally maintained list of licensed CMRAs — registration is local, with the postmaster of the post office that delivers to the CMRA's facility. That makes it harder than it should be to verify a provider, but a small number of signals together give you a confident answer. If a provider hits all of the following, they are almost certainly compliant; if they fail any of them, dig deeper before you sign up. - They require Form 1583, notarized, with two IDs, before any mail is delivered to your assigned mailbox. No exceptions, no "you can sign this later" workarounds. - They print your address with PMB or # in front of the box number, never "Suite" — visible on their sample address page or in the welcome email. - They have a real physical building you could, in theory, walk into. A search on Google Street View should show signage or a commercial space, not a residential street. - The street address resolves to a single, consistent suite or unit when you look it up in the USPS Address Lookup tool. Multiple inconsistent unit numbers for the same street address is a warning sign. - They list a published privacy and law-enforcement-disclosure policy explaining when they hand over Form 1583 information. - If you ask, they can tell you the post office that handles their delivery and, in California specifically, they list their Private Postal Mailbox license number. A handful of providers — usually the cheapest ones — skip the Form 1583 step or backdate it after a customer signs up. From the customer's perspective everything looks fine for a few months, until the provider gets audited and either has to stop delivering mail to non-1583 customers or loses their CMRA registration entirely. Either way, your mail stops moving. The $5/month savings are not worth the risk. ## Consequences of non-compliance If a CMRA falls out of compliance — usually for missing 1583s, refusing to use PMB/# formatting, or failing to cooperate with a postal-inspector request — USPS has graduated remedies. The first step is normally a notice and a chance to cure. The second is an order to stop accepting mail for any customer without a complete 1583, which in practice means returning every piece to sender marked 'Refused, no authorization on file.' The most serious step is revoking the CMRA's authorization entirely, after which USPS will not deliver any third-party mail to the address. From the customer's side, the consequences depend on how you're using the address. If a non-compliant CMRA loses its authorization, your business mail simply stops arriving — invoices, checks, IRS notices, state correspondence, everything. Banks may pull statements and ask for proof of address. Your registered-agent filing may become invalid, leading to administrative dissolution of the LLC if you don't notice and refile in time. None of this happens overnight, but it cascades fast once it starts. There is also a personal-liability angle. If you knowingly give a false name on Form 1583, or use a CMRA address to commit mail fraud, the federal mail-fraud and false-statement statutes apply with full force. The form explicitly notes that 'false or fictitious information' on a 1583 is a federal crime under 18 U.S.C. §1001 — that's the same statute that catches lying to a federal officer. We mention this not to scare anyone, but because the threshold for triggering it is just 'knowingly false information on the form,' and people sometimes treat the form as a marketing checkbox rather than a sworn statement. It is the latter. ## How mailnow.ai handles all of this We're a fully registered CMRA at every facility we operate. Every customer signs Form 1583 — notarized, with two IDs, before any mail is accepted — and we keep the executed PDF on file for the full retention period USPS requires. Every address we issue uses the PMB format on the printed line, never 'Suite.' We support remote online notarization for the 1583 step so you don't have to leave your desk, and we're explicit upfront about what the address can and can't be used for, so you don't get a surprise from your bank six months in. When state-specific quirks apply (California PPM licensing, Florida registered agent requirements, etc.), we surface them during signup rather than assuming you'll discover them on your own. The whole point of the rule set is to make virtual mail a legitimate, durable, bank-acceptable address for your business — and the only way that works is by following every part of it. ## Short glossary - CMRA — Commercial Mail Receiving Agency. Any business that, for a fee, accepts mail from USPS on behalf of customers. - PMB — Private Mail Box. The letters required (or interchangeable with #) on the address line of a CMRA address. - Form 1583 — USPS Application for Delivery of Mail Through Agent. The notarized authorization that lets a CMRA receive mail addressed to you. - DMM 508.1.8 — Section of USPS Domestic Mail Manual that governs CMRAs. The source-of-truth document for all of these rules. - Postmaster — Local USPS official with authority over a post office. The person a CMRA registers with and who can suspend deliveries. - Registered agent — A person or business designated to receive legal service of process for an LLC or corporation. Often, but not always, the same as a CMRA address — depends on state. - Undeliverable as Addressed (UAA) — USPS classification for mail that can't be delivered, including mail to a CMRA address without proper PMB/# formatting. ## Get a compliant US business address you can trust If you've read this far, you now know more about CMRA compliance than the founders of most virtual-mailbox providers. The good news is that with a registered, properly run CMRA — and a complete Form 1583 — a virtual address is one of the safest, most flexible business addresses you can have. Sign up with mailnow.ai and we'll handle the 1583, the notarization, the PMB formatting, and the state-by-state quirks for you.