How to stop spam emails: 7 steps that cut junk for good

You mark a message as spam, block the sender, and three more arrive by lunch. Almost half of all email is junk: Kaspersky measured 44.99% of global email traffic as spam in 2025. Your mail provider catches most of it. This guide is about the part that gets through, and about why it keeps coming.

How do you stop spam emails?

To stop spam emails, report each one as spam instead of deleting it, unsubscribe from real companies with the button your mail app provides, and block repeat senders. Then cut it off at the source: give every website its own email alias, so an address that starts getting spam can be deleted without touching your real one.

The first three are cleanup. The alias is what keeps the inbox clean afterward. Here are all seven steps in order.

7 steps to stop spam emails

1. Report it as spam, don't just delete it

Deleting a message teaches your provider nothing. Reporting it trains the filter on your account and counts against the sender for everyone else. Gmail says that when you report spam, Google receives a copy of the message and may analyze it to protect other users. Yahoo says marking a message as spam also sends future mail from that sender to your spam folder.

The reports matter more than they used to. Since February 2024, Google's email sender guidelines require anyone sending around 5,000 or more messages a day to Gmail accounts to keep their reported spam rate under 0.3%, and since November 2025 Gmail has been ramping up rejections of mail that fails the rules. Yahoo sets the same 0.3% limit. Each report you file pushes a careless sender toward that line.

2. Unsubscribe with your mail app's button, not the link in the email

Every guide says to unsubscribe from real companies and never from spammers. Few tell you how to tell them apart. Here is a rule that works: use the unsubscribe control your mail app adds, and leave the link inside the message alone unless you know the sender.

The reason is technical. A sender that follows the rules puts a hidden unsubscribe header in each message. Gmail, Yahoo Mail and Outlook.com read that header and show their own Unsubscribe control, and Apple documents the same kind of unsubscribe banner in Mail on Mac. With the one-click standard (RFC 8058), your provider sends the request for you, so you never open a page the sender controls. Gmail requires this one-click method for marketing mail from bulk senders, and Yahoo tells senders to honor unsubscribes within 2 days.

A link in the body of a message can point anywhere. If the sender is a scammer, clicking it shows your address is read by a real person, or takes you to a phishing page. Yahoo's own help page puts it bluntly: never reply to subscription emails asking to be removed.

You can also unsubscribe in bulk now. In Gmail on a computer, click More in the left menu, then Manage subscriptions to see every mailing list with an Unsubscribe button next to each. Google says the feature is still rolling out and that a sender can take a few days to stop. Outlook.com has the same list under Settings, Mail, Subscriptions.

3. Know what the law gives you

In the United States, a company does not need your permission to email you. The CAN-SPAM Act works on opt-out, which is why unsubscribing is worth the effort. According to the FTC's compliance guide, a sender must:

• honor your opt-out within 10 business days
• keep the opt-out mechanism working for at least 30 days after sending
• not sell or transfer your address once you have opted out
• not charge a fee or ask for anything beyond your email address to process it

Each email that breaks the law can cost the sender up to $53,088. If a real company keeps mailing you after 10 business days, report it at ReportFraud.ftc.gov. None of this stops criminals, who ignore the law anyway. That is what the remaining steps are for.

4. Block senders and domains that keep coming back

Blocking works on a legitimate sender that ignores your opt-out. It is weak against spammers, who change addresses constantly. Where your provider allows it, block the whole domain. Outlook.com lets you block domains and holds up to 10,000 entries. Yahoo Mail holds 1,000 addresses. In Gmail, mail from a blocked sender goes to Spam.

5. Don't open it, and don't let images load

Apple's guidance on reducing spam in iCloud Mail warns that opening junk mail can alert spammers that an active account opened their message, because of the images inside it. An address that is known to be read gets sold on to other lists. So delete obvious junk unopened, never reply, and stop images from loading by default. Our guide on how to stop email tracking has the exact setting for each mail app.

6. Check where your address leaked

Spam needs your address, and breaches are the usual source. Stolen address lists are sold in bulk, and one leak can turn a quiet inbox loud overnight. Enter your address at Have I Been Pwned, which as of October 2026 covers more than 1,000 breaches and over 17 billion exposed accounts. You cannot pull an address back out of a breach. You can change the password on every breached account, and you will learn which companies to stop trusting with your real address.

7. Give every service its own alias

This is the step that makes the others unnecessary over time. An email alias is an extra address that delivers to your normal inbox. Give each shop, app and newsletter a different one.

The day an alias starts getting spam, you know which company leaked or sold it, because only that company ever had it. Delete that alias and the spam sent to it has nowhere to go. Every other address keeps working, and your real one was never on the list.

A plus address such as you+shop@example.com does not do this job. It still contains your real address, and anyone can remove the tag. Forwarding services such as Apple's Hide My Email (which needs iCloud+) or Firefox Relay create random addresses that pass mail along to the inbox you already have.

In Secria Mail, aliases are part of the mailbox, so nothing is forwarded through another company. You can reply from an alias, and delete it when spam shows up. The free plan includes 2 email aliases, Mail Plus has 15 and Pro is unlimited. Tracking pixels are removed automatically and senders never see your IP address, which also covers step 5.

Where the spam settings are in Gmail, Outlook, Yahoo and Apple Mail

These are the paths each provider documents as of October 2026.

Junk does not sit there forever. Outlook.com deletes junk after 14 days and iCloud Mail after 30, so check the folder now and then for real mail that was caught by mistake.

Test who is leaking your address

You can find out which company is the source instead of guessing. It takes two minutes to set up.

1. Create a new alias for the next account you open, or change the email on an account you already suspect.
2. Use that alias for that one company and nowhere else. Name it so you remember which one it is.
3. Wait. If mail from anyone else ever arrives at that alias, the company leaked it, sold it or was breached.
4. Delete the alias and give the company a new one, or close the account.

To check a single message right now, open the full headers. In Gmail, open the message, click More next to Reply, then Show original. Look at the To line to see which of your addresses it was sent to. Then search for a line that starts with List-Unsubscribe. Mail from a legitimate bulk sender has one. If it is missing, don't click anything in the message. Report it.

Why am I getting so many spam emails all of a sudden?

A slow rise usually means your address was added to marketing lists you forgot you joined. A sudden jump has a few likely causes:

• A breach. Your address was in a stolen database that has just been sold. Step 6 will tell you.
• You confirmed you exist. You replied to, clicked or opened a message, and the address became worth more.
• Your address is public. Bots collect addresses from websites, forums and social profiles.
• Someone is hiding something. This is the one to take seriously.

If hundreds of sign-up confirmations and newsletters you never asked for arrive within an hour, you may be the target of email bombing, also called subscription bombing. Security researchers at ESET describe scammers flooding an inbox to bury security alerts and transaction notices. The flood is cover for something else, such as a purchase or a password reset on one of your accounts.

If that happens, don't start unsubscribing. First search your inbox for "order", "payment", "password" and "security" from the last day. Then sign in directly to your bank, cards and main shopping accounts and look for activity you don't recognize. Change the password on anything that looks wrong. Deal with the flood afterward.

Frequently asked questions

Can you stop spam emails completely?

No. An address that is already in old breach data will keep getting mail, and no filter catches everything. What you can reach is an inbox where junk is rare and every new signup goes to an alias you can delete.

Is it safe to click unsubscribe in a spam email?

Use your mail app's own Unsubscribe button and it is safe, because the request goes through your provider. Clicking a link in the body of a message from a sender you don't recognize is not. It can confirm your address is active or lead to a phishing page. Report those as spam instead.

Why do I still get emails after unsubscribing?

US law gives senders 10 business days to process an opt-out, and Gmail notes that it can take a few days. Many companies also run several lists, so you may have left one of them. If mail continues after 10 business days, block the sender and report it to the FTC.

Does blocking a sender stop spam?

It stops that one address. Real companies use the same address every time, so blocking works on them. Spammers switch addresses and domains with every campaign, so reporting the message as spam does more than blocking it.

Should I get a new email address to escape spam?

Only as a last step. A new address starts leaking the first time you give it to a company that is breached or sells its list. Keep your current address for people, move your accounts to aliases one at a time, and the old spam fades as the lists age. Our email privacy checklist covers the rest of the cleanup.

Spam follows your address, so the lasting fix is to stop handing the real one out. A free Secria account comes with 2 aliases to start with.