Google lifts the lid: 170 billion spam emails try to gut your inbox every single day

Three hundred billion messages land on Gmail servers daily. Inside that torrent, 170 billion are junk or outright heists—a tide of phishing so relentless that Royal Hansen, Google’s VP of security, calls it the background radiation of the internet. The executive’s private briefing with Business Insider España flips the usual PR script: instead of self-congratulation, he hands over the raw telemetry. The numbers sting.

The human voice becomes the new malware

Europe is ground zero for this brand of fraud. Mandiant’s M-Trends 2026 report, compiled from half a million analyst-hours logged during 2025, shows social-engineering calls now rank as the planet’s second-most-common breach vector. Criminals no longer spam the world; they dial you, mimic your boss, and ask for the wire transfer in perfect colloquial English. The shift is deliberate. Firewalls can’t hang up on a human.

Speed is the other weapon. Once inside, intruders pass the baton like Olympic relay runners—sometimes in under 30 seconds—to affiliates who detonate ransomware at scale. A low-priority alert that would have sat in a SOC queue for days is suddenly a Fortune-500 paralysis event. The technique turns breadcrumbs into bombs.

Tech overtakes banks as criminals’ favourite prey

For two straight years finance wore the biggest target. No longer. In 2025 the technology sector absorbed more first-stage intrusions than any vertical, according to Google Cloud’s own incident feed. The motive is simple: steal source code today, own every update channel tomorrow. Why rob a vault when you can mint the coins?

Europe, meanwhile, is learning to spot its own wounds. Sixty percent of breaches last year were caught internally, a mirror-image of 2024’s 40 percent. The continent’s security teams are finally looking inward instead of waiting for a third-party postcard that the data is already on Telegram.

The takeaway is stark: phishing is no longer a nuisance filter; it is the supply chain for every major cyber-crime franchise. Ignore the junk folder and you’re not missing coupons—you’re missing the reconnaissance phase of the next continent-wide outage.