Who Pays for Email, and Why Does Anyone Give It Away?
From the The Economics of Email: Who Pays for the Internet's Oldest Infrastructure collection
More than four billion people use email, and most of them have never paid for an inbox. The messages arrive, the archive grows, most of the spam disappears, and the bill never comes. For a service used this widely, that arrangement deserves an explanation.
Email has no owner. Its core standards, SMTP for sending and IMAP for reading, are public, and anyone with a server and a domain can run a mail system. Yet the money that keeps the system running moves through a few very large companies and a wide ring of specialist businesses around them, and almost none of it appears as a charge a consumer would recognize.
The clearest way to read this arrangement is through four plain questions: what it costs to run, who pays, what is traded in return, and where the lock-in sits. Asked of every provider in the same way, from the largest free webmail service to a small paid inbox, they turn a utility that looks free into a set of business models that each make sense on their own terms.
The cost that grows with openness
Storage is the cost most people picture, and it has fallen steadily for decades. Cheap storage at enormous scale is what allowed free inboxes to grow from a few megabytes to many gigabytes. The heavier and less visible cost comes from the protocol's openness itself.
Because any server can send to any inbox, sending mail costs almost nothing, and that makes abuse cheap. A spam campaign can profit from a tiny response rate when each extra message costs close to zero. Defending against it requires machine-learning filters, shared threat intelligence, and constant retuning, and the same defenses must screen every account.
That last point carries the argument. A filter trained on the traffic of billions of accounts learns faster, and costs less per user, than one trained on thousands. Abuse fighting is a scale advantage, and so are reliability and a good reputation with other mail servers. An open standard with no gatekeeper written into it ends up operated mostly by a handful of large providers, because the economics of defending openness favor size.
Security carries the same logic into business. Phishing and business email compromise, which FBI IC3 reports rank among the costliest reported cybercrimes, enter organizations mainly through the inbox. A dedicated security industry grew around that exposure, valuable enough that Thoma Bravo took Proofpoint private in 2021. The open design that keeps email universal also sustains a permanent market for protection against it.
Why the largest companies give inboxes away
If running email at scale is expensive, the free consumer inbox needs a source of value beyond its price. Advertising supplies part of it. Gmail stopped scanning message content for ad personalization in 2017, and the ads that remain sit in promotional tabs and alongside the message list.
The larger value lies in what the address does elsewhere. An email address becomes the login for a phone, a video account, cloud storage, documents, and payments. That identity anchor ties a person to an ecosystem, and the provider earns from everything the anchor holds in place. Storage subscriptions add a direct stream on top: a free quota that gradually fills becomes a gentle path to a paid plan.
Seen this way, the free inbox is a cross-subsidy. The provider absorbs the cost of email because the account it creates supports products that earn far more. When an inbox loses that strategic role, the economics change, and Yahoo Mail, which has passed between owners, shows how a mature mail service can be run mainly for the cash its existing users generate.
Privacy advocates raise a point that belongs in the same analysis: a business funded by attention and identity holds a great deal of personal data. Privacy-first providers answer the same economic problem another way. Proton, Fastmail, Tuta, and similar services earn through subscriptions to inboxes that carry no advertising, often with storage, calendars, or password managers attached. Ad-supported, bundled, and paid models are separate answers to one question about who covers the cost, each suited to a different user.
The subscription anchored by mail
In business, the same technology carries a direct price. Microsoft 365 and Google Workspace sell email together with documents, calendars, video meetings, and now AI assistants, charged per user per month. Email is the piece every employee touches daily, which makes it the anchor of the per-seat bundle.
The bundle's durability comes from switching costs. Moving a company's mail means migrating years of archives, rewiring integrations, changing domain records, retraining staff, and preserving a compliance history that regulators and courts may later request. Each step carries risk, so organizations tend to stay where they are.
The move from on-premises mail servers to cloud subscriptions turned one-time license sales into recurring revenue, and switching costs keep that revenue predictable. AI assistants show the lever at work. Folding new capabilities into an existing bundle gives a supplier grounds to raise the per-seat price, and customers held in place by switching costs absorb much of the change. Critics of market concentration point to this combination of bundling and lock-in when they argue that a few suites hold unusual pricing power.
Private rules for a public-seeming system
Businesses also value email from the sending side. A company that holds a customer's address can reach that person directly, without paying a social network for each impression or depending on a ranking algorithm. This owned audience explains why marketing services price by the number of contacts and why the permission-based list is the asset the sending industry serves. When Intuit bought Mailchimp in 2021 for about $12 billion, it acquired a business built on that asset.
Every sender depends on decisions made by a few mailbox providers. Gmail, Outlook, Yahoo, and Apple decide which messages reach billions of people, and their choices work like regulation. When Google and Yahoo began enforcing bulk-sender rules in February 2024, requiring authentication, one-click unsubscribe, and low spam-complaint rates, the whole sending industry adjusted its practices. Apple Mail Privacy Protection, introduced in 2021, weakened the open-rate measure that marketers had relied on for years and moved them toward other signals.
This private rule-setting often serves recipients well, since it cuts spam and fraud. It also concentrates authority over a shared system in a small group of companies, a concern that senders and competition-minded critics raise. Both observations follow from the same structure: an open protocol whose daily operation rests with a few large operators.
A method that travels
Email's economics resolve into a pattern. The protocol stays open, and anyone may join. Value gathers where costs fall sharply with scale, where an account anchors identity, where switching is expensive, and where a provider controls access to attention. Each business in the system, from webmail to security, sits at one or more of those points.
The four questions that explain the inbox apply equally well beyond it. Search, social networks, messaging apps, and cloud storage each have a cost to run, a payer, an exchange, and a place where users become hard to move. A service that appears free is financed somewhere, and the location of that financing describes the service more precisely than its price.
Email makes a useful case because it is old, universal, and open, which leaves its financing visible in ways newer services often obscure. Anyone who can explain who pays for an inbox holds a working model for reading much of the digital economy.