How Much Spam Is Normal?

The useful question isn't how much, it's whether it's growing and whether you can trace it.


There's no meaningful universal number, and chasing one is the wrong frame. Volume depends almost entirely on how old your address is, how many organisations have it, whether it's ever been published publicly, and whether it's appeared in a breach โ€” variables that differ enormously between people. The useful questions are whether it's trending upward, and whether you can tell where any given message came from.

Why the "average" figures are useless to you

You'll see global statistics claiming some percentage of all email is spam. Those numbers measure traffic across the entire internet, most of which is blocked at the server before anyone sees it. They tell you nothing about your inbox.

What actually predicts your volume:

FactorEffect
Age of the addressLargest single factor. A fifteen-year-old address has accumulated hundreds of holders.
Number of organisations that have itDirectly proportional. Every signup is a permanent holder.
Ever published in plain textHarvested permanently. One forum post can matter for years.
Appeared in a breachStep change, usually months later.
How guessable it isCommon patterns at big providers get dictionary-attacked with no leak at all.
Whether you've engagedOpens and clicks raise an address's resale value.

Two people with equally "normal" habits can differ by an order of magnitude on these, which is why comparing counts isn't informative.

Better questions

Is it trending up?

A stable level, even a high one, means your filter is coping and no new list has picked you up. A steady climb means new lists keep acquiring you โ€” which is the thing worth acting on.

Did it jump suddenly?

A discrete spike usually means one event: a breach, a sale, or a signup that shared you onward. It's diagnosable. How to narrow it down

Can you tell where it came from?

This is the real dividing line. With one address for everything, no amount of spam is diagnosable โ€” you can only guess. With one address per organisation, every message names its own source, and volume stops being the metric that matters because each instance is individually solvable.

What a realistic target looks like

Not zero

Anyone promising zero spam is selling something. Your address is in circulation permanently and mail will keep being sent to it.

A realistic good outcome: almost nothing reaches the inbox because the filter handles it, the volume is flat rather than growing, and anything that does get through is attributable and can be switched off in one action. That's achievable. Elimination isn't.

If yours feels high

  1. Train the filter โ€” report rather than delete. Biggest short-term effect.
  2. Unsubscribe from senders you recognise, not from ones you don't.
  3. Check breach exposure once to see whether a step change explains it. How to read the result
  4. Stop the number of holders growing โ€” a new address per signup from today. How
  5. Don't start over in a panic; it's a big migration that fixes nothing on its own. When it's genuinely right

More: why filters can't finish the job ยท the full guide

Give every service its own address

Don't SPAM Me puts unlimited aliases on a domain you own. Any address at that domain starts working the first time mail arrives, and when spam turns up you know exactly which company leaked it. The software is free; you bring the domain, or register one during setup.

Get started โ€” free

Keep reading