1. Service Direction / Introduction / Scope

Anti-spam systems help reduce unwanted emails such as spam, scam, phishing attempts, and malware-based messages. However, no anti-spam solution in the world—including systems used by Google, Microsoft, and all major providers—can guarantee 100% accuracy. This article explains why some spam emails still pass through filters and how clients can enhance their overall email security.

2. Description of Content / Step-by-Step Guide

Below is a clear breakdown of how anti-spam filters work and why they are not perfect.

How Anti-Spam Filters Work

• Reputation Checking – Evaluates sender IP/domains against global databases.
• SPF/DKIM/DMARC Verification – Ensures email authenticity.
• Content & Header Analysis – Scans messages for suspicious structures.
• URL & Attachment Scanning – Detects malware or phishing links.
• Machine Learning & Heuristics – Learns spam patterns continuously.

Why 100% Blocking Is Impossible

• Spammers update techniques constantly, faster than global security databases can react.
• Zero-day attacks exploit new vulnerabilities unknown to filters.
• AI-generated emails make malicious messages look extremely legitimate.
• Compromised real accounts make detection difficult because sender is trusted.
• Over-filtering risks blocking legitimate business emails, affecting communication.

3. Security

iCoreHosting uses multiple layers of protection such as RBL checks, IP reputation monitoring, content scanning, and SPF/DKIM/DMARC enforcement. These steps significantly reduce risk, but due to evolving global threats, no system can guarantee absolute blocking.

4. Common Mistakes

• Assuming anti-spam filters replace the need for user awareness.
• Clicking unknown links or attachments without checking authenticity.
• Not enabling SPF/DKIM/DMARC for their domain.
• Using weak or repeated passwords for email accounts.
• Ignoring unusual login notifications or suspicious activity.

5. Responsibility Breakdown

iCoreHosting Responsibilities

• Provide industry-standard multi-layer spam filtering.
• Maintain good outgoing server reputation.
• Monitor global RBL blocklists.
• Apply continuous updates to filtering engines.

Client Responsibilities

• Maintain strong passwords and enable MFA (if available).
• Train staff to identify phishing or suspicious emails.
• Enable SPF, DKIM, and DMARC for their domain.
• Report false positives or false negatives for tuning.
• Ensure devices and antivirus software are up to date.

6. Limitations

• Spam filters cannot block new threats instantly.
• AI-generated scam emails look extremely real.
• False positives/negatives can occur due to content similarity.
• Compromised legitimate senders are harder to identify.

7. Support Information

If you notice unusual emails or suspicious patterns, contact us immediately:

• Support Portal: https://www.icore.com.my/support
• Billing Portal: https://billing.icore.com.my

8. FAQ

Q1: Why do scam emails still reach my inbox?
Because spammers constantly change methods, and global systems need time to update signatures.

Q2: Can iCoreHosting block 100% of spam?
No provider in the world can guarantee 100% elimination of spam due to evolving techniques.

Q3: What should I do when receiving a suspicious email?
Do not click any link or attachment. Verify with the sender or contact us for assistance.

Q4: Can filtering be made stricter?
Yes — but it may block legitimate business emails.

9. Summary

Anti-spam systems greatly reduce unwanted messages, but no technology can guarantee 100% accuracy due to zero-day attacks, AI-generated content, compromised legitimate accounts, and rapidly evolving scam techniques. A combination of technical protection and user awareness provides the strongest defense.

10. Use Case

• A client receives a fake invoice email. Staff training prevented payment loss.
• A phishing email passed through. After reporting, filters learned and blocked future attempts.
• A domain without SPF/DKIM got spoofed. After enabling, spoofing stopped entirely.