How to Block Spam Emails on Gmail (2026 Guide)

To block spam emails on Gmail, open the message, click the three-dot More menu next to Reply at the top right, and choose Block "sender". Everything from that address goes to Spam from then on. Your blocked list lives at Settings > See all settings > Filters and Blocked Addresses, and you unblock from the same screen.

That's the whole mechanic, and it's softer than most people assume. Gmail's block isn't a delete. It's a routing rule that files the sender under Spam, where the message sits for 30 days before Gmail clears it out. So a blocked sender still reaches your account, still consumes a slice of your 15 GB while it waits, and is still one search away from turning up. What you've bought is a folder and a timer.

Blocking also works one address at a time, and a spam operation will burn through addresses faster than you can add them. That's the gap SecondInbox covers: a free temporary inbox in one click, no registration, permanently deleted when it expires. Use it for the free trial, the discount code, the app you'll open twice, the PDF that wants an email first. A sender who never gets your Gmail address is a sender you never have to block.

Below: the exact clicks on desktop and mobile, how to build the domain block Gmail refuses to ship, why Report spam does more damage to a spammer than Block ever will, and the state of Google's own disposable-address feature.

What Gmail's block actually does

Google's documentation is blunt about it: "After you block a sender, all future emails from them go to Spam." Not deleted. Filed.

Compare that to what the other two big clients do with the same button. Yahoo deletes blocked mail on arrival and keeps no copy anywhere. Apple Mail, by default, leaves the message sitting in your inbox with a small banner on it. Gmail lands in the middle, and the middle is a reasonable place to be: you get a 30-day window to notice that you blocked the wrong retailer before the evidence disappears.

Three things follow from that.

Spam is on a timer you can't change. Gmail deletes anything in the Spam folder after 30 days, and there's no setting to extend it. Anything misfiled in there has a month to live, so it's worth a scan every few weeks.

The sender learns nothing. No bounce, no failure notice, no signal. They keep sending because as far as their system is concerned, nothing happened. Blocking is the only action in this guide that costs the sender absolutely nothing.

The list is per-address, and that's the whole problem. Gmail doesn't publish a cap on blocked addresses, which sounds generous until you're blocking a campaign that mints a new sender for every send. Adding an address is a permanent decision about one string of text. It isn't a decision about a spammer.

Use the block for a specific, persistent, single-address nuisance. For anything bulk, the next two sections are better tools.

How to block spam emails on Gmail

On desktop

1. Open the message from the sender you want to block.
2. Click the three-dot More menu next to Reply, at the top right of the message (not the toolbar at the top of the page).
3. Click Block "sender".
4. Confirm.

Google documents the flow in Block or unsubscribe from emails. To unblock, open any message from that sender and pick Unblock "sender" from the same menu.

In the Gmail app

Same path. Open the message, tap the three-dot icon in the top right of the message header, tap Block. It works on Android, iPhone, and iPad.

One catch on mobile: you can add to the blocked list from the app, but you can't review or clean it there. Managing the list is web-only.

Where the blocked list lives

Go to Settings (the gear icon) > See all settings > Filters and Blocked Addresses. Blocked senders are listed at the bottom of that tab. Tick the checkbox next to any of them and click Unblock selected addresses.

Worth opening once a year. Most people have blocked something they now want mail from and have no memory of doing it.

Gmail has no domain block. Build one with a filter.

This is the real Gmail-specific gap, and it's an odd one.

Outlook lets you type a bare domain into Blocked senders and domains and be done. Yahoo has domain blocking too, though it's paywalled behind Mail Plus. Gmail, on a personal account, gives you neither. Google Workspace administrators get custom spam filters at the domain level. You, on a free @gmail.com address, get nothing native at all.

You get filters instead, and they do the job:

1. Click Show search options (the sliders icon) in the Gmail search box.
2. In the From field, enter *@spammydomain.com.
3. Click Create filter at the bottom of the panel.
4. Tick Skip the Inbox (Archive it) and Apply the label, or tick Delete it if you're certain.
5. Click Create filter.

You can cover several domains in one rule by putting them in the From field as *@one.com OR *@two.com. Google's own walkthrough is at Create rules to filter your emails.

I'd skip Delete it on a first pass. Deleted mail goes to Trash and vanishes after 30 days, which means a filter you typed wrong quietly eats a shipping notice and you never find out. Archive with a label costs you nothing and stays searchable.

The bigger reason to prefer filters: they match on patterns, not addresses. A subject-line condition kills a recurring newsletter that keeps rotating its sending address, and no block list can do that. Filters are the only tool here that survives address rotation.

What they can't do is catch a domain you haven't met yet. That's the permanent shape of this problem: every tool on this page reacts to a sender who already has you.

Report spam beats Block, and it isn't close

Your blocked list is a private note to yourself. Reporting spam is a complaint that lands on the sender's record.

Select the message and hit the Report spam button in the toolbar. Gmail files future mail from that sender under Spam, same as a block, and feeds the signal into its classifier so similar mail from senders you've never seen gets caught too. Moving something out of Spam with Not spam trains it the other direction just as effectively, and that half matters more than people give it credit for. A filter that's been over-trained into eating your bank's mail is a worse problem than the spam was.

Reporting also costs the sender real money. Google's Email sender guidelines treat anyone sending more than 5,000 messages a day to Gmail addresses as a bulk sender, and require them to keep their spam complaint rate below 0.30%, with 0.10% as the recommended target. Cross the line and Google starts throttling or rejecting their mail across every Gmail account on the planet, not just yours. One report is a rounding error. A few thousand is a deliverability emergency.

The split I'd use:

• Report spam for anything genuinely unsolicited. It's the only option that gets better over time.
• Filter for a domain, a subject pattern, or anything you want gone but might need to check.
• Block for the one persistent sender who keeps using one address.

Manage subscriptions handles the mail you did sign up for

A lot of what people call spam isn't spam. It's a retailer you bought running shoes from in 2023, emailing you five times a week, entirely legally, because you handed over your address at checkout.

Gmail shipped a proper tool for this in July 2025. Manage subscriptions lives in the left sidebar under More on the web, and below Trash in the app's navigation menu. It lists every sender mailing you regularly, sorted by how much they've sent recently, with an unsubscribe button on each row. You never have to open a message to hunt for a 6-pixel link at the bottom.

One hard rule on that button, and it's the same rule everywhere: only unsubscribe from mail you actually signed up for. Clicking unsubscribe on real spam confirms your address is live and read by a human, which is the single most valuable thing you can hand a spam operation. If you don't remember giving them your address, report it as spam instead. We went through the reasoning in why you shouldn't unsubscribe from newsletters you never signed up for.

Dots, plus-tags, and the Shielded Email that never shipped

Google has three answers to "stop giving out your real address," and two of them don't work.

Dots do nothing. Gmail ignores them entirely. As Google puts it, if someone adds dots to your address, you'll still get the email. [email protected] and [email protected] are one mailbox. Handing out a dotted variant protects nothing.

Plus-tags are a tracking tool, not a shield. [email protected] routes to your inbox and does tell you exactly who leaked or sold you, which makes it genuinely useful for auditing. But the tag is one string operation away from being stripped, plenty of signup forms reject the + outright, and the address underneath is still your real one.

Shielded Email is still vapor. Google's version of Apple's Hide My Email surfaced in a Google Play Services teardown in November 2024: generate an alias at signup through Gboard autofill, forward it to your real inbox, kill the forwarding when it turns sour. Good design. Google has never officially announced it, and as of August 2026 it still hasn't shipped to anyone. If you've been holding out for it, you've been holding out for nearly two years.

Even when it lands, it's an alias, not a disposable inbox. Mail forwards into the account you already have, and the alias lives until you kill it. That's the right model for a service you'll keep. A temporary inbox is a separate mailbox with an expiry date and no link back to you, which is the right model for a signup you'll never revisit. We compared the two properly in temporary email vs alias forwarding.

The fix blocking spam emails can't do

None of the above pulls your address back off a list. Blocking, filtering, reporting, and unsubscribing all react to an address that's already circulating. If your Gmail address turned up in a breach, it's being resold right now, and no amount of list maintenance touches that. (If the volume spiked recently and you want to work out why, we broke down the causes in why am I getting so much Gmail spam all of a sudden.)

The habit that actually compounds is dull: keep your Gmail address for the short list of things you'd hate to lose, and use a disposable one for everything else.

A disposable inbox is a real inbox with an expiry date. You get an address instantly, receive the confirmation mail, click the verification link, and walk away. When it expires, the contents are deleted from the server. If that address shows up on a resold list in 2029, there's nothing at the other end of it.

The honest limits, because this isn't magic:

• Some sites reject known disposable domains at signup. Banks and the big platforms usually do. If you need the account long term, use your real address.
• The inbox has to outlive the verification email. Ten-minute services get tight when a confirmation takes twelve, which is why one click extends a SecondInbox inbox instead of making you start over.
• Never use a disposable address for anything you'll need to recover. No password reset survives an expired inbox.

Which is what SecondInbox is for. One click, an inbox, no account, no personal details, everything deleted from our servers when it expires. Register free if you'd rather hold several addresses across sessions. If most of your Gmail spam traces back to free trials and one-off signups, changing that one habit does more over six months than any block list will. For the other clients and the general case, start with how to block spam emails, and if you read Gmail on an iPhone, the Apple Mail side is covered in how to block spam emails on iPhone.

The take

Gmail's block is the mildest of the three big providers', and that's a feature, not a bug: silent deletion with no copy anywhere is a bad trade for a retailer you were only mildly annoyed at. Report spam for bulk, a filter for a whole domain or a rotating sender, and save the block button for the one address that won't quit.

Then fix the intake, because nothing above stops the next list you land on. Every address you type into a signup form is a spam problem on a delay. Type one you don't mind losing.