Spam is not random bad luck. Nearly every unwanted message in your inbox traces back to a moment when your address entered a database: a sign-up form, a purchase, a contest entry, a leaked customer list. That means spam has causes you can attack — not just symptoms you can filter. This guide works through both, in order of impact.
Step 1: Triage what you already have
Before changing habits, get your current inbox under control.
- Sort by sender. Most mail apps let you group messages by sender or search a sender's entire history. You will usually find that a handful of senders account for the bulk of the noise.
- Unsubscribe from legitimate senders only. If the sender is a real company you actually dealt with — a shop you bought from, a newsletter you once wanted — the unsubscribe link is safe and legally required to work in most jurisdictions.
- Never unsubscribe from true spam. For messages from senders you never interacted with, the unsubscribe link does something worse than nothing: it confirms your address is active and read by a human, which raises its resale value. Mark these as spam instead.
- Use "Report spam," not "Delete." Reporting trains your provider's filter; deleting teaches it nothing.
Step 2: Find out why you get spam
Two common sources are worth checking explicitly:
- Data breaches. If a company holding your address was breached, your address is now circulating in spam and phishing lists regardless of how careful you are. Run your address through a breach check to see known exposures. If you appear in breaches, our guide on what to do after a data breach covers the full response.
- List sharing and sale. Many sites share addresses with "marketing partners" — legally, because you agreed to a privacy policy you never read. We break down that economy in why websites sell your email.
Understanding the source matters because it tells you whether filtering is enough or whether the address itself is compromised beyond repair.
Step 3: Stop feeding new databases
This is the step most guides skip, and it is the one with the biggest long-term effect. Every form you fill with your real address is a future spam source. Cut off the supply:
- Use a temporary address for one-time interactions. Downloads, coupons, Wi-Fi portals, free trials, gated articles — anything where you need the confirmation email once and never again. A disposable inbox from MailDrop receives the message, and then the whole inbox expires along with any future spam sent to it. If the concept is new to you, start with what is temporary email.
- Use aliases for accounts you keep. For real accounts, a forwarding alias (a distinct address that delivers to your main inbox) lets you identify and cut off any sender that starts spamming. See email aliases vs temp mail for how to choose.
- Keep one clean address for people and critical services. Banks, government, employer, family. If that address never touches a marketing form, it rarely attracts spam.
Step 4: Harden your mail settings
- Turn off remote image loading. Tracking pixels tell spammers you opened the message; blocking images by default removes that signal.
- Create filters for repeat offenders. A rule that deletes anything from a persistent domain is cruder than reporting, but effective.
- Check your forwarding and filter rules. If your account was ever compromised, attackers sometimes add hidden rules. While you are there, make sure the account itself is protected by a strong unique password — generate one with a password generator — and two-factor authentication.
Step 5: Handle the dangerous subset
Some "spam" is really phishing, and it deserves more caution than annoyance:
- Be suspicious of urgency ("your account will be closed in 24 hours") and of any message asking you to log in via a provided link.
- Never enter credentials on a page you reached from an email. Type the site's address yourself.
- If a message claims one of your passwords was exposed, verify independently with a password leak check rather than clicking anything in the message.
What realistically to expect
A truthful summary, because spam guides tend to overpromise:
- You can cut spam dramatically, not to zero. An address that has circulated for years in leaked lists will keep receiving some spam forever. Filters plus reporting keeps it manageable.
- New addresses stay clean only if you keep them clean. The habits in Step 3 are what prevent the slow slide back to a noisy inbox.
- The nuclear option works. If an old address is hopeless, migrating to a fresh one — with disposable addresses absorbing all the low-stakes sign-ups from day one — resets the clock. It is tedious once and quiet for years.
Spam is the visible symptom of an invisible market for your address. Filter what you have, report what gets through, and above all, stop handing your real address to every form that asks. The next time a site demands an email you know it does not deserve, open the MailDrop inbox instead — that is one more database that will never be able to spam you.