# Invisible characters, real phishing: Microsoft finds ASCII smuggling used to slip past email filters

> Microsoft found phishing emails hiding invisible Unicode in words like "funding" to dodge filters, peaking at 2.37M a day. What ASCII smuggling is.

Canonical: https://www.phishclean.com/blog/invisible-unicode-phishing-ascii-smuggling
Last updated: 2026-09-25

September 25, 2026 - 6 min read

By [Chidambaram](https://www.phishclean.com/author/chidambaram), founder of PhishClean

An email says "funding" and you read "funding". The spam filter reads "funding" with invisible characters between the letters, so its keyword match fails. Microsoft has now seen this trick, first described in AI security research, used in a large phishing campaign.

Microsoft Defender for Office 365 researchers described the campaign in early September 2026. The attackers put invisible Unicode "tag" characters inside financial lure words. Microsoft's summary: "The words still looked normal to recipients, but the altered underlying text could defeat exact keyword matches."

## What ASCII smuggling is

Unicode has a block of "tag" characters that most fonts don't display at all. Security researchers first used them to hide instructions inside text given to AI models, since the model reads the hidden text but a human reviewer can't see it. Attackers have now pointed the same idea at email filters. Any system that looks for exact strings such as "funding", "loan approved" or "invoice" sees a different sequence of characters from the one the reader sees.

## How big the campaign was

- Volume jumped on 9 February, from about 21,000 matching messages the day before to more than 1.3 million.
- It peaked at **2.37 million messages** on some weekdays, ran for about three months, and dropped sharply after 15 May.
- Microsoft linked it to a small-business-loan-themed campaign that Fortra documented in 2025, sent through ActiveCampaign infrastructure.
- The links led to sites collecting business and financial details: revenue, loan amounts, credit scores and contact information.

Microsoft said more than 99% of the messages were still caught by other Defender protections, such as reputation checks, sender authentication and machine-learning models. The invisible characters beat one layer, not the whole stack. Its advice to defenders is to normalise invisible Unicode before applying content signatures, and to test how their filters handle tag characters.

Each layer of defence has blind spots. A trick that fools a keyword filter won't fool a check that looks at where the link actually leads and what the page asks you to type.

## What this means for you

The lesson isn't about Unicode. Any single check can be engineered around. Email filters look at text, and attackers change the text. So the last decision rests with the page you land on and what it asks you for. A "funding application" that wants your revenue, credit score and bank details on a domain you have never heard of is suspicious however clean the email looked.

- Be most careful with unsolicited offers of money: grants, loans, refunds, "approved funding".
- Hover over links before you click, and read the real destination domain.
- Don't enter financial details on a page you reached from an email. Go to the lender or agency by typing its address.

## What we look at instead

PhishClean doesn't read your email. It looks at links and pages in your browser, which is the layer this campaign didn't touch. Hover over a link and it tells you where the link really goes. Open the page and it checks for lookalike domains, forms that send data to a different site, and other signs of a harvesting page. All of it runs locally.

## Sources

- [Security Boulevard: Microsoft finds ASCII smuggling repurposed for phishing campaign](https://securityboulevard.com/2026/09/microsoft-finds-ascii-smuggling-repurposed-for-phishing-campaign/)

[Spot a phishing email that looks legitChecks that still work.](https://www.phishclean.com/blog/how-to-spot-phishing-email-that-looks-legit) [Phishing email checkerPaste an email, see the red flags.](https://www.phishclean.com/tools/phishing-email-checker) [Link safety on hoverSee the real destination first.](https://www.phishclean.com/features/link-safety-tooltips) [Why phishing pages look realAnd what still gives them away.](https://www.phishclean.com/blog/why-phishing-pages-look-real)

## The page is where the attack has to show itself

PhishClean checks every link and page locally, the layer that invisible-character tricks don't touch.

[Install PhishClean free](https://www.phishclean.com/#install)

Last updated: 25 September 2026