Loren, are you using the KAM ruleset? See mcgrail.com under projects and you can add the channel. Happy to look at spamples too for something like that but I haven't seen a fake paypal in a while likely because of the rules.
Would be worth looking at how it got through. Perhaps badly trained Bayesian learning, for example? Regards, KAM Regards, KAM -- Kevin A. McGrail Member, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project https://www.linkedin.com/in/kmcgrail - 703.798.0171 On Fri, Mar 19, 2021 at 7:11 PM Loren Wilton <lwil...@earthlink.net> wrote: > I just got this little wonder, and was surprised that it got thru as ham. > > From: "PayPal Billing" <douglescostamiche...@gmail.com> > > I've fixed that locally, but I'd think SA ought to have a rule for > "PayPal" > that doesn't come from paypal. > > >