---
"@context": https://schema.org
"@type": TechArticle
"@id": https://www.twilio.com/docs/glossary/challenge-response#article
headline: Challenge-response spam filtering
description: "*Internet Security*. A type of spam filter that replies with a challenge to the given sender."
url: https://www.twilio.com/docs/glossary/challenge-response
inLanguage: en
dateModified: 2026-05-06T13:22:30.000Z
author:
  "@type": Organization
  name: Twilio Developer Education Team
publisher:
  "@type": Organization
  name: Twilio
---

# Challenge-response spam filtering

*Internet Security*. A type of [spam filter][spam-filter] that replies with a challenge to the given sender. This spam filter verifies the sending email address.

The challenge sends a [SMTP][] `RCPT TO` command with the given sender's email address. This email address comes from the `return-path` in the [email envelope header][eeh]. The correct response from a sender's email server would be `250 Ok` or `250 2.1.5 OK`. A failed response would be `550 <message>`. The recipient server accepts an email message from a sender that passes this challenge.

This isn't the same as [challenge-response authentication][cra].

To validate the content of an email message body, a system might use a [Naive Bayesian filter][bayesian-filter].

[eeh]: /docs/glossary/spoofing#return-path-abuse-in-the-envelope-from-address

[cra]: https://en.wikipedia.org/wiki/Challenge%E2%80%93response_authentication

[spam-filter]: /docs/glossary/spam-filter

[smtp]: /docs/glossary/smtp

[bayesian-filter]: /docs/glossary/bayesian-filter