What are machine learning spam filters?

Still have a question, spotted an error, or have a better explanation or a source we should cite?

Before machine learning, spam filters worked off rules. Certain words in the subject line, certain link patterns, certain ratios of image to text. Each triggered a score, and if the total was high enough, the message went to spam. Simple to understand. Also simple to game.

ML filters changed the paradigm. Instead of following hardcoded rules, they learn from data. The filter ingests millions of examples of spam and legitimate email, finds the patterns that distinguish them, and builds a model. When a new message arrives, the model scores it against everything it's learned. No single trigger kills your email; it's the combination of signals that matters.

What ML filters are actually looking at: content patterns (not just words, but phrasing, context, and structure), sending behavior (volume, timing, domain age), authentication results (SPF, DKIM, DMARC), and importantly, recipient engagement history.

That last point matters more than most senders realize. A legitimate email with a clean HTML template and proper authentication can still land in spam if the recipients keep deleting it unread. ML filters learn from behavior, not just content. The model updates based on how real users interact with messages like yours.

The practical takeaway: rules you can hack around, but engagement signals you can't fake. The most effective way to perform well under ML filtering is to send mail that people actually want.

Contributors

Who worked on this answer

Every name links to their profile. Every company links to their site. Real people, real accountability.

Ask an AI · tailored to your setup

Learn how ML filters adapt to your sending behavior.

I want to understand how ML spam filters might be affecting my emails. My situation: [describe your email type, list quality, authentication status, and any deliverability issues you're seeing]. Based on what I know about ML filtering, what should I audit first, content signals, authentication, or engagement metrics? Walk me through a diagnosis.

Edit the yellow boxes, then send to the AI of your choice.