How to Block Spam Emails on Gmail, Outlook, and Yahoo

Spam accounts for roughly 45% of all email sent worldwide. While mailbox providers filter the majority of it automatically, unwanted messages still slip through. This guide covers the specific steps to block spam on the three largest email platforms, plus the authentication measures that stop spam at the source.

Blocking Spam in Gmail

Report Spam

1. Open the message or select it from your inbox.
2. Click the Report spam button (exclamation mark icon) in the toolbar.
3. Gmail moves the message to Spam and uses your report to train its filters.

Reporting is more effective than deleting. Each report feeds Gmail's machine learning model, improving filtering for you and other users.

Block a Specific Sender

1. Open a message from the sender.
2. Click the three-dot menu next to the reply button.
3. Select Block [sender name].
4. Future messages from this address go directly to Spam.

Create a Filter Rule

For pattern-based blocking (e.g., all mail from a specific domain or containing certain keywords):

1. Click the search options icon in the Gmail search bar.
2. Enter your criteria: From address, subject line keywords, or other fields.
3. Click Create filter.
4. Select Delete it or Skip Inbox and Apply label: Spam.

Unsubscribe Safely

Gmail displays an Unsubscribe link next to the sender name for messages that include a List-Unsubscribe header (defined in RFC 2369). Use this link rather than the unsubscribe link in the email body, as Gmail handles it server-side without exposing you to tracking or phishing pages.

Blocking Spam in Outlook (Microsoft 365 and Outlook.com)

Report Spam

1. Select the message in your inbox.
2. Click Junk in the ribbon, then Junk again (or Phishing if applicable).
3. The message moves to the Junk Email folder.

Block a Sender

1. Select the message.
2. Click Junk > Block Sender.
3. The sender is added to your Blocked Senders list.

To manage your blocked list: Settings > Mail > Junk email > Blocked senders and domains.

Create an Inbox Rule

1. Go to Settings > Mail > Rules.
2. Click Add new rule.
3. Set conditions (sender address, subject contains, etc.).
4. Set the action to Move to Junk Email or Delete.
5. Save the rule.

Safe Senders List

Outlook's Safe Senders list ensures legitimate mail is not incorrectly filtered. Add trusted senders under Settings > Mail > Junk email > Safe senders and domains.

Blocking Spam in Yahoo Mail

Report Spam

1. Select the message.
2. Click Spam in the toolbar.
3. Yahoo moves the message and learns from your report.

Block a Sender

1. Open the message.
2. Click the three-dot menu.
3. Select Block senders.
4. Confirm the block.

To manage blocked addresses: Settings > Security and Privacy > Blocked addresses.

Create a Filter

1. Go to Settings > More Settings > Filters.
2. Click Add new filters.
3. Define the filter criteria (From, To, Subject, Body).
4. Set the action: Move to Trash or Move to folder.
5. Save.

Beyond Client-Side Filters: Stop Spam at the Source

Blocking spam manually is reactive. If you are a domain owner or email administrator, the more effective approach is to prevent spoofing and abuse of your domain in the first place.

Publish a Valid SPF Record

SPF (RFC 7208) tells receiving servers which IPs are authorized to send mail for your domain. Without it, anyone can forge your address. Validate your SPF record with our SPF Check tool.

Sign with DKIM

DKIM (RFC 6376) cryptographically signs your outgoing messages, proving they have not been altered in transit. Verify your DKIM configuration with our DKIM verification tool.

Enforce DMARC

DMARC (RFC 7489) instructs receiving servers to quarantine or reject messages that fail SPF and DKIM alignment. Without a DMARC policy, failed authentication may still result in delivery. Check your DMARC policy with our DMARC analyzer.

Together, these three protocols form a defense that stops unauthorized senders from using your domain. Gmail, Outlook, and Yahoo all honor DMARC policies, and as of 2024, Gmail and Yahoo require bulk senders to have all three configured.

Third-Party Spam Blocking Tools

For organizations that need more control:

• Email security gateways (Proofpoint, Mimecast, Barracuda) provide pre-delivery filtering with customizable policies.
• DNS-based blocklists (DNSBLs) can be configured on your mail server to reject connections from known spam sources.
• Content filtering appliances offer granular rules for attachment scanning, URL rewriting, and sandboxing.

For personal use, the built-in filters in Gmail, Outlook, and Yahoo are generally sufficient when combined with proper reporting habits.

Best Practices to Reduce Spam Exposure

1. Never reply to spam. Replies confirm your address is active.
2. Do not click unsubscribe in obvious spam. Only use unsubscribe for mail you originally opted into.
3. Use email aliases for signups and forms. Services like Gmail's + addressing (e.g., [email protected]) let you track which sources share your address.
4. Keep your authentication current. Regularly audit your SPF, DKIM, and DMARC records using InboxTooling's free tools.
5. Report, do not just delete. Reporting trains the filter. Deleting does nothing to prevent future spam.

Spam blocking is a combination of client-side controls and server-side authentication. Handle the immediate problem with filters and blocks, then address the root cause with proper email authentication.

---

Stay on top of your email deliverability. Sign up for the InboxTooling newsletter for deliverability tips, tool updates, and best practices.