How to Stop Getting Spam Emails on Your Mac in 2026

You can't stop spam emails completely, but you can keep most of it out of sight. On a Mac, mark each spam message as junk, turn on Apple Mail's junk filter, block repeat senders at your email provider, unsubscribe only from companies you recognize, and give websites an alias instead of your real address.

Spam stops being a nuisance the moment something dangerous hides in it. A fake invoice landed between two real ones in my Inbox one Monday, and I stopped deleting spam and started reporting it. This guide sorts unwanted email by type, because each type needs a different fix, then covers the Mac steps for Apple Mail, Gmail, Outlook and iCloud Mail, how to protect your address, and the next move if you already clicked something.

Which fix works for which kind of unwanted email

The right fix depends on who sent the email. Reporting works on bulk spam, unsubscribing works on real companies, and blocking works on one persistent sender. In my experience, using the wrong tool is why so many cleanups fade after a week, so find your situation here first.

Why you get spam emails in the first place

Spam reaches you because your email address got out, usually through a sign-up form, a data breach or a page where it was posted publicly. The Federal Trade Commission suggests reading a company's privacy policy to see whether it shares or sells your address before you hand it over, which almost nobody does at a checkout.

Breaches are the part you can actually check. Have I Been Pwned lets you search an address against known data breaches and offers an alert for new ones. When spam suddenly jumps on an old address of mine, that's the first place I look. A result can't pull the address back, but it shows where the data was exposed, so you know which passwords to change and likely why the junk started.

Step 1: Mark spam as junk, and stop just deleting it

Marking a message as junk is the single most useful habit, because it teaches the filter what to catch next. Apple says each time you confirm a message as junk or not junk, Mail's filter improves. On iCloud accounts, Apple adds that reporting also improves iCloud Mail's own filtering. Deleting a message teaches nothing, so the same pattern comes back tomorrow.

Apple Mail, Gmail and iCloud Mail each have their own button for this. Outlook's block and report options are in the sections further down.

• Apple Mail: with the message selected, click Junk in the toolbar or press **Shift-Command-J**, and it lands in the Junk mailbox.
• Gmail in your browser: tick one or more messages and click **Report spam** at the top.
• iCloud Mail on iCloud.com: select the message, click More, and choose **Move Message to Junk**.

If you read Gmail through Apple Mail, it's worth using Gmail's button in the browser for the worst offenders. Then the report goes straight to the provider, whatever your Mac's filter makes of the message: Google receives a copy when you move an email to Spam yourself. Google claims that Gmail stops more than 99.9% of spam, phishing and malware before it reaches an inbox. That's Google's own figure, and it also means whatever still reaches you is the part the filter hasn't learned yet.

Step 2: Turn on the junk filter in Apple Mail

Apple Mail's filter is a setting you can check in under a minute, at Mail > Settings > Junk Mail. Apple's guide to reducing junk mail gives these steps:

1. With Mail open, go to Mail > Settings in the menu bar.
2. Click Junk Mail.
3. Make sure Enable junk mail filtering is selected.
4. Choose Mark as junk mail, but leave it in my Inbox while you're still checking what the filter catches.
5. Switch to Move it to the Junk mailbox once you trust it.
6. Select Trust junk mail headers in messages so Mail can use spam checks built into the message.

That covers the switch itself. Our guide to Apple Mail's junk settings walks through the exemptions, custom actions and clearing the Junk mailbox.

Step 3: Block senders and whole domains

Blocking works when the address stays the same, and it fails against spammers who keep changing it. A University of Illinois help page puts it plainly: spammers change the address on their messages to get around block lists. So I keep blocks for persistent senders and domains, and don't try to block my way out of random spam.

A promoter once kept emailing me about a conference, from a slightly different address every few days, always on the same domain. Blocking each address got me nowhere, and adding the domain ended it. The FTC suggests the same thing: block by address or by domain, the part after the @. Check first that nobody you need writes from that domain, since a domain block catches everyone there.

Apple Mail's own block menu handles individual senders, and you can hold up to 3,000 of them. Apple's guide doesn't describe blocking a whole domain in Mail, so for that use your provider's settings, such as Outlook.com's Blocked domains. Gmail's menu also blocks one sender at a time, so our guide on blocking emails in Gmail covers doing it with a filter.

Step 4: Unsubscribe, but only from senders you recognize

Unsubscribing works on real companies and is risky on anonymous spam. Under the US CAN-SPAM Act, commercial email must include a way to opt out, and the sender has to honor it within 10 business days. Gmail goes further with senders of more than 5,000 messages a day: Google requires one-click unsubscribe, handled within two days. A scammer follows none of these rules, and the FTC warns that links in unexpected emails can install malware.

My test takes a second: could I name this company and remember doing business with it? If yes, I unsubscribe. If no, it goes to Junk. Where the app offers its own button, use that over a link inside the message:

• Apple Mail: click **Unsubscribe** in the banner below the message header, then click OK.
• Gmail: click More, then **Manage subscriptions**, then Unsubscribe next to the sender. Google is still rolling this out, so you may not have it yet, and a sender may keep mailing you for some days after you click.
• iCloud Mail: iCloud Mail Cleanup on iCloud.com can recommend senders to unsubscribe from in bulk and clear out old promotions. Nothing changes until you turn a recommendation on.

Our guide to unsubscribing in Apple Mail covers the missing button and senders who ignore you.

Step 5: Keep your real address off the next form

An alias is my favorite defense against future spam, because a leaked alias can simply be turned off. On a Mac, the built-in option is Apple's Hide My Email, which requires an iCloud+ subscription, yours or one in your Family Sharing group. To find it:

1. Choose Apple menu > System Settings.
2. Click your name at the top of the sidebar.
3. Click iCloud, then Hide My Email.

You can also skip the settings: click an email field on a website in Safari and choose Hide My Email right there. If that address starts collecting junk, go to iCloud.com, open Hide My Email, select the address and choose **Deactivate email address**. Mail sent to it then bounces back to the sender. I use one whenever a free trial wants an address and I'm not sure I'll stay past the first week.

Gmail has a free, weaker version. Adding a plus sign and a word before the @, such as you+shop@gmail.com, still delivers to your inbox, and you can filter on that exact address. You can't switch it off the way you can with an alias, though, and your real address is visible inside it. It's better for sorting than for hiding. Temporary inboxes and other alias services get their own comparison in Throwaway Email Addresses.

Step 6: Turn on Protect Mail Activity

Protect Mail Activity makes it harder for spammers to learn that your address is active. Apple says opening a message can alert spammers that the account works, and that images in email are one way they check. With this setting on, senders can't see your IP address, and remote content downloads privately in the background when a message arrives, not when you open it.

1. Go to Mail > Settings in the menu bar.
2. Click Privacy.
3. Select Protect Mail Activity.

Even with this on, delete suspected junk from the list without opening it where you can, which is Apple's advice too.

Spam or phishing? What to do with the dangerous kind

Spam wants your attention, and phishing wants your password or your money, so phishing needs reporting and not just filing. The FTC's phishing guide lists the warning signs: an unexpected message about an account problem or an invoice you don't recognize, a request to confirm personal details, a link to make a payment, and a generic greeting. Apple adds a sender address that doesn't match the company, and Google suggests hovering over a link to compare where it really goes with what it says.

If you have an account with the company, ignore the message and go to the company's site or a phone number you already know. Then report it:

• Anything: forward it to reportphishing@apwg.org and report it at ReportFraud.ftc.gov.
• Pretending to be Apple: in Mail, select it and choose Message > Forward As Attachment, so the headers go along, and send it to reportphishing@apple.com.
• In Gmail: open the message, click More next to Reply, then **Report phishing**.
• In Outlook: select the message, then **Report > Report phishing**. Microsoft notes this doesn't block the sender, so add a block too.

When spam still gets through on your Mac

Spam that survives all of this usually comes down to one of a few causes, and each has a quick check.

• The filter never learned. Look at the Junk Mail settings again: if filtering is on but you've been deleting spam, start marking it for a couple of weeks before you judge the result.
• Blocked mail still shows in the Inbox. Under Mail > Settings > Junk Mail > Blocked, **Mark as blocked mail, but leave it in my Inbox** keeps it visible. Choose Move it to the Trash to get it out of sight.
• The spam all arrives at one account. That's the address that leaked. Report at that provider's website, and start moving sign-ups to an alias.
• The filter swings too far and real mail goes missing. Check Junk now and then. The FTC says real email can end up there. In iCloud Mail, junk is deleted after 30 days, and mail from your contacts and recent conversations stays out of it. I give my Junk mailbox a glance every Friday and move anything real back with Move to Inbox.

A new email address is the last resort. I'd only do it for a personal address that's truly overrun, because every account and every person who knows the old one has to move too. Try a few weeks of the steps above before you go there.