---
title: "Phishing & spam filtering"
description: "Mail the sending domain itself disowns lands in Spam rather than the inbox."
url: "https://openemail.uk/docs/knowledge/safety/spam-filter"
area: "Knowledge base"
category: "Safety & authenticity"
status: "live"
---

# Phishing & spam filtering

Mail the sending domain itself disowns lands in Spam rather than the inbox.

## Details

- A DMARC failure is acted on only where the domain publishes an enforcing policy, and p=none is the owner saying “do not change how you treat this”, and is left alone.
- An upstream spam verdict is honoured: X-Spam-Status, X-Spam-Flag, or a score of five or more.
- SPF alone is deliberately not enough. Forwarded mail fails SPF legitimately, and filing every forwarded message as spam would be worse than the spam it caught.