Why Your Inbox Got This Bad
Nobody wakes up one day and decides to receive 40 promotional emails before breakfast. It creeps up on you over years, one checkbox at a time.
Before you can fix it, it helps to know how your address actually escaped. In my experience there are five routes, and most people have been through all of them:
- You gave it away voluntarily. Every store that emailed a receipt, every PDF you downloaded, every "10% off your first order" popup. Individually harmless. Collectively, that is a few hundred companies with your address.
- A company you trusted sold it. This is legal in a lot of places if their privacy policy mentions "trusted partners" — a phrase doing an enormous amount of work.
- A company you trusted got breached. Their database ends up traded in bulk. You did nothing wrong and there was nothing you could have done.
- Somebody guessed it. If your address is firstname.lastname@gmail.com, it is guessable. Spammers generate combinations against common domains and see what does not bounce.
- A friend's contact list leaked. Your address sits in hundreds of other people's address books, and their security is not your security.
Notice that only the first one is under your control. That matters, because it tells you where the fixable part of the problem is.
The Unsubscribe Question
Everyone has heard "never click unsubscribe, it tells them you're real." Like most email folklore, it was true once and is now mostly wrong.
Here is the actual distinction, and it is worth learning because it changes what you should do with roughly half your inbox.
When unsubscribing works
If the email comes from a real company you actually dealt with — a shop, a service, a newsletter you signed up for — unsubscribe. Legitimate senders are legally required to honour it in most countries, and they do, because the fines are real and their email provider will drop them if enough people mark them as spam instead.
These senders do not want unengaged subscribers. You cost them money and hurt their deliverability. Unsubscribing is doing them a favour.
When unsubscribing backfires
If the email is from a company you have never heard of, about something you never signed up for, in slightly broken English, from a domain that looks like a keyboard fell down the stairs — do not click anything. Not the unsubscribe link, not the images, not the "manage preferences" link.
For that category, the unsubscribe link is not an unsubscribe link. It is a confirmation that a human read the message. Mark it as spam and move on.
The test I use
Ask yourself one question: could I plausibly have given this company my address?
If yes, unsubscribe. If no, report as spam. You will get it wrong occasionally and it will not matter.
What Actually Works: Four Layers
There is no single fix. Anyone selling you one is selling you something. What works is layering a few cheap habits so that each one catches what the last one missed.
Layer 1: Train your spam filter properly
Modern spam filters are genuinely good, and most people actively undermine them by deleting spam instead of reporting it.
Deleting teaches your provider nothing. Marking as spam teaches it something about that sender, and — because these systems are shared — about that sender's behaviour across millions of other inboxes. It is the single highest-value thirty seconds you can spend on this problem.
The flip side matters too. If something legitimate lands in spam, mark it as not spam rather than dragging it out. Same reason.
Layer 2: Stop the bleeding at signup
Every new signup is a decision about your future inbox. Sort them into three buckets before you type anything:
- I need this account long-term — banking, work, government, subscriptions you pay for, anything with a password you might need to reset. Real address, always. No exceptions, and I mean none.
- I want the emails but not forever — a newsletter, a shop you might buy from again. An alias is the right tool here, and I will come back to those.
- I just need to get past this form — a one-off download, a forum post, a coupon, a wifi portal, a site that will not show you an article without an address. This is what a temporary email address exists for.
That third bucket is bigger than most people realise, and it is where the majority of long-term spam originates. The address expires, and so does any list it ended up on.
Layer 3: Use aliases for the middle bucket
An alias is an address that forwards to your real inbox and can be switched off individually. It is the best tool for anything you want to receive now but might not want in a year.
If you use Gmail, you already have a crude version: yourname+shop@gmail.com delivers to yourname@gmail.com. Filter on it, and turn it off when you are done. The weakness is that stripping +shop is trivial, so determined spammers do.
Proper alias services generate a genuinely different address each time. Apple's Hide My Email is built into iCloud+, and there are independent services that do the same thing. If a single one of those addresses starts receiving junk, you delete it and everything sent to it stops — and you know exactly which company leaked it.
That last part is quietly the best feature. An alias per company turns "someone sold my address" from an unanswerable mystery into a name.
Layer 4: Find out what has already leaked
Check your address against known breaches at Have I Been Pwned. It is free, it is run by a well-regarded security researcher, and it does not ask for anything but the address.
If you find your address in breaches, the spam is explained and it is not going to stop on its own — that data is permanently in circulation. What you can do is change any password you reused, turn on two-factor authentication where it is offered, and start using aliases so that the next breach only exposes one address instead of the one you use everywhere.
Things That Do Not Work
A short list, because avoiding these saves real time:
- Replying "please remove me". Nobody reads that mailbox. On a genuine spam run you have just confirmed you are a person.
- Paid "remove your data" services. Some do legitimate work with data brokers. None of them can remove your address from a database that has already been copied a thousand times. Read carefully before paying.
- Abandoning the address entirely. Sometimes the right call, usually not. You will spend six months discovering which important accounts you forgot to migrate, and the new address starts collecting spam the moment you use it the same way.
- Blocking senders one at a time. Spam operations rotate domains constantly. You will block for the rest of your life and never catch up. Filters that match on behaviour work; blocklists that match on address do not.
If You Are Already Drowning
For an inbox that is already unmanageable, the order matters. Do it in one sitting:
- Sort by sender, not by date. Most providers let you group by sender. You will find a handful of companies responsible for a startling share of the volume.
- Work through the top twenty. Unsubscribe from the legitimate ones, spam-report the rest. Twenty senders is often half the problem.
- Bulk delete by search, not by scrolling. Search for "unsubscribe" and delete everything older than a year in one go. You will not miss any of it.
- Set up two filters. One that files anything containing "unsubscribe" into a Promotions-style folder, one that keeps mail from your actual contacts out of it. Now the noise has somewhere to go that is not your main view.
- Change how you sign up from today. Everything above is cleanup. This is the part that stops it recurring.
Set aside an hour. It is genuinely a one-hour job for most inboxes, and the difference a week later is dramatic.
What Success Actually Looks Like
Zero spam is not the goal, because it is not achievable. Your address is in circulation and will stay there. Anyone promising otherwise is wrong.
What is achievable is that spam stops reaching you. A well-trained filter plus disciplined signups gets most people to a handful of items a week in a folder they never open, and an inbox that only contains things a person actually sent.
That is the realistic target, and it is a much better place to be than where most inboxes are now.
Common Questions
Does marking something as spam actually do anything?
Yes, more than people expect. Providers aggregate these reports across every user. Enough reports and that sender's mail starts landing in spam folders globally, not just yours. It is one of the few actions here with leverage beyond your own inbox.
Should I use a temporary address for everything?
No, and this is where people get themselves into trouble. A disposable inbox deletes itself, which means the password reset link for anything you registered with it goes nowhere. Use it for things you will never need to log back into. For anything else, use a real address or an alias.
Is it worth paying for an email service?
Sometimes. Paid providers generally have better filtering and give you alias tools that free tiers do not. But a free account with a well-trained filter and sensible signup habits beats a paid account used carelessly. Fix the habits first, then decide whether you still need to pay.
My address is in a breach. Do I need a new one?
Usually not. Change any password you reused elsewhere, enable two-factor authentication, and tighten how you hand the address out going forward. Migrating everything to a new address is a large amount of work that fixes the symptom rather than the cause. Consider it only if the volume is genuinely unusable.
Why do I get spam at an address I have never used anywhere?
Two likely reasons. Either it is guessable and was generated rather than leaked, or it appears in someone else's contact list that was compromised. Neither is your fault and neither is fixable — but a filter handles it fine.
The Short Version
Report spam rather than deleting it, so your filter learns. Unsubscribe from real companies and never click anything in obvious junk. Decide before every signup whether you want that mail long-term, sometimes, or never — and use a real address, an alias, or a disposable inbox accordingly. Check what has already leaked so you know what you are dealing with.
None of it is complicated. It is just four habits, and the inbox you have in six months is decided almost entirely by whether you adopt them.