To block spam emails on Yahoo Mail, click the Settings icon, then More Settings, then Security and Privacy. Under Blocked addresses, click Add, type the address, and click Save. From then on Yahoo throws that sender's mail away on arrival. It doesn't land in Spam. It doesn't land in Trash. You never see it, and neither does the sender: no bounce, no error, no signal that anything changed.
That's a stronger block than Gmail or Apple Mail give you, and it comes with a matching risk. If you block an address you later need something from, a shipping notice or a two-factor code, there is no folder to go looking in. The message was deleted, not filed.
Blocking also treats one address at a time, and spam operations rotate addresses faster than you can add them. That's the gap SecondInbox fills: a free temporary inbox in one click, no registration, permanently deleted when it expires. Use it for the free trial, the store discount code, the app you'll open twice, the whitepaper that wants an email first. A sender who never gets your Yahoo address is a sender you never have to block.
Below: the exact clicks on desktop and in the app, the domain-blocking feature Yahoo puts behind a paywall (and the free workaround that does the same job), and why Mark as Spam is usually the better button.
What blocking on Yahoo actually does
Yahoo's block is a server-side delete. Mail from a blocked address reaches Yahoo, gets matched against your list, and is discarded. Yahoo confirms the sender side of this in Will blocked contacts know I have blocked them?: no failure notice goes back to them.
Two consequences worth sitting with before you start adding addresses.
You lose the audit trail. Gmail routes blocked senders to Spam, where you can still dig them out for 30 days. Apple Mail, by default, leaves the message sitting in your inbox with a small icon on it. Yahoo keeps nothing. If you block a retailer to stop the marketing and they later email you a return label, that label does not exist anywhere in your account.
The list has a ceiling. Yahoo caps you at 1,000 blocked addresses. That sounds generous until you're blocking a spam run that burns a new sender for every send, at which point you're filling a finite list to fight an infinite supply. Adding an address is a permanent decision about one string of text. It is not a decision about a spammer.
So use the block for a specific, persistent, single-address nuisance. For bulk mail, the next two sections are better tools.
How to block spam emails on Yahoo Mail
On desktop
- Click the Settings gear icon in the top right.
- Click More Settings.
- Click Security and Privacy.
- Under Blocked addresses, click Add.
- Type the full email address.
- Click Save.
Yahoo documents this flow in Block and unblock email addresses in Yahoo Mail. Note there's no Block button in the message view itself, which is the single most common reason people think Yahoo doesn't support blocking. It does. It just lives in Settings, and you have to type the address yourself rather than click one.
To unblock: same path, then hover over the address and click the delete icon.
In the Yahoo Mail app
Blocking on mobile runs through account settings the same way. Tap your profile icon, then Settings, then find the blocking section and add the address. What you get in the message view instead is Mark as spam, under the More icon on an open message. That's a different action with a different effect, covered below.
A block set here applies to your Yahoo account, not your device. It works in the app, on the web, and in any desktop client pulling the same mailbox. That's the opposite of an iPhone block, which only applies where your Apple Account reaches. We went through that distinction in how to block spam emails on iPhone if you read Yahoo mail in Apple Mail.
Blocking a whole domain costs money, but the workaround is free
If the spam is coming from twenty addresses at the same domain, blocking them one by one is a losing game. Yahoo's answer is domain blocking, described in Block email messages from a domain with Yahoo Mail Plus, and the name gives away the catch. It's a Yahoo Mail Plus feature, 500 domains while your subscription is active. On a free account the option usually isn't there at all.
You don't need to pay for it. A filter does the same work:
- Go to Settings > More Settings > Filters.
- Click Add new filters.
- Name it something you'll recognise later.
- Set the From condition to contains, and enter
@spammydomain.com. - Set the destination folder to Trash.
- Save.
Everything from that domain now goes straight to Trash. It isn't identical to a real block, and the difference is in your favour: filtered mail sits in Trash where you can check it, instead of being deleted where you can't. You also get conditions a block can't express, like subject-line keywords, which is how you kill a recurring newsletter that keeps switching sending addresses.
The one thing filters won't do is catch a domain you haven't seen yet. That's the permanent shape of this problem: every tool here reacts to an address that already has you.
Mark as Spam does more than Block does
Yahoo's spam filter learns. Your blocked list doesn't.
Select the message and hit the Spam button, or tap Mark as spam in the app. Yahoo routes future mail from that sender to the Spam folder and feeds the signal into its classifier, which is a per-sender rule you didn't have to write. Moving something out of Spam back to your inbox trains it the other direction just as well, and that half matters more than people think: an over-trained filter that eats your bank's mail is a worse problem than the spam was.
Reporting also costs the sender something. Yahoo treats anyone sending 5,000 or more messages a day as a bulk sender, and holds them to a spam complaint rate under 0.30% plus working one-click unsubscribe headers. Enough complaints and the sender's reputation drops across every Yahoo inbox, not just yours.
One thing to know about the Spam folder: Yahoo empties it after 30 days and doesn't let you change that. Anything misfiled in there is on a clock, so it's worth a scan every few weeks.
The rough split:
- Mark as Spam for anything genuinely unsolicited. It's the only option that improves over time.
- Filter to Trash for a domain or a pattern you want gone but might need to check.
- Block for one persistent sender who keeps using one address.
Use the tabs and the unsubscribe link for mail you did sign up for
A lot of what people call spam isn't spam. It's a retailer you bought running shoes from in 2023, mailing you five times a week, entirely legally, because you gave them your address at checkout.
New Yahoo Mail sorts that automatically. Alongside your Primary inbox you get Offers, Newsletters, and Social tabs, so promotional mail lands out of your way without touching a block list. There's a one-click unsubscribe in the message view too, and in the app an Unsubscribe option under the More icon.
One hard rule on that button. Only use unsubscribe on mail you actually signed up for. Clicking unsubscribe on real spam confirms your address is live and read by a human, which is the most valuable thing you can hand a spam operation. Yahoo's own guidance says the same: don't reply to removal requests from senders you don't recognise. We covered the reasoning in why you shouldn't unsubscribe from newsletters you never signed up for. If you don't remember giving them your address, mark it as spam instead.
Yahoo has its own disposable addresses, with strings attached
This is the part most Yahoo spam guides skip. Yahoo Mail offers disposable email addresses natively, built as a nickname plus a keyword: [email protected]. You hand one out, and if it starts attracting spam you delete it without touching your real address.
They're genuinely useful, and worth knowing the terms:
- You need Yahoo Mail Plus for the full feature, which gets you up to 500 of them.
- Free accounts in Yahoo Mail Plus locales get three to try. Three is enough to test the idea, not enough to run on.
- It isn't available in every locale. If the option isn't in your settings, it isn't coming.
- Every address is tied to your Yahoo account and your chosen base name. Delete the base name and all of them die together.
That last point is the real distinction. Yahoo's disposable addresses are aliases: mail forwards into the account you already have, they live indefinitely, and they're the right tool for anything you need long term. A temporary inbox is a separate mailbox with an expiry date and no link back to you, which is the right tool for a signup you'll never revisit. Different jobs. We compared the two models properly in temporary email vs alias forwarding.
The fix blocking can't do
You can't unblock your way out of an address that's already circulating. Blocking, filtering, and unsubscribing all treat an address that's already out there. None of them stop the next signup form from putting you on another list.
The habit that works is dull, and it's the only one that compounds: keep your Yahoo address for the short list of things you'd hate to lose, and use a disposable one for everything else.
A disposable inbox is a real inbox with an expiry date. You get an address instantly, receive the confirmation mail, click the verification link, and walk away. When it expires, the contents are deleted from the server. If that address turns up on a resold list in 2029, there's nothing at the other end of it.
The honest limits, because this isn't magic:
- Some sites reject known disposable domains at signup. Banks and the big platforms usually do. If you need the account long term, use your real address.
- The inbox has to outlive the verification email. Ten-minute services get tight when a confirmation takes twelve, which is why one click extends a SecondInbox inbox instead of making you start over.
- Never use a disposable address for anything you'll need to recover. No password reset survives an expired inbox.
Which is the case for SecondInbox. One click, an inbox, no account, no personal details, everything deleted from our servers when it expires. Register free if you'd rather hold several addresses across sessions. If most of your Yahoo spam traces back to free trials and one-off signups, changing that single habit does more over six months than any amount of list maintenance. For the other clients and the general case, we covered it in how to block spam emails.
It stops the mail reaching you, but the sender keeps sending. Yahoo deletes the message on arrival and sends no failure notice back, so they have no idea anything changed and no reason to stop.
Settings > More Settings > Security and Privacy, under Blocked addresses. Add addresses with the Add button, and remove one by hovering over it and clicking the delete icon. The cap is 1,000 addresses.
Not with the block feature, which is a Yahoo Mail Plus perk. Create a filter instead: Settings > More Settings > Filters, set From contains <code class="inline-code">@domain.com</code>, and send it to Trash. Same result, and you keep a copy in case you need it.
Usually your address appeared in a breach or a company you signed up with sold its list, and it's now moving between buyers. Check haveibeenpwned.com. A jump in mail from senders you've never heard of is the tell, and blocking won't pull the address back off those lists.
For anything bulk, yes. Marking as spam trains Yahoo's filter and counts against the sender's reputation across the platform. Blocking maintains a hand-written list of 1,000 slots against senders who generate new addresses for nothing.
The take
Block sparingly on Yahoo. It's the most absolute of the three big providers' blocks, which is exactly why it's the wrong default: silent deletion with no copy anywhere is a bad trade for a retailer you were only mildly annoyed at. Mark as Spam for bulk, a filter to Trash for a whole domain, and save the block list for the one sender who won't quit.
Then fix the intake, because none of the above stops the next list you end up on. Every address you type into a signup form is a spam problem on a delay. Type one you don't mind losing.
