Spam Confidence Level (SCL): The Spam Score That Decides Inbox or Spam

Master the art of email deliverability with Microsoft's SCL! This key score helps keep your emails in inboxes, not spam.

Othman Katim
Email Marketing Expert
Nov 2025
X
Some spam issues ?
Mailwarm keeps your emails away from spam.
See More

What Spam Confidence Level (SCL) Means

Spam Confidence Level, or SCL, is Microsoft’s proprietary spam score assigned to every email message. This critical metric determines whether your email lands in the Inbox, Junk folder, or is quarantined. The score reflects the degree of suspicion Microsoft 365 and Exchange Online associate with each message.

The SCL scale ranges from -1 to 9, where lower numbers indicate greater trust and higher numbers signal increased risk. While organizational policies can influence an email’s ultimate placement, the SCL score remains the foundational signal in Microsoft’s filtering decisions.

Understanding the specifics of the Spam Confidence Level (SCL) enables more efficient diagnosis of email deliverability issues. Better comprehension of this scale can also provide insights on which mitigation strategies are most likely to improve deliverability outcomes.

How Microsoft Calculates SCL Today

To assign an SCL, Microsoft evaluates a multitude of factors. The system incorporates technical authentication results, sender reputation metrics, content analysis, and aggregated user feedback across its entire ecosystem. The overarching objective is clear: to safeguard users by filtering unwanted mail from the Inbox.

Signals That Feed the Score

  • Authentication results: SPF, DKIM, and DMARC status are heavily weighted.
  • Reputation: Domain and IP legacy, age, and prior complaints influence the trust level.
  • Sending patterns: Uncharacteristic surges in volume or erratic timing can raise suspicion.
  • URL and file risk: Usage of URL shorteners, unfamiliar domains, or attachments can negatively impact the score.
  • Recipient feedback: Actions like spam reports or “not junk” clicks directly inform future filtering.
  • Infrastructure hygiene: Proper rDNS, consistent HELO replies, TLS policies, and correct MX configuration are all essential.

Overriding Policies and Safe-lists

Administrators can set allow rules, designate approved senders, or use trusted connectors that assign SCL = -1. This value instructs Microsoft to bypass spam filtering for those messages. Exercise caution with such overrides, as they circumvent standard protections and might conceal genuine deliverability problems.

SCL Ranges and Likely Outcomes

  • -1: Delivery bypass due to allow listing, internal trust, or safe sender configuration.
  • 0–1: Considered not spam; these are typically routed to the Inbox in most organizations.
  • 2–4: Low suspicion; usually delivered to Inbox, sometimes accompanied by a safety warning.
  • 5–6: Classified as spam; default action is Junk folder placement.
  • 7–9: High confidence spam; these messages are sent to Junk or Quarantine, depending on tenant policy.

Administrators retain the ability to configure stricter handling for higher SCL scores. Some organizations enforce quarantine as a default for top scores. Always verify your current policy settings prior to implementing changes.

Why Your SCL Climbs

The SCL rises when technical misalignment or risky sending behaviors are detected. Patterns are often identifiable upon examination of message headers and email history.

  • SPF or DKIM failures, or DMARC failing to align with the sending domain.
  • New domains or IPs without an established reputation send large volumes too quickly.
  • Sudden increases in sending volume without a proper warm-up or consistent schedule.
  • Reverse DNS or HELO identifiers that do not correspond with the actual sending server.
  • Embedded links directed to newly registered or flagged domains.
  • Forwarding practices that rewrite headers and break alignment.
  • Messages impacting spam traps or outdated addresses resulting from mailing list drift.

Lowering SCL: Technical Setup

Start by enhancing authentication and email infrastructure. These technical adjustments provide the most direct impact on positively influencing your SCL score.

  1. SPF: Publish a precise SPF record for every sending service. Refer to guidance on SPF strategies for Google, Microsoft, and multi-domain setups.
  2. DKIM: Sign messages with 2048-bit keys, adopt custom selectors for each platform, and institute regular key rotation.
  3. DMARC: Ensure the Header From aligns with your SPF or DKIM policy. Begin at p=none, then progress to quarantine or reject in response to your findings.
  4. rDNS and HELO: Confirm that PTR matches your sending hostname, and the SMTP greeting transparently identifies the host.
  5. MX and routing: Maintain accurate and uncluttered MX records; prevent unnecessary looping or header modifications.
  6. TLS and MTA‑STS: Use valid TLS certificates and consider implementing MTA‑STS for consistent secure transmission.
  7. Dedicated subdomains: Separate marketing or automated traffic from core business emails by using distinct subdomains.

Prioritize these infrastructure elements before making changes to email content. Without proper alignment and a good reputation, content tweaks alone seldom lower your SCL.

Lowering SCL: Warm Up and Sending Rhythm

A warm up process is recognized by Microsoft’s systems as indicative of a real person sending emails, thus building trust and improving the sender’s reputation. Establishing consistent sending patterns and positive engagement history contributes to progressive SCL improvement.

With Mailwarm, emails are engaged by active inboxes within a managed network: messages are opened, replied to, retrieved from spam, and classified as primary when appropriate. This generates large-scale positive signals and conditions Microsoft’s filters to accept your typical sending profile.

  • Incrementally increase volume. Only scale up after several days of clean sending at each step.
  • Foster genuine two-way communication. Ongoing conversations build sender credibility.
  • Maintain a steady daily cadence; avoid inactivity followed by sudden surges.
  • Immediately address hard bounces; resolve underlying issues prior to resuming warm up.
  • Implement warming for each newly introduced domain, IP, or platform.

Warm up campaigns are not marketing endeavors, but rather technical measures designed to create favorable activity, reinforce sender reputation, and support a lower SCL.

How to Read Your SCL in Headers

The Spam Confidence Level of any test message can be confirmed by reviewing its email header, which presents both the assigned score and the key checks performed.

  1. Send a test email to a Microsoft 365 or Outlook.com mailbox that you control.
  2. Open the message and access the complete internet headers.
  3. Locate the X‑Forefront‑Antispam‑Report section and identify SCL= followed by the relevant score (e.g., SCL=1 or SCL=-1).
  4. Review the Authentication‑Results line for spf=pass, dkim=pass, and dmarc=pass outcomes.
  5. Evaluate the tenant policy; message tracing in Microsoft 365 Defender reveals the definitive spam verdict.

Test repeatedly after each adjustment, monitoring score trends over time, not just individual results.

Reducing a High Spam Confidence Level: A Short Checklist

  • Validate SPF, DKIM, and DMARC alignment on active emails, not just DNS records.
  • Replace risky or shortened URLs with trusted, established domains.
  • Audit rDNS and HELO settings across all sending IPs and relays.
  • Segment different traffic types; keep transactional and outreach messages distinct.
  • Re-initiate warming after major changes to domains, IPs, or content generation platforms.
  • Examine key blocklists and address the root causes before pursuing delisting.
  • Reduce mailings to unresponsive or obsolete addresses; consistently cleanse your list sources.

SCL is a score, not a sentence. Change the inputs, and you change the outcome.

Practical Testing Cadence

Adopt a straightforward weekly testing routine, focused on message headers and routing outcomes.

  • Send a standardized test set to Microsoft 365 mailboxes and seed addresses.
  • Capture SCL results, authentication status, and actual folder placement.
  • Document all recent changes, including DNS modifications, variations in sending volume, or introduction of new URLs.
  • Plan your next incremental adjustment, record the effect, and measure the outcome.

Consistent, careful changes are most effective in optimizing both your SCL and sender reputation.

Need a hand with SCL?

If you would like expert analysis of your message headers, DNS settings, or warm up strategy, we can assist. Initiate a consultation with deliverability specialists at mailadept. Share your latest headers and receive a clear, actionable plan for safely lowering your SCL.

FAQ

What is considered a good SCL score for email deliverability?

A good SCL score is typically between -1 and 1, indicating emails that are deemed safe and are usually directed to the Inbox. It’s not just about low numbers; organizations should be wary of arbitrary overrides without understanding underlying email infrastructure issues.

How does Microsoft assess the risk level of an email?

Microsoft considers multiple factors, including sender reputation, user feedback, and technical authentication results. Ignoring any of these can lead to false positives or negatives, affecting where your email eventually lands.

Why might an email's SCL rise unexpectedly?

An unexpected increase in SCL often signals issues like misconfigured DNS settings, suspicious sender patterns, or poor recipient engagement. Overlooking these can lead to emails being misclassified and quarantined or junked.

Can administrator overrides alter the SCL's impact?

While administrators can set overrides to bypass filters, this is a double-edged sword. Such actions can mask underlying problems leading to deliverability issues that, if left unaddressed, can harm sender reputation.

Is changing email content enough to lower a high SCL?

No, tweaking content alone barely makes a dent in the SCL. Prioritizing authentication, ensuring domain alignment, and building engagement are crucial steps to genuinely influence scores.

How can you determine your email's SCL?

Review email headers for the SCL value and authentication results by sending test emails to Microsoft mailboxes. Misreading these can lead to inaccurate diagnosis and inappropriate corrections.

What risks are associated with not warming up new domains?

Skipping domain warm-up can result in instant flagging by spam filters due to lack of history. This not only increases the SCL but also sets a poor pace for building reputation.

How important is it to maintain consistent sending patterns?

Consistency in sending not only aids in lowering SCL but also keeps sender reputation intact. Erratic patterns can result in suspicion and potential spam classification.

What are the consequences of having a high SCL score?

A high SCL can lead to emails being sent to spam or quarantined, hampering communication and affecting business operations. It's essential to tackle this by solidifying your technical setup and sender practices.