Not All Unwanted Emails Are the Same
People often use “spam” and “phishing” interchangeably, but they describe different types of unwanted emails with very different levels of risk. Understanding the distinction helps you respond appropriately to each โ and protect yourself more effectively.
What Is Spam?
Spam refers to unsolicited bulk email โ messages sent to large numbers of people without their consent, typically for commercial purposes. Examples include:
- Promotional emails from companies you’ve never heard of
- Newsletters you never subscribed to
- Advertisements for products or services
- “Get rich quick” and investment scheme promotions
Spam is annoying and wastes your time, but it’s generally not dangerous. The sender wants to sell you something โ not steal from you.
What Is Phishing?
Phishing is a form of cyber attack that uses deceptive emails to trick you into revealing sensitive information โ passwords, credit card numbers, Social Security numbers โ or installing malware on your device. Phishing emails impersonate trusted entities like:
- Banks and financial institutions
- PayPal, Amazon, or other e-commerce platforms
- Government agencies (IRS, HMRC, etc.)
- Your email provider or cloud service
How to Spot a Phishing Email
Phishing attempts often share these warning signs:
- Urgency: “Your account will be suspended in 24 hours”
- Generic greeting: “Dear Customer” or “Dear User” instead of your name
- Suspicious sender: The “from” address doesn’t match the legitimate domain
- Link mismatch: Hovering over a link shows a different URL than the text suggests
- Grammar errors: Unprofessional writing, spelling mistakes, odd formatting
How Temporary Emails Reduce Both Risks
Using a disposable email for low-trust sign-ups reduces your exposure to both spam and phishing:
- Spam is contained to the temporary inbox, which expires automatically
- Phishing attempts go to the disposable address โ your real inbox remains safe
- Your real email is not in the databases of low-security sites that are common phishing targets
What to Do If You Receive a Phishing Email
- Do not click any links or download any attachments
- Do not reply to the email
- Report it as phishing in your email client
- If it impersonates a real company, forward it to that company’s abuse/security team
- Delete the email
Conclusion
Spam is a nuisance; phishing is a threat. Knowing the difference helps you take the right action โ ignore and delete spam, actively report and avoid phishing. And using temporary email addresses keeps both types of attacks away from your real inbox.