What email filtering does and why it matters

Email filtering is a system that sorts incoming messages before they reach your inbox, catching spam and phishing attempts before you see them. Most email providers — Gmail, Outlook, Yahoo Mail — run filters automatically on every message you receive. The filter checks things like the sender's reputation, whether the message matches known phishing patterns, and whether it contains malware signatures.

Filtering matters because spam and phishing aren't just annoying — they're how attackers get you to click a link, read a file, or hand over a password. A message that looks like it's from your bank but isn't can empty your account if you respond to it. A filter that catches it before you see it removes that risk entirely. Even if a filter isn't perfect, it reduces the number of dangerous messages you have to evaluate yourself.

Key Takeaways

  • Email providers filter messages automatically using sender reputation, content patterns, and known malware signatures to catch spam and phishing before they reach your inbox.
  • Gmail, Outlook, and Yahoo Mail all have built-in filters that work without you doing anything, though you can adjust settings to be stricter or looser.
  • Phishing messages often look legitimate but ask you to click a link or read a file — filters catch many of these by comparing them to known attack patterns.
  • You can create custom rules to filter messages from specific senders, move certain types of mail to folders, or flag messages that contain specific words.
  • No filter catches everything, so learning to spot phishing yourself — checking sender addresses, looking for urgent language, and hovering over links — is still necessary.

How the major email providers filter spam and phishing

Gmail uses machine learning to scan billions of messages and identify patterns that match spam or phishing. It checks whether the sender's domain is legitimate, whether the message contains links to known malicious sites, and whether the content matches templates of common attacks. Gmail also looks at whether you've corresponded with the sender before — a message from someone you've never emailed is more likely to be filtered than one from a known contact. Gmail automatically sorts suspected spam into a Spam folder, and suspected phishing into a separate Phishing and Malware folder.

Outlook (Microsoft's email service) uses similar methods but also integrates with Windows Defender, which scans attachments for known malware. Outlook flags messages it thinks are phishing and shows a warning banner at the top of the message before you can interact with it. Yahoo Mail uses a combination of sender authentication checks and content analysis to filter messages.

All three providers let you report messages as spam or phishing, and those reports feed back into the system — if thousands of people report the same sender, the filter learns to block similar messages. This means the filters improve over time as more people use them.

What happens when a message gets filtered

When a filter catches a message, it doesn't delete it — it moves it to a folder you can still access. In Gmail, spam goes to the Spam folder and phishing goes to a separate folder. In Outlook, suspected phishing messages appear in your inbox but with a warning banner. You can always review filtered messages later if you're worried you missed something important.

The risk is that legitimate messages sometimes get filtered by mistake — a message from a real business might look like phishing to the filter if it contains certain patterns or comes from a new sender. This is called a false positive. If you're expecting a message and don't see it, check your Spam and Phishing folders. If you find a legitimate message there, you can mark it as "Not Spam" and the filter learns to treat that sender differently in the future.

Creating custom filters for your own email rules

Beyond the automatic filtering, you can create rules that sort your own mail. In Gmail, go to Settings and choose Filters and Blocked Addresses. You can create a filter that says "if a message comes from this sender, move it to this folder" or "if a message contains this word, mark it as spam." Outlook has a similar feature called Rules, found in Settings under Mail. Yahoo Mail calls it Filters.

Custom filters are useful for organizing mail you want to keep but separate from your main inbox — newsletters, notifications from websites, messages from a specific project. They're also useful for blocking senders you don't want to hear from. If someone keeps emailing you and you've asked them to stop, you can create a filter that automatically deletes or archives their messages.

Be careful not to create a filter so strict that you miss important messages. A filter that blocks all messages containing the word "invoice" might catch spam, but it could also block a real invoice from your accountant. Test filters on a small group of messages first, or use a folder instead of deletion so you can review what got caught.

Why filters aren't perfect and what you still need to do

No filter catches everything. Attackers constantly create new phishing messages that don't match known patterns, and they spoof legitimate senders by forging the "From" address. A message that looks like it's from your bank might actually be from someone else. Filters are good at catching bulk spam and common attacks, but a targeted phishing message designed specifically for you might slip through.

This is why you still need to check messages yourself. Before you click a link or read a file, look at the sender's actual email address — not just the name that appears. Hover your mouse over links (don't click) to see where they actually go. If a message creates urgency ("Your account will be closed in 24 hours") or asks you to confirm a password, it's almost certainly phishing. Real companies don't ask for passwords in email.

If you're unsure about a message, contact the company directly using a phone number or website you know is real, not one from the email. If your bank says your account is locked, call the number on your bank card, not the number in the email.

Adjusting filter settings to be stricter or looser

Most email providers let you change how aggressive the filter is. In Gmail, you can't adjust the main spam filter directly, but you can mark messages as spam or not spam to train it. You can also use the "Block" option on a sender to automatically send all their messages to spam. In Outlook, go to Settings and choose Junk Email to choose between Standard, Safe Senders Only, or Exclusive filtering levels. Safe Senders Only is stricter and only lets through messages from people on your contacts list.

If you're getting too much spam, you can make the filter stricter. If you're missing legitimate messages, you can loosen it. Keep in mind that stricter filters mean more legitimate messages might get caught, so you'll need to check your spam folder more often. Looser filters mean more spam reaches your inbox, but you're less likely to miss something important.

You can also add senders to a safe list or contacts list to make sure their messages always reach your inbox. In Gmail, this happens automatically when you email someone — future messages from them are less likely to be filtered. In Outlook, you can add senders to your Safe Senders list in the Junk Email settings.

Filtering on your phone and other devices

Email filtering works the same way on your phone as it does on a computer — the filtering happens on the email provider's servers before the message is downloaded to your device. Whether you check Gmail on your phone, computer, or tablet, the same filters explore. If a message is in your spam folder on Gmail's website, it will also be in the spam folder in the Gmail app on your phone.

Some email apps on phones have additional filtering options. The Gmail app lets you swipe left to archive or delete messages, and you can create labels (Gmail's version of folders) to organize mail. Outlook's mobile app has similar features. If you use a third-party email app like Spark or Thunderbird, check the app's settings for filtering options — they may differ from the built-in features of Gmail or Outlook.

Frequently Asked Questions

Why did a message from someone I know end up in my spam folder?

Legitimate messages get filtered by mistake when they match spam patterns — for example, if they contain many links, come from a new sender, or use urgent language. Check your spam folder regularly for important messages. When you find one, mark it as "Not Spam" so the filter learns to treat that sender differently. If it keeps happening, ask the sender to check their email settings — their account might be compromised and sending messages that look like spam.

Can I filter messages by subject line or content?

Yes. In Gmail, create a filter in Settings and specify words or phrases the message must contain. In Outlook, use Rules to filter by subject line, message body, or sender. You can then move those messages to a folder, delete them, or flag them. Be specific with your keywords — a filter for "invoice" might catch both spam and real invoices from your business.

What's the difference between spam and phishing?

Spam is unsolicited bulk mail — advertisements, newsletters you didn't sign up for, or messages from people trying to sell you something. Phishing is a targeted attack designed to trick you into revealing information or downloading malware. A phishing message pretends to be from your bank or a website you use, while spam is usually obviously promotional. Filters treat them differently because phishing is more dangerous.

If I block someone, can they still email me?

When you block a sender, their messages go directly to spam or a blocked folder — you won't see them in your inbox. They can still send messages, but you won't be notified. The sender doesn't know they've been blocked. You can unblock someone later if you change your mind by going to your blocked senders list in settings.

Do I need to use a separate spam filter if my email provider already filters?

No. The built-in filters from Gmail, Outlook, and Yahoo Mail are effective for most people. A separate spam filter app or service adds another layer, but it also means more configuration and potential for legitimate messages to get caught twice. Start with the built-in filter and only add a separate tool if you're still getting too much spam after adjusting your settings.