Why do you receive so much spam?
Every time you hand over your real email address — to sign up for a service, download a file, enter a competition, or access gated content — it enters a company's database. From that moment, it has a life of its own that you cannot control.
Some companies sell those databases to third-party advertisers as a revenue stream. Some get breached and the records end up on dark web marketplaces. Some are simply over-zealous with their own newsletters and re-engagement campaigns. And once your address appears on one list, it tends to proliferate — bought and resold across the spam ecosystem until you are receiving emails from companies you have never heard of and never interacted with.
The scale of the problem is significant. The majority of all email traffic globally is spam. Most of it is filtered before it reaches your inbox, but even a fraction getting through — promotions, phishing attempts, fake invoices, lottery notifications — is enough to make your inbox feel unmanageable. The good news is that with the right combination of methods, you can reduce spam to almost zero and keep it there.
Method 1: Use a disposable email for sign-ups
This is the single most effective method for preventing spam before it starts. The underlying logic is simple: if a company never has your real email address, it can never spam it — and neither can anyone they sell it to or anyone who breaches their database.
Before signing up for any service you are not 100% certain you will use long-term, generate a temporary email address and use that instead. The service receives the address, sends the verification email, you confirm, and then the temporary address expires. Any follow-up marketing, re-engagement campaign, or spam that would have arrived goes nowhere — the address no longer exists.
This method works best when adopted as a default habit rather than an occasional tactic. If you use a temporary address every time you are not sure about a website, your real inbox only receives emails from services you deliberately chose to maintain a relationship with.
Method 2: Unsubscribe aggressively from existing spam
Every legitimate marketing email sent to recipients in the EU, UK, US, Canada, and Australia must contain an unsubscribe link, by law. Under GDPR, CAN-SPAM, CASL, and similar regulations, senders must honour unsubscribe requests within a specified window — typically 10 business days in the US, and immediately in the EU.
The practical advice: unsubscribe from everything you do not actively want to receive. Do not just delete it. Use the unsubscribe link at the bottom of the email. This removes you from the list rather than training your spam filter to suppress it — which may eventually fail as the sender changes its sending domain or header patterns.
For high volumes of existing subscriptions, services like Unroll.me (US) or Leave Me Alone can scan your inbox and present all subscription emails together, letting you unsubscribe in bulk. Be aware that these services themselves require access to your inbox, so read their privacy policies before connecting them.
Method 3: Use your email provider's spam filter properly
Gmail, Outlook, Apple Mail, and most other major providers maintain machine-learning spam filters that improve with feedback. The critical point most people miss: marking an email as spam is more effective than deleting it. When you mark as spam, you contribute signal to the model — the provider learns that this type of email, from this sender, with these characteristics, is unwanted. Delete silently and the model learns nothing.
Most providers also allow you to block specific senders entirely (so their mail goes straight to spam without landing in your inbox) or to create custom filters that automatically archive or delete emails matching certain criteria. Taking 20 minutes to set up filters for the most persistent offenders can dramatically clean up your inbox.
If you are on Gmail, the "Block [sender]" option is in the three-dot menu on any email. Blocked senders go directly to spam. On Outlook, "Block sender" works similarly, with the additional option to block entire domains.
Method 4: Create a dedicated secondary email account
Maintain a secondary Gmail or Outlook account used exclusively for commercial sign-ups, competitions, newsletters, and anything you are not sure about. Keep your primary address for personal contacts, work communication, and important services only.
The practical benefit: your primary inbox stays clean for what matters. Your secondary inbox can be checked occasionally when you are looking for something specific and otherwise ignored. If the secondary address becomes overwhelmed, you can abandon it entirely and create a new one — all the spam goes with it, and your primary inbox is never touched.
Label the accounts clearly in your password manager (e.g., "real inbox" and "junk inbox") so you automatically reach for the right one at the right time. Over time, reaching for the junk account for unfamiliar websites becomes automatic.
Method 5: Use email aliases for ongoing relationships
Email alias services — like SimpleLogin, addy.io (formerly AnonAddy), Apple's Hide My Email, and Firefox Relay — let you create unique forwarding addresses for each service you sign up with. The alias forwards email to your real inbox, but the sender never sees your real address.
The key advantage over a secondary account is control. If one alias starts receiving spam — because the service was breached or sold your data — you disable just that alias. The spam stops immediately, and your real address is never at risk. You can create hundreds of aliases and manage them from a single dashboard.
This method is particularly powerful combined with disposable email: use disposable addresses for one-time interactions and aliases for ongoing relationships you want to maintain but protect.
Method 6: Never post your email address publicly
Spammers use automated crawler tools — called email harvesters — to scan public web pages, forum posts, social media profiles, and comment sections for email addresses. These tools look for the standard email format (anything@anything.domain) and add found addresses to spam lists automatically, without any human involvement.
If you must post an email address publicly, obfuscate it. Write "name at domain dot com" in plain text rather than the actual address — harvesters look for the @ symbol and standard format, so text like this is invisible to them. Alternatively, use an image of your email address rather than text, or implement a contact form that submits to your inbox server-side without exposing the address in the page's HTML.
On professional networks like LinkedIn, avoid showing your email in the public profile section. Use LinkedIn's internal messaging system for initial contact, then share your real address only with people you have established are legitimate.
Method 7: Use Temp Mail as your default for unknown websites
The most effective long-term strategy is to adopt a simple personal policy: if a website is not one you have deliberately chosen to maintain a long-term relationship with, it does not get your real email address. Full stop.
In practice, this means opening Temp Mail whenever a website asks for an email and you are not certain you will be a regular user. The habit takes about two seconds longer than typing your real address, but the accumulated benefit over months and years is enormous — your real inbox stays reserved for emails you actually want, and the spam problem simply does not develop.
Over time, many people find they use temporary email for the vast majority of new sign-ups and reserve their real address for a shrinking list of trusted services. The result is an inbox that requires significantly less management, filtering, and cleaning — and a real email address that appears in far fewer databases, reducing phishing risk and breach exposure at the same time.