Spammers Adopt ASCII Smuggling to Evade Email Text Filters
Spammers are increasingly adopting ASCII smuggling—a technique using invisible Unicode characters previously popularized in AI prompt injection attacks—to bypass traditional spam and text filters. By embedding zero-width or formatting characters into messages, attackers break up keywords that security scanners look for. This trend demonstrates how exploit techniques developed for AI systems are quickly migrating to broad cybercrime campaigns like email phishing and spam. It exposes vulnerabilities in legacy security filters that rely solely on visible text analysis, requiring organizations to sanitize incoming text streams. The technique leverages invisible Unicode code points, such as tag characters or zero-width spaces, which are parsed by underlying algorithms but rendered invisible to human readers. As a result, security tools see modified strings that evade exact keyword detection rules, while humans see normal, legible text.
## BACKGROUND
ASCII smuggling first drew security research attention as an AI prompt injection vector, where hidden characters were used to silently feed malicious instructions into Large Language Models without alerting users. Unicode contains numerous special non-printing characters designed for formatting, language direction, or legacy metadata, which attackers exploit as invisible payload carriers.