Spam is a supply problem before it is a filtering problem. Nearly half of all global email traffic in 2025 was spam, according to Kaspersky’s telemetry, which put the share at 44.99 percent. No filter catches all of that, and every address handed to a careless signup becomes a permanent spam source. The fix that lasts is prevention: stop giving the real address away, and the volume collapses at the source.
Rule One: Never Give the Real Address to a Signup
Most spam starts with a voluntary handoff. A discount form, a gated download, a contest entry, or a free trial takes the real address, and that address is then shared, sold, or breached. Once it circulates, no filter setting removes it from the lists it joined.
The replacement is simple and tiered by how much the signup matters:
- Throwaway signup — a temporary inbox, used once and abandoned
- Signup you may keep — an email alias that forwards to your real inbox and can be switched off per sender
- Real relationship — bank, employer, government, or close contacts get the real address, and nothing else does
This single habit does more than any filter. An address that was never handed out cannot be spammed, and an alias that starts attracting junk can be killed without touching the real inbox.
Filters Still Matter, Used Correctly
Prevention cuts the supply, but filters handle what already arrives. The useful ones are built into every major inbox:
- Block the sender — stops repeat mail from one address, though spammers rotate addresses freely
- Filter by pattern — rules that auto-delete or auto-archive mail matching a subject, domain, or keyword catch repeat campaigns
- Report spam, don’t just delete — the report button trains the provider’s filter for everyone, while plain deletion trains nothing
- Turn off auto-loading images — blocked images stop senders from confirming the address is active through tracking pixels
One habit to drop: replying to spam, even to complain. Any reply confirms the address is monitored, and confirmed addresses are worth more to spammers than unconfirmed ones.
Unsubscribe Links: Safe for Real Lists, Dangerous for Spam
A genuine company’s unsubscribe link is the fastest way off a real mailing list. Legitimate senders are required in many jurisdictions to honor it, and it works. The trap is using the same link on mail you never signed up for.
In outright spam, the unsubscribe link can be a confirmation device. Clicking it tells the sender the address is active, and the spam often increases afterward. The test is simple: if you recognize the company and remember signing up, unsubscribe. If the mail is unexpected, from an unknown sender, or looks like a lure, report it as spam and delete it without clicking anything inside.
For lists you did join and no longer want, bulk-unsubscribe tools in the inbox help. Gmail’s unsubscribe prompt next to the sender name, and similar controls elsewhere, handle the exit without a visit to a landing page.
The Weekly Routine That Keeps It Clean
- Audit new signups: every new account gets an alias or a temp address, never the real one
- Kill noisy aliases: an alias pulling daily junk gets switched off at the source, not filtered forever
- Check the spam folder briefly for false positives, then empty it
- Review which services hold the real address, and move any that don’t need it to an alias
- After a data breach notice, rotate the affected alias instead of changing the real address
The breach step is the one people skip. An alias rotation takes minutes and cuts off every list the breached address fed. Changing a real address means notifying every genuine contact and service — a job large enough that most people never do it, and the spam keeps flowing.
When Spam Is Actually Dangerous
Most spam is marketing noise, but a slice of it is phishing: messages built to steal passwords, payment details, or access to accounts. The two kinds need different responses, and mixing them up causes real harm. Marketing spam gets an unsubscribe or a filter rule. Phishing gets reported and deleted, never answered and never clicked.
Telling them apart comes down to the ask. A newsletter wants attention; a phishing message wants action — a password reset, a payment confirmation, an attachment opened urgently. Any unexpected message demanding credentials or money deserves the report button, not the unsubscribe link, because unsubscribing from a phish confirms the address to the attacker. When in doubt, treat it as phishing: reporting a marketing mail costs nothing, while unsubscribing from a phish hands the sender exactly what they wanted.
What Not to Do
- Do not post the real address publicly, on forums, or in social profiles, where scrapers harvest it
- Do not enter it to “check” whether an address is valid on a shady lookup site
- Do not forward spam to friends to warn them; forwarding spreads the sender’s links and sometimes its payloads
- Do not trust a spam filter’s promise of zero spam — filters reduce volume, and prevention removes the source
Final Verdict
Stop spam by starving it. Keep the real address for real relationships, route everything else through aliases and temporary inboxes, report what slips through, and unsubscribe only from lists you actually joined. Filters will keep improving, and spammers will keep adapting, but an address they never received is the one defense that does not depend on either side winning.
