The Rise of Email Spam: How to Fight Back
176 billion spam emails are sent every single day. That number isn't going down. But there are things you can do right now: preventative and reactive, that actually work. Here's the full picture.
Ahmed Abrar Ariyan
tap-mail.com
Let's open with a number that is genuinely difficult to comprehend: 176 billion spam emails are sent every day. Not per year. Per day. That's roughly 2 million spam emails every single second, around the clock, without interruption.
To put that in personal terms: the average person receives around 1,825 spam emails per year; about five landing in their inbox every single day. That's five interruptions, five things to scan and delete, five small drains on your time and attention, every day, forever, unless you do something about it.
The frustrating part is that spam is not a solved problem. It's not even a shrinking one. The percentage of total email traffic classified as spam has hovered between 45-47% for several years running. As email volume grows, and it's now at 376 billion messages per day globally, the absolute number of spam messages grows with it. Better filters help, but they're in an arms race with increasingly sophisticated spammers who now use AI to generate more convincing messages that slip past detection.
Understanding why spam is getting worse is the first step to doing something effective about it. Here's the full picture and the actual fixes that work.
Why Spam Keeps Getting Worse
Spam persists for one fundamental reason: it works. The economics are so favourable for senders that even a tiny response rate makes a campaign profitable. Sending a billion emails costs almost nothing. If even 0.01% of recipients click, buy, or fall for a scam, the sender profits. There's no downside for them, only upside.
Several trends are making this worse right now:
Phishing campaigns using AI-generated content grew by 1,265% between 2022 and 2025. AI writes more convincing copy, personalises messages at scale, and adapts to avoid spam filter patterns. All automatically. One study found that AI-generated emails reached primary inboxes with a 0% spam flag rate across major providers.
Over 1.7 billion stolen credentials now circulate on the dark web. Every major breach adds millions of verified, active email addresses to lists that spammers and scammers buy and sell. Once your address is in one breach, it spreads to dozens of others within months.
Every website you've ever signed up for is a potential source. Companies sell email lists to data brokers, brokers resell to other brokers, and the result is that your address appears in hundreds of marketing databases you've never heard of - all of which can be purchased by anyone willing to pay!
GDPR, CAN-SPAM, and similar laws exist, but enforcement is difficult across borders and the penalties for smaller operations are often lower than the profits from the spam itself. Spammers operating from jurisdictions with weak enforcement face almost no consequences.
Reactive Fixes: What to Do With Spam You're Already Getting
If your inbox is already overrun, these steps reduce the volume over time. But understand that reactive measures are always slower and less effective than preventative ones.
Report, don't just delete
When you delete spam without reporting it, you train nothing and stop nothing. When you report it as spam, your email provider's filters learn from it and that data is pooled across all users, making the filter better for everyone. In Gmail, clicking "Report spam" instead of delete takes the same amount of time and actually does something.
Unsubscribe, but only from senders you recognise
For legitimate companies you've actually dealt with, a retailer you shopped at, a newsletter you subscribed to, the unsubscribe link works and it's worth using. Give it a few days to take effect.
For unknown senders, do not click unsubscribe. Spam operations use unsubscribe clicks to confirm that your address is active and monitored. Clicking tells them they've reached a real person. At least 25% of people who responded to spam (including unsubscribing) reported receiving more spam afterward. Report these as spam instead.
Check if your address has been breached
Visit haveibeenpwned.com and enter your email address. It will tell you which known data breaches your address appeared in. If it's been in multiple breaches, that explains a significant portion of your spam. That address is on dozens of lists by now. For accounts where this is a concern, consider migrating to a new primary address.
Use filters aggressively
Set up keyword-based filters in your email client that automatically move anything containing "unsubscribe," "promotional," "limited time offer," or similar phrases into a folder you check occasionally rather than your primary inbox. Most email clients support this. It takes about 10 minutes to set up and makes an immediate visible difference.
Preventative Fixes: What Actually Stops Spam Before It Starts
Reactive measures treat the symptom. Preventative measures address the cause - your email address being on lists it shouldn't be on.
Never give your real address to sites you don't trust
This is the single most effective thing you can do. Every unnecessary signup is a potential spam source and a potential breach point. For websites where you're not sure you'll stay long-term, where you're downloading something once, or where you don't recognise the company well enough to trust them: use a temporary address instead of your real one.
A service like TapMail generates a working email address in seconds. The website gets a real address that can receive their confirmation email. You get what you came for. And when the address expires, the entire follow-up pipeline; the welcome series, the newsletters, the partner emails; goes nowhere. Your real address was never involved.
Segment your real address usage
Even for sites where you use your real email, segmentation helps. Use one address for financial and important accounts, a separate one for shopping and subscriptions, and a temporary address for everything else. If your shopping address starts getting spam, you can deal with it without it affecting your important accounts.
Be careful about where your address appears publicly
Spambots crawl the internet harvesting email addresses from public sources. Websites, forums, social media profiles, comment sections. If your email address is publicly visible anywhere online, it will eventually find its way onto spam lists. Use contact forms instead of posting addresses directly, and consider obfuscating addresses on public pages.
The Numbers Behind What Actually Works
| Action | Type | Effectiveness |
|---|---|---|
| Use temp email for signups | Preventative | Eliminates the source entirely |
| Report spam (not just delete) | Reactive | Trains filters; helps everyone |
| Unsubscribe from known senders | Reactive | Works for legitimate companies only |
| Clicking unsubscribe on unknown senders | Counterproductive | Confirms active address; more spam follows |
| Inbox filters and keyword rules | Reactive | Manages existing spam; doesn't reduce it |
| Keeping real address off public pages | Preventative | Stops harvesting bots from finding it |
The Honest Truth About Fighting Spam
No single solution eliminates spam completely. Gmail's filters block over 99.9% of spam and malware before it reaches your inbox and spam is still the number one problem email users complain about, that's how much of it there is!
The most effective approach is combining preventative and reactive measures: stop the pipeline from growing by protecting your address going forward, while gradually reducing the existing spam load through reporting and smart unsubscribing.
The single highest-leverage action is the preventative one. Using a temporary address instead of your real one for any signup where you don't need a long-term relationship with the sender. That one habit, applied consistently, stops dozens of new spam sources from forming every month.
Spam has been growing for 30 years and it's not going away. But your personal inbox doesn't have to reflect the global average. The people who keep their inboxes clean don't do sorcery, they're just deliberate about what gets their real address and what doesn't.