Why Am I Suddenly Getting So Much Spam?
If your inbox suddenly feels broken, you are not alone. Here is what changed in the last two years and what actually reduces the volume.
If your inbox feels noticeably worse in the last year or two, you are not imagining it. The volume of unsolicited email has grown sharply, the quality of the senders has changed, and the traditional filters have not kept up with the new patterns. This post is about why, and what actually works to reduce the noise.
What Actually Got Worse
The complaint takes a few forms. “I never used to get this much cold outreach.” “My spam folder is fine, but my inbox is full of marketing emails I do not remember signing up for.” “I get five recruiter pitches a day and I am not even looking for a job.” All of these are real, and they share a common cause.
Three things changed in the last two years and the combination is what made the inbox feel broken.
Cause one: AI made cold outreach industrially cheap. A salesperson who could send 200 personalized emails a day in 2020 can send 10,000 in 2026, and the personalization is better. AI tools generate context-aware pitches, customize them to LinkedIn profiles, and rotate templates so the same message does not repeat in the same campaign. As reported by Bright Defense, roughly 82.6% of phishing emails now use AI assistance, and the same tooling is used for legitimate outreach. The volume of solicitation per inbox has gone up by an order of magnitude.
Cause two: data breaches accumulated. Your email address has been leaked, almost certainly multiple times. Have I Been Pwned tracks public breaches and the typical adult inbox shows up in five to fifteen of them. Each breach exposes your address to a new wave of list buyers. The lists get aggregated, deduplicated, scored for likely income and seniority, and resold to outreach tools. The cumulative effect is that your address is on more “verified business email” lists today than it was three years ago, and those lists are easier to buy and use.
Cause three: the survivors are sneaky. Native Gmail and Outlook filters got better at catching mass fraud, malware, and obvious junk. Google publicly reports a 99.9% block rate on mass spam. The cold outreach you actually see in your inbox is the survivor population: messages from real domains, with valid authentication, in professional prose, that filters cannot reasonably classify as spam. The filters are doing their job. The job is just smaller than the new threat surface requires.
The result is the inbox you have today: more solicitation, harder to distinguish from real mail, and largely invisible to the filters that catch the obvious garbage.
What Did Not Cause It
Worth ruling out a few common theories.
You did not “do something” to attract spam. The volume change is industry-wide. Your behavior is not the variable. Your address sitting on aggregated lists from five-year-old breaches is the variable.
Your provider did not get worse. Gmail and Outlook both maintain strong filtering. The new mail is engineered to look like real mail, and that is not a failure of the filter; that is the design of the attack.
You probably did not actually subscribe to most of the senders. Cold outreach using the “I noticed your work and would love to chat” pattern is generated and sent without any real signup. The sender has your address from a list, not from your relationship with them.
Buying premium email is not a fix. Hey.com, Superhuman, and other premium clients change the user experience but not the underlying problem. They do not, on their own, change the cost structure of reaching your inbox.
What Reduces the Volume in Practice
The honest answer is layered, like most modern email defense. There is no single button to press. There are several actions that compound.
Action one: turn off the senders you can. Unsubscribe from legitimate marketers using the unsubscribe link. Reputable brands respect the header and your address is removed within a week or two. Use Clean Email or Unroll.Me to do this in bulk if you are starting from a high backlog. Twenty minutes of bulk unsubscribing can clear out a year of accumulated newsletter creep.
Skip this for cold outreach you did not opt into. Spam senders ignore unsubscribe requests, and for some senders, clicking the link is treated as confirmation that the address is active. Either delete and move on, or use the “report as spam” button so your provider’s filter learns the pattern.
Action two: tighten your provider settings. Gmail’s spam settings are mostly invisible, but reporting messages as spam consistently does train the filter on your specific patterns over months. Outlook’s junk mail filter has tunable thresholds in the security settings. Spend ten minutes once a quarter to confirm both are configured aggressively.
Action three: stop the address leak forward. Use email aliases for new signups. Gmail’s plus-addressing (yourname+netflix@gmail.com) used to work but is now widely stripped by sender systems before they hit your inbox. Better options in 2026 include Apple’s Hide My Email, Fastmail’s Masked Email, and AnonAddy / SimpleLogin. The principle is to give every signup a unique address so you know which signup leaked when the spam starts.
Action four: add a structural filter for unknown senders. This is the layer that addresses the underlying cause. The volume of cold outreach grew because reaching your inbox costs nothing. A structural filter that puts a small cover charge on unknown senders changes the cost structure. The four-cent default cover charge is invisible to anyone reaching out genuinely. It collapses the economics of mass outreach.
This is the layer most volume-reduction guides skip, because it is a recent product category and most guides were written before 2024. It is also the most leveraged action available, because it works on the cause (free reach) rather than the symptoms (volume in the inbox after delivery). Rythm implements this for Gmail and Outlook at $1.65 per month. We covered the full layered defense in how to defend your inbox from phishing in 2026.
How Long Cleanup Takes
Realistic expectations matter. A single weekend of bulk unsubscribing and provider tuning will reduce inbound mail by 40 to 60% within two weeks for most users. The remaining mail tends to be persistent: cold outreach senders who do not honor unsubscribe, recurring marketing from brands you actually do business with, and the long tail of one-off pitches.
Adding a structural filter cuts the persistent tail. The first week with Rythm running, the held-folder counts are usually high (everyone you have not corresponded with in the last year goes there). The second week the cover-charge inbox stabilizes at the much smaller volume of senders willing to pay. The held folder keeps catching new strangers indefinitely, but the inbox itself becomes mostly correspondence.
The combination, after about a month, gets most users to a point where their inbox feels qualitatively different. Not zero noise, but the noise is bounded and predictable.
The Underlying Truth
The reason your inbox got worse is that email has been the only major communication channel where reaching strangers is free, and the population of senders who exploit that has grown faster than the filters that try to catch them. Generative AI accelerated the trend. Data breaches accumulated. The native filters caught the easy attacks and left the hard ones.
Each individual action above helps a little. None of them, alone, fixes the underlying condition. The structural fix is to put any cost at all on the front door for unknown senders, which collapses the volume that depends on free reach. That is the layer that has been missing from inbox defense for thirty years and is now possible because the payment infrastructure to support it finally exists.
If you have done the unsubscribe pass, tuned your filters, and your inbox still feels broken, the structural layer is the next move. It is the one that addresses the cause rather than the symptom.