I’ve been doing work on a website for one of my clients, and I noticed they followed a trend with their email address that I’ve seen a lot. They were getting lots of spam at their contact email address, i.e. firstname.lastname@example.org, so they replaced it with email@example.com as a last ditch method to stop the avalanche of spam.
While this works, it doesn’t get to the root of the problem: if your email address is on the internet, spammers will get it. But with that being said, there are a few tactics you can use to slow down your intake of spam. Most of them are very simple, and take only a few seconds of your time.
- Choose non-generic email addresses
I’ve run far too many domains and email addresses to not notice that if you have a firstname.lastname@example.org, spammers will try to send email to it — even if you don’t have it set up. So don’t set it up! Use more creative addresses such as email@example.com, or firstname.lastname@example.org.
- Don’t have a “catch-all” email address
You may also have a “catch-all” email address in place, so emails sent to any address @mydomain.com will show up in your inbox anyways. Turn that off too. Spammers will more than happily send email to generic/random addresses @mydomain.com, in hopes of scoring a hit. Don’t let that happen.For those of you using a domain control panel named cPanel, there is an option inside of it for Email named “Default Email Address” what most people will do is send any email that isn’t connected to a proper address to either :fail: which will email the user back announcing that this address doesn’t exist, or my favorite :blackhole: which removes the email from the server entirely, never getting to you. Note that you will still be able to receive spam on your published email address but this deletes the emails going to addresses that you do not have on your server. IE: If you own the address of email@example.com but you do not own the address of cPaneladdie@mycompany.com, the spam going to cPaneladdie@mycompany.com will be instantly removed, while the spam going to the owned firstname.lastname@example.org will be in your inbox.
- Don’t use your email for the domain registration
If you register a domain name and use your email address for the registrant, administrative and/or technical contact email, you’re just asking to get spam. Yes, some sites like NameCheap.com will censor your email address from a WHOIS request. When registering your domain through NameCheap, you’re given a free whois guard. Yet still others, like Whois.net, won’t. Also, you can usually pay for a “unlisted” domain registration, what will keep your contact info private.
- Use online forms for email communication
If you have the technical ability, allow your website visitors to contact you via email using an online form. That way, the form sends the email to you and the visitor has no idea what address it’s sending it to. But be careful, online mail forms are tricky and can be subject to code injection. This can lead to your sever actually sending out spam.
- Encrypt your email address
If anyone else has some additional suggestions, feel free to share.