'Nearly two-thirds of spam came from US-based infrastructure': Your free Gmail account could be helping criminals send 46% of all commercial spam while wearing down employees with email fatigue
A 2026 report by VIPRE Security Group reveals that 46% of global spam is commercial in nature, largely delivered through compromised accounts and free email services like Gmail. Nearly two-thirds of this spam originates from infrastructure in the United States, which is also the primary target of such campaigns. The surge in spam contributes to email fatigue, making users more vulnerable to phishing attacks that exploit psychological triggers.
- ▪Commercial spam accounted for 46% of all spam globally in Q1 2026, according to VIPRE Security Group's report.
- ▪33% of commercial spam was delivered through compromised accounts, while 32% came from free email hosting services such as Gmail.
- ▪Approximately 66% of commercial spam traffic originated from infrastructure based in the United States.
- ▪The U.S. was also the top target for spam campaigns, receiving 60% of all commercial spam volume.
- ▪Phishing links made up nearly 26% of all spam during the observed period, leveraging user fatigue and deceptive messaging.
Opening excerpt (first ~120 words) tap to expand
Pro Security 'Nearly two-thirds of spam came from US-based infrastructure': Your free Gmail account could be helping criminals send 46% of all commercial spam while wearing down employees with email fatigue News By Efosa Udinmwen published 30 April 2026 Cybercriminals are turning everyday email inboxes into powerful crime tools When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works. (Image credit: Getty Images) Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter Trusted email platforms are now the easiest entry point for attackersSpam is no longer noise; it actively drives successful phishing…
Excerpt limited to ~120 words for fair-use compliance. The full article is at TechRadar.