How to stop spam emails for good: a practical, step-by-step plan

No one can promise zero spam. Your address may already be on lists you’ll never see, and spammers don’t follow rules. What you can do is shrink the flow to a trickle and stop new spam at the source. This plan does both: first clean up what’s arriving now, then change how you hand out your address so it doesn’t come back.

Step 1: Understand what kind of “spam” you’re getting

Not every unwanted email is the same, and they need different treatment:

• Legitimate marketing you once signed up for. Newsletters, promotions, “we miss you” emails. Annoying, but these senders usually honour unsubscribe requests.
• Unsolicited bulk mail. Senders you never dealt with, who bought or scraped your address.
• Malicious mail. Phishing, fake invoices, scams and malware. These should never be “unsubscribed” from — just reported and deleted.

Sorting your unwanted mail into these buckets tells you which tool to use for each.

Step 2: Use the spam button properly

Your provider’s Report spam (or Junk) button is the most effective single tool you have. It does two things: moves that message out of your inbox, and trains filters — often for every user of that provider — to recognise similar mail.

A few rules:

• Report, don’t just delete, for genuinely unsolicited mail. Deleting teaches the filter nothing.
• Don’t mark legitimate mail you signed up for as spam if an unsubscribe link works. It hurts that sender’s deliverability for everyone, and it’s slower than unsubscribing for you.
• Check your spam folder once a week at first and mark false positives as “Not spam”. This tunes the filter in both directions.

Step 3: Unsubscribe — safely

For senders you recognise, unsubscribing is faster and more permanent than filtering.

• Use your mail app’s built-in unsubscribe option when it appears near the sender’s name. Major providers show this for bulk senders that support the standard List-Unsubscribe header, and large senders to Gmail and Yahoo have been required since 2024 to support one-click unsubscribe.
• Otherwise use the link in the email footer, but only if you recognise the sender and actually signed up.
• Never unsubscribe from obvious scam or phishing mail. Clicking confirms your address is active and may lead to a malicious page. Report it instead.

In many countries, commercial senders are legally required to honour opt-outs — the US CAN-SPAM Act, for example, requires opt-out requests to be processed within 10 business days. It’s normal to see a few more messages before they stop.

For more on doing this without exposing yourself, see email privacy basics.

Step 4: Build filters for what’s left

Filters handle the grey area: mail that isn’t spam but doesn’t need your attention right now.

• Route newsletters into a folder or label so they don’t interrupt you.
• Filter on the sender’s domain, not just the exact address, since bulk senders rotate addresses.
• Use your provider’s “Block sender” for persistent senders who ignore unsubscribes.

If you use plus addressing (you+shop@), filters become trivial: everything addressed to a given tag can go straight to a folder or the bin. Our comparison of temp mail, aliases and plus addressing explains the trade-offs.

Step 5: Check whether your address has leaked

A sudden spike in spam often follows a data breach. Services like Have I Been Pwned (haveibeenpwned.com) let you check whether your address appears in known breaches.

If it does:

• Change the password on the affected service, and anywhere else you reused it.
• Turn on two-factor authentication on important accounts.
• Expect more phishing for a while, often referencing the breached service. Our phishing checklist helps.

You can’t remove your address from a leaked list, which is why the next steps matter most.

Step 6: Stop giving out your real address

This is the step that actually makes spam reduction last. Every site that has your main address is a potential leak. Change your default:

Kind of sign-up	What to give
One-time download, Wi-Fi portal, trial you’ll abandon	A temporary email
Shop, app or newsletter you’ll keep	A forwarding alias (one per site)
Senders you trust but want sorted	A plus address
Bank, government, primary accounts	Your real address

Once your main address is reserved for a small set of important senders, new spam has very few ways in. And when an alias starts getting spam, you simply turn it off.

That’s the idea behind AloMail: an instant disposable inbox for throwaway sign-ups, with forwarding aliases planned for the accounts you keep.

Step 7: Reduce where your address is visible

Spammers also harvest addresses from the open web.

• Don’t publish your main address on websites, forums or social profiles. If you need a public contact, use a dedicated alias or a contact form.
• Check old accounts — forum profiles, old personal sites, public CVs — and remove or replace visible addresses.
• Be careful with “reply-all” on large mailing lists, which exposes everyone’s address.

Step 8: Consider a fresh start (only if it’s really bad)

If your main address is hopelessly overrun, creating a new one can be the cleanest fix. If you do:

1. Create the new address and protect it with a strong password and two-factor authentication.
2. Move your important accounts first: bank, government, utilities, password manager.
3. Use aliases or temporary addresses for everything else from day one.
4. Keep the old address for a few months with auto-forwarding or occasional checks, so you don’t miss anything important.

This is a lot of work, so treat it as a last resort.

What doesn’t work

• Replying to spammers asking them to stop. It confirms your address is live.
• “Anti-spam” apps that need full access to your mailbox from unknown developers. You’re trading spam for a privacy risk.
• Blocking individual spam addresses. Spammers rotate addresses constantly; report instead.

A realistic checklist

• Report unsolicited mail as spam instead of deleting it
• Unsubscribe from legitimate senders you no longer want
• Never unsubscribe from obvious scams
• Set up a newsletter folder and a few domain filters
• Check your address on Have I Been Pwned
• Use temporary emails and aliases for new sign-ups
• Remove your address from public pages

Do the first four once, make the last three habits, and your inbox will be noticeably quieter within weeks.