Practical guide

How to Stop Spam for Good

Most advice about spam is a single tip repeated: unsubscribe. That is useful for one category of unwanted mail and actively counterproductive for another, and on its own it will never get you to a quiet inbox.

Spam is better treated as a problem of address hygiene than a problem of filtering. Once an address is widely circulated, no amount of unsubscribing pulls it back. The durable fix is to control which addresses exist and who has them. This guide covers both: how to stop the inflow at the source, and what to do about the mail already arriving.

๐Ÿ” First, know what you are dealing with

The right response depends entirely on which of three kinds of mail you have received, and they are easy to tell apart once you know what to look for.

1. Legitimate marketing you opted into

A shop you bought from, a newsletter you signed up for, a service you use. It comes from a real company, it has a working unsubscribe link, and unsubscribing works. This is the only category where unsubscribing is the correct first move.

2. Legitimate marketing from someone you have never heard of

A real company, but one that bought or rented your address from someone else. Unsubscribing usually works here too, because reputable senders honour it โ€” but you are playing whack-a-mole, since the list you are on has been sold to many buyers.

3. Actual spam

Phishing, scams, malware, or bulk mail from an operation with no interest in your preferences. The "unsubscribe" link here is not an unsubscribe link. It is a delivery confirmation, and clicking it tells the sender the address is live and monitored, which makes it more valuable. Never click it. Mark as spam and delete.

โš ๏ธ

The single most common mistake is treating category 3 like category 1. If you do not recognise the sender at all and the mail looks automated or scammy, do not interact with it in any way โ€” no unsubscribe, no reply, no loading remote images. Just report it as spam.

๐Ÿงฑ The structural fix: stop using one address everywhere

Every service you hand your address to is a potential leak โ€” through a deliberate list sale, a partnership, or a breach. If you use the same address for all of them, one leak contaminates everything, permanently, and you have no way of knowing which service was responsible.

The fix is compartmentalisation. Three tiers cover almost every situation:

If you adopt only one of these, make it the middle tier. Aliases handle the largest category of mail and give you diagnostic information you cannot get any other way.

๐Ÿงน Cleaning up an address that is already flooded

If your main address is already on many lists, there is no way to un-circulate it โ€” but you can reduce the volume substantially over a few months.

Work through the legitimate senders

Search your inbox for "unsubscribe" and work through the results in batches. For senders you recognise, unsubscribe properly. Most jurisdictions require this to be honoured within a few days, and reputable companies do. Expect to spend an hour on this once; it removes a surprising share of the volume.

Report the rest rather than deleting it

Marking mail as spam does more than move it out of sight โ€” it trains your provider's filter on your specific mail, and it contributes to reputation signals that affect that sender for everyone. Deleting teaches your filter nothing. Reporting is a small action with compounding returns.

Turn off remote image loading

Marketing emails embed invisible tracking pixels that report back when the message is opened. Blocking remote images by default โ€” an option in essentially every mail client โ€” stops that confirmation and denies senders the signal that your address is actively read. Gmail, Outlook, and Apple Mail each have this in settings, and Apple Mail's Mail Privacy Protection does something similar automatically.

Check your breach exposure

Look your address up on Have I Been Pwned. If it appears in breaches, that explains a good deal of the spam and tells you which old accounts are worth closing. Any password reused on a breached site should be changed immediately, and this is the moment to move to a password manager if you have not.

Consider a clean start for the primary tier

If an address is thoroughly saturated, the most effective move is to create a new private address, migrate the accounts that genuinely matter to it, and let the old one become a low-priority inbox you check occasionally. It is a few hours of work and it resets the problem completely.

๐Ÿšซ Tactics that do not work

Several widely repeated ideas are ineffective or harmful:

๐Ÿ“‹ A realistic plan

If you want a concrete sequence, this is the order that gives the most benefit per hour spent:

Volume drops noticeably within a couple of weeks and keeps falling. The habit change is the part that lasts โ€” after a few months of never handing out your real address, the inflow of new spam essentially stops, because nothing new is being added to the lists.

๐Ÿ”— Related guides

โ† Get a temporary address All guides