Skip to content
Blog
Article
How to · 8 min read

How to receive email without a phone number — every legal way that actually works

Most signup forms now ask for both an email and a phone. Here is the working playbook for getting through the email step without exposing either — and what to do when the form really does require both.

It used to be that giving up your email was the privacy cost of signing up to anything online. In 2026, the goalposts have moved: most onboarding flows now require an email and a phone number, both verified. The phone is the harder one — not because receiving SMS is hard, but because most people don't want a random SaaS to have a permanent record linked to their real cell carrier account.

This post is about the email half: every legal, ethical way to receive email without giving up a real, permanent address. The phone half (and what to do when a form really needs both) is at the end.

Five ways to receive email without your real address

1. Disposable inbox (this site)

The fastest. Generate an inbox, paste the address, receive your code, close the tab. The inbox dies on its own (typically 10 minutes to a few hours depending on provider).

Pros:

  • No signup, no credentials, instant.
  • The address ceases to exist after expiry — nothing to leak later.
  • Free, ad-supported (we use AdSense once approved; otherwise the tool is free out of pocket).

Cons:

  • Some signup forms (banks, fintech, some social media) detect known disposable domains and reject them. We work around this by rotating provider domains, but the cat-and-mouse never ends.
  • You can't log back in to read mail later — once the inbox is gone, it's gone.

2. Email alias (SimpleLogin, Addy.io, AnonAddy)

An alias service generates an address like x9k3p@aleeas.com that forwards to your real inbox. You can have hundreds, you can disable them individually if one starts receiving spam, and you can reply through the alias so the sender never sees your real address.

Pros:

  • Permanent — works for accounts you'll log back into in 2030.
  • One per service — instantly diagnose which service leaked.
  • Reverse mail flow works (you can reply, the recipient sees the alias).

Cons:

  • Costs ~$30/year for the unlimited tier on the major services.
  • A few signup forms detect these too (less aggressively than disposable, but it happens).

3. A second real inbox (gmail.com / proton.me)

Old-school but works for everything. Create a second Gmail or Proton account, use it as your "junk" address. No service detects it as anything other than a real inbox.

Pros:

  • Universally accepted.
  • Free.

Cons:

  • Needs a phone number to set up (Gmail, mostly), defeating the purpose.
  • Junk inbox fills up; you have to triage it manually forever.
  • If breached or hacked, contains years of your history.

4. A custom domain with catch-all

Most domain registrars let you set up a catch-all forwarder for ~$0–$5/month: any address @yourdomain forwards to your real inbox. Sign up to Service A as servicea@yourdomain.com; Service B as serviceb@yourdomain.com. Ifservicea starts spamming, kill that one alias.

Pros:

  • You own the domain — nobody can take it away.
  • Permanent, recoverable, fully under your control.
  • Looks like a real address (not flagged as disposable).

Cons:

  • Costs $10–$20/year for the domain plus ~$5/month for forwarding.
  • Requires basic DNS knowledge (or a registrar with a one-click setup).

5. Plus-addressing on Gmail / Proton

Gmail and Proton both let you append +anything to your address (e.g. you+netflix@gmail.com) and the mail still arrives in your real inbox. The benefit: you can filter or sort by the "+" tag without giving out a separate address.

Caveat: the "+" is part of your real address, so if a leak happens the attacker gets you+netflix@gmail.com and can trivially strip the tag to get your real address. Plus-addressing is a sorting tool, not a privacy tool.

Choosing the right one

For one-shot signups (e.g. download a white paper, claim a free trial of a SaaS you don't plan to actually use): disposable inbox.

For long-term accounts (e.g. signing up to a banking app, a subscription service, anything you'll log into again): email alias or custom domain.

For triaging your existing real inbox without giving up new addresses: plus-addressing.

For an "everything else" junk address that you're prepared to abandon if it ever leaks: second Gmail account.

What about the phone field?

Most signup forms still require a phone in addition to the email. Receiving SMS without giving up your real number is harder, less free, and usually involves:

  • A virtual number from a service like Hushed, MySudo, or Google Voice. Requires US billing in some cases. Typically $1–$5 per month per line.
  • A service like SMSPVA, OnlineSIM, or 5sim. Pay per receive (~$0.10–$2 per number depending on country). Many services flag these — your verification code may bounce.
  • A second cheap prepaid SIM. Costs $5–$10 once. Works universally. Annoying to physically manage.

If a form requires both email and phone and you don't want to give up either: combine a disposable inbox with a virtual number. Some forms still detect virtual-number ranges and refuse; you may have to use a real prepaid SIM for the phone half.

Forms that won't accept anything

A small but growing number of services explicitly refuse anything that isn't a real, paid mobile carrier number and a real, paid (or major-provider) email. Banks, government services, and some fintech do this on purpose to comply with KYC regulations.

For these, the only options are:

  • Provide your real details and accept the privacy cost.
  • Skip the service.
  • Use a regulated alternative — for example, KYC-friendly virtual number services like Telnyx, which can issue you a real number backed by a carrier and accept regulated signups.

The defensive habit

Whatever combination you settle on, the habit that pays off long-term: treat every signup as a permanent record. Every form you fill in is a row in a database somewhere that will outlive you. The only addresses you can't get back are the ones you've typed in. The only phone numbers you can't recover are the ones already in someone else's CRM.

If a form doesn't need a real email, don't give it one. If it does (because you'll need to log back in), use an alias — not your real address. If it doesn't need a phone, leave the field blank. You'd be surprised how often the "required" marker is decorative.

Need a disposable address right now? Generate an inbox — under a second.

See also: Disposable vs alias email, Privacy tips when signing up for online services, Temp mail vs VPN vs aliases.

Sponsored
Ad space (consent or AdSense ID required)

Continue reading

Read the FAQ · Back to PocketInbox