Spam filtering, scam trends and deliverability, decoded.
A catch-all domain feels like good manners — no bounced prospects, no awkward 'that address looks wrong' errors. In practice it quietly fattens your list with junk, muddies your reputation and makes incident response guesswork. Here's the audit UK teams can run this week, plus filter rules that keep the genuine catch-all users and bin the rest.
The malicious attachment is largely gone. In its place: a tidy PDF invoice with a single link to a 'supplier portal' that exists to harvest credentials and, eventually, redirect payments. Here's how UK finance teams can spot the mismatches, verify bank-detail changes properly and tune filters without burying genuine invoices.
A message can pass SPF, DKIM and DMARC with flying colours and still be a fraud, because that trio only proves a domain is authorised to send — not who typed the name on the front. Here's why display-name spoofing keeps landing in UK inboxes, and the habits that close the gap.
The quietest segment on your UK mailing list is often the one doing the most damage. Spam traps never bounce, never reply and never unsubscribe — they just sit there while your sender reputation slides. Here's how to find them, and what to do when you do.
Lookalike .uk domains are no longer a niche phishing trick — they are a core part of UK invoice fraud and fake login pages. Here is how to spot the pattern, read the registration clues, and write filters that catch doppelgangers without punishing legitimate British senders.
Opted-in does not automatically mean wanted. Between aggressive retargeting, tired consent and newsletters nobody remembers signing up for, grey mail is teaching UK users to swipe first and think later — and that has consequences for deliverability teams.
‘Just click unsubscribe’ is becoming bad advice for suspicious email. In 2026, fake opt-out pages, List-Unsubscribe header tricks and reply-to traps are all designed to turn a routine click into a credential harvest or a confirmed live inbox.
A brand-new UK inbox, 40 sign-ups for samples, discounts and competitions, and three months of watching the junk folder swell. Here is the week-by-week spam timeline — plus the rules I would use before handing over an email address for a freebie.
Parcel smishing has grown up. The 2026 wave borrows real courier branding, freshly registered lookalike domains and clever timing around peak season — and it sails straight past filters trained on old-school spam. Here's the anatomy of the con, plus the rules and reporting routes that actually help UK users.
Most UK small-business newsletters don't land in spam because subscribers dislike them. They land there because the SPF, DKIM and DMARC records don't line up, and the receiving filter never got as far as the content. Here's a practical 2026 audit you can run in an afternoon.