How spam filters decide what to block

Email providers like Gmail, Outlook, and Yahoo use automated systems to sort incoming mail into your inbox or spam folder. These systems scan thousands of signals in each message — the sender's history, the content itself, how the message was sent, and whether it matches patterns known to be spam. A single red flag does not automatically send a message to spam, but multiple flags together often do.

The filter does not know whether a message is actually spam or just looks like it. It only knows what patterns tend to be spam. This is why legitimate emails sometimes land in the wrong folder, and why understanding these patterns helps you recover messages from people you actually want to hear from.

Key Takeaways

  • Spam filters check the sender's reputation, the message content, technical setup, and user behavior — not just whether something looks suspicious.
  • A sender's IP address or domain can be flagged if many people mark their messages as spam or if the address is new and has no sending history.
  • Certain words, formatting, and links trigger spam filters even in legitimate messages, especially if combined with other warning signs.
  • Messages sent from free email accounts or without proper authentication setup are more likely to be filtered than those from business domains.
  • The sender can reduce spam filtering by using a business email address, authenticating their domain, and avoiding spam-like formatting.

Sender reputation and history

Every email address and domain has a reputation score that email providers track. If many people mark messages from that sender as spam, or if the address sends to invalid email addresses repeatedly, the reputation drops. A new sender with no history is treated with more suspicion than someone who has been sending mail for years without complaints.

This is why emails from your friend's personal Gmail account usually arrive, but a marketing email from a brand-new domain might not. The friend has years of sending history. The new domain has none. Email providers assume new senders are more likely to be spammers until proven otherwise.

If a sender's IP address is on a public blacklist — a list of addresses known to send spam — their messages get filtered automatically. These lists are maintained by organizations that track spam patterns. A sender can end up on a blacklist if they send to too many invalid addresses, if they send the same message to thousands of people at once, or if they ignore complaints.

Content that triggers spam filters

Certain words and phrases appear far more often in spam than in real messages. Words like "act now," "limited time," "claim your," "verify your account," and "click here" are common in phishing and marketing spam. Excessive capitalization, multiple exclamation marks, and dollar signs also raise flags. A message does not need to use all of these — even a few combined with other warning signs can cause filtering.

Links and attachments are scanned too. If a message contains a link to a website known for phishing, or an attachment type commonly used to spread malware, the filter will likely block it. Even legitimate links can trigger filters if they are shortened or masked — a link that does not show its real destination looks suspicious to automated systems.

Formatting matters as well. Messages that are mostly images with little text, or that use unusual fonts and colors, resemble spam more than normal email. Legitimate business messages tend to use standard formatting and a mix of text and images, not one or the other.

Technical setup problems

Email authentication is a technical system that proves a message actually came from who it claims to come from. The three main types are SPF, DKIM, and DMARC. When these are not set up correctly on a sender's domain, email providers cannot verify the message is legitimate. A message that fails authentication checks is far more likely to be filtered.

This is especially common when someone sends from a business domain but uses a third-party service to send the mail — a newsletter platform, for example, or an automated system. If that service is not properly authorized to send on behalf of the domain, the message fails authentication and gets filtered.

Messages sent from free email accounts like Gmail or Yahoo are also filtered more aggressively when they are sent to many people at once. Email providers assume that if you are sending to hundreds of addresses from a personal account, you are probably a spammer. Business domains with proper setup are trusted more.

User behavior and complaints

Email providers track what you do with messages from each sender. If you repeatedly delete messages without reading them, or if you mark messages as spam, the provider learns that you do not want mail from that sender. Over time, more of their messages will go to spam automatically.

This system is designed to learn your preferences, but it can work against legitimate senders if their messages are not what you expect. If a sender changes their format, subject line, or frequency, you might not recognize the message and mark it as spam without thinking. Once that happens a few times, the filter assumes all their messages are unwanted.

The reverse is also true: if you mark a message as "not spam" and move it to your inbox, the provider learns that you want messages from that sender. Doing this a few times can override the filter's suspicions and may support future messages arrive normally.

Why legitimate emails get caught

A message from someone you know can still be filtered if their account was compromised. Spammers often take over legitimate email accounts and send spam from them. The email provider sees the account sending to many addresses at once, or sending messages that match spam patterns, and filters the mail even though the account itself is real.

New senders are particularly vulnerable to filtering. A company sending their first newsletter, or a person reaching out to a large group for the first time, will be filtered more aggressively than an established sender. This is not a mistake — it is how the system protects against new spam operations, which often use new addresses.

Legitimate messages can also be caught if they happen to use words or formatting that resembles spam. A real password reset email might say "verify your account" and include a link — the same pattern used in phishing. The filter cannot tell the difference without additional context, so it errs on the side of caution.

What senders can do to avoid spam filters

A sender who wants their messages to reach your inbox should use a business email address rather than a free account. They should set up SPF, DKIM, and DMARC authentication on their domain so email providers can verify the messages are real. They should avoid spam-like words and formatting, keep their sender reputation clean by not sending to invalid addresses, and send at a reasonable frequency rather than in huge batches.

Senders should also monitor their own spam complaints and remove people who mark their messages as spam. They can check their sender reputation using free tools provided by email providers. If their messages are being filtered, they can contact the email provider to request review or to remove their address from a blacklist.

For you as a recipient, the most effective action is to mark messages as "not spam" when they arrive in your spam folder. Do this a few times and the filter learns to trust that sender. You can also add the sender's address to your contacts, which signals to the email provider that you know and trust them.

Frequently Asked Questions

Why did an email from my bank go to spam?

Banks sometimes send from addresses or domains that are not properly authenticated, or they send from third-party services that are not authorized on their domain. If you recognize the sender, mark it as not spam. If you are unsure whether it is real, contact your bank directly using the number on your card rather than clicking any links in the email.

Can I stop emails from going to spam if the sender does not fix their setup?

Yes. Mark messages from that sender as not spam each time they arrive, and add their address to your contacts. After you do this a few times, the filter will learn your preference and stop filtering their messages. This works best if you do it consistently.

Does using a VPN or proxy affect whether my emails get filtered?

It can. If you send from an IP address associated with a VPN or data center, email providers may filter your messages more aggressively because spammers often use these services to hide their location. Sending from a residential internet connection or a business email service is less likely to trigger filters.

Why do some emails from the same sender go to spam and others do not?

The filter evaluates each message individually. A message with more spam-like content or formatting will be filtered even if previous messages from the same sender were not. The sender's reputation also changes over time — if they recently sent to many invalid addresses, their reputation drops and more of their messages get filtered.

If I unsubscribe from a mailing list, will that stop the emails?

Unsubscribing removes you from the sender's list, so you should not receive future messages. If you continue to receive emails after unsubscribing, mark them as spam. If the sender ignores unsubscribe requests, that is a sign they may be operating illegally, and you can report them to your email provider.