Spam-Free Creator Inbox: Logins, Sending Limits and Blocking
Why QKAP asks people to log in before they message you, how sending limits and one-tap blocking work, and a calm routine for spam and abuse.
On this page
- Key takeaways
- Why open contact forms attract spam
- The protections built in
- How to block a sender or report spam
- Spotting fake brand pitches
- Harassment and safety
- Your privacy in the inbox
- How this compares with other contact routes
- What to do with each kind of message
- Bottom line
- Frequently asked questions
- Sources
QKAP keeps your inbox usable with four layers of protection. Every sender must be logged in to a QKAP account, each account can start only a few new conversations an hour, nobody can send more than five messages in a row without a reply from you, and you can block a sender or report spam from any conversation. Your own email address is never shown to senders, so the inbox doesn't expose you the way a public email does.
Key takeaways
- Open contact forms attract bots because anyone can submit them. QKAP's inbox needs a logged-in account, which makes automated spam much harder.
- Built-in limits: 5 new conversations per hour and 20 per day per sender, 30 messages an hour, 5 links per message, and a pause after 5 unanswered messages in a row.
- Block sender stops someone messaging your page. Report spam & block does the same and also tells QKAP; reports from three different creators within 30 days stop that account starting new conversations.
- Sender details, including brand names and shared emails, are written by the sender. Treat them as claims until you've checked them.
- For harassment or fraud: don't engage, block, keep records, and report to the platform or the authorities.
Why open contact forms attract spam
A contact form that anyone can submit is a target. Bots find it, fill it with links, and come back every day. Public email addresses have the same problem: once your address is in your bio, it ends up on lists you never agreed to.
A login gate changes the maths. On QKAP, a person must log in or create a free QKAP account before they can send, which means every message is tied to an account that can be limited, blocked and reported. It's the same follower account people use to buy from creators, which our guide to follower accounts for creator stores explains. Browsing your page still needs no account at all.
The protections built in
| Protection | What it does |
|---|---|
| Login required | Only logged-in QKAP accounts can send. A hidden trap field also catches simple form bots. |
| New conversation limits | Each account can start 5 new conversations an hour and 20 a day, across all creators. |
| Message limit | Each account can send 30 messages an hour, with further limits on new conversations per network and on messages per conversation. |
| Unanswered cap | After 5 messages in a row without a reply from you, the sender sees "Waiting for" your name and must wait. |
| Link cap | Up to 5 links per message. |
| Length rules | A first message must be 10 to 2,000 characters, so one-word pings are refused, and no message can be longer than 2,000. |
| Spam hold | If three different creator accounts report the same sender within 30 days, that sender can't start new conversations. |
None of this needs setting up. It applies to every page with the inbox switched on, on every plan.
How to block a sender or report spam
Open the conversation in Dashboard → Inbox and use the menu at the top:
- Choose Block sender if you simply don't want to hear from this person. They can't message your page again, the conversation moves to the Blocked view, and they aren't told.
- Choose Report spam & block if the message is spam, a scam or abuse. It blocks them in the same way and also records a spam report with QKAP.
- To undo either, open the Blocked view, open the conversation and choose Unblock. Unblocking also clears your spam report.
Blocking and reporting need two team permissions, See messages and Manage the inbox, so an assistant who only replies can't block people by accident.
Spotting fake brand pitches
Scammers know creators want brand deals. Inside any inbox, including QKAP's, watch for these signs:
- Lookalike names and domains. A brand name with a letter swapped, or a website on an odd domain. Check the brand's official site and social accounts yourself rather than following the link in the message.
- Unverified emails. If a sender shared an email that wasn't confirmed through a Google sign-in, QKAP marks it Not verified, because anyone can type a famous brand's address into a sign-up form.
- Upfront fees. "Registration", "onboarding" or "security deposit" fees to join a campaign. Real sponsors pay you; they don't charge you to be paid.
- Payment tricks. Requests to "accept" a UPI collect request or enter your UPI PIN to receive money. You never need your PIN to receive a payment.
- Urgency and off-platform pressure. "Reply within an hour", or a push to move to a new chat app and download a file before anything is agreed.
- Vague briefs with generous money. No deliverables, no dates, no usage terms, but a large budget.
Our guide to building trust as an affiliate creator covers why one bad partnership can cost more than ten missed ones.
Harassment and safety
Most messages are harmless. When one isn't, a calm routine protects you:
- Don't engage. Replying, even to say stop, tells the sender they've reached you.
- Block or report. Use Report spam & block for abuse, so the report counts towards the platform-wide hold.
- Keep records. Take screenshots, and if you can see and manage the inbox, download a CSV of your conversations before anything changes. Blocked conversations are included.
- Report where it happened. If the same person is also messaging you on Instagram or elsewhere, use that platform's reporting tools too. You can also reach QKAP through the contact page.
- Go to the authorities when there's a threat or fraud. In India, the National Cyber Crime Reporting Portal at cybercrime.gov.in accepts online complaints, including financial fraud, and the national helpline 1930 is available 24 hours a day, according to a Kerala Police cyber police notice (checked October 2026). Outside India, contact your local police. In an emergency, call your local emergency number first.
Your privacy in the inbox
Messages travel through QKAP, so your email address is never shown to senders. Email alerts about new messages go to the account owner only, at most once per conversation every 12 hours, and never include the message text, so a scam link never sits in your mailbox. A sender's email reaches you only if they choose to share it. For your own side of the deal, our privacy basics for creators explain how to handle the details people do share. Followers can read about their side in our guide to QKAP follower accounts and My purchases.
How this compares with other contact routes
As of October 2026, Instagram's Help Centre says message requests from accounts you don't follow go to a Requests folder, where you can accept or deny them, and that hidden requests, such as offensive or spam messages or ones caught by Hidden Words, are moved there too. That's a useful filter for DMs. The QKAP inbox adds sending limits and structure for messages that come from your bio link.
| Open web contact form | Public email in bio | Instagram DMs | QKAP inbox | |
|---|---|---|---|---|
| Sender must log in | Usually no | No | Yes (an Instagram account) | Yes (a free QKAP account) |
| Your address visible | Depends | Yes | Not applicable | Never |
| Sending limits per sender | Depends on the tool | Depends on your email provider | Check Instagram's help | Yes, built in |
| Filtering and blocking | Depends on the tool | Email filters and spam folder | Requests folder and Hidden Words | Block sender, one tap |
| Spam reports affect other creators | Depends on the tool | Depends on your email provider | Check Instagram's policies | Yes, after reports from 3 creators in 30 days |
What to do with each kind of message
| Message type | What to do | Tool to use |
|---|---|---|
| Genuine fan question | Reply, then archive | Reply box, quick replies |
| Real brand, unclear brief | Ask for deliverables, dates and budget | Quick reply |
| Brand claim you can't verify | Check the official site before replying | Brand fields, Not verified badge |
| Upfront fee or PIN request | Don't reply or pay | Report spam & block |
| Repeated unwanted messages | Stop replying | Block sender |
| Threats or harassment | Keep records and report | Report spam & block, CSV export, authorities |
Bottom line
Leave the protections to do their job, check the Unread view on your own schedule, and use Block or Report spam & block without guilt. Switch the inbox on from your dashboard and read the Inbox & brand deals feature page for a tour, or follow our inbox setup guide.
Frequently asked questions
Can a blocked person still view my page?
Yes. Blocking only stops them messaging your page; your page stays public like any link-in-bio page. If they open the message form, it just says you aren't taking messages right now.
Can I unblock someone later?
Yes. Open the Blocked view, open the conversation and choose Unblock. They can message you again, and any spam report you made is cleared.
Will a login step put genuine brands off?
A few may skip it, but brands are used to filling in contact forms, and a free QKAP account needs only a name, an email and a password (or a Google sign-in, where offered). The benefit is that the messages you do get come from real accounts that you can reply to and block if needed. If you want a fallback, keep a business email in your bio as well.
Does marking spam tell QKAP?
Yes. Report spam & block records a spam report with QKAP as well as blocking the sender. If three different creator accounts report the same sender within 30 days, that sender can no longer start new conversations.
Does the sender know I blocked them?
No. They aren't told, and the form shows the same neutral message it shows when a creator's inbox is switched off.
Sources
Checked on 17 October 2026.