Spammers Evade AI Filters with ASCII Smuggling Surge

ASCII smuggling is a technique used by spammers to evade AI-powered email filters. By inserting invisible Unicode tag characters, spammers can bypass filters and deliver unwanted messages to users' inboxes. Microsoft researchers have observed a surge in ASCII smuggling signatures detected by Microsoft Defender for Office since the start of this year.

According to Microsoft's findings, on one day in February 2026, the number of ASCII smuggling signatures spiked from roughly 21,000 per day to more than 1.3 million. This figure further rose to 2.5 million in the next four days before falling off sharply in mid-May.

ASCII smuggling works by converting malicious prompts into Unicode tags that are only readable by computers and almost completely invisible to humans. Spammers use this technique to feed malicious instructions to large language models powering AI agents without raising users' suspicions. The same property that makes these characters useful for smuggling instructions also makes them useful for obfuscating keywords before a detector evaluates them.

Microsoft has provided tips for developers to re-programme email filters in response to ASCII smuggling, highlighting the ongoing cybersecurity challenge of spam detection and filtering even in the modern AI era.