1. A method, comprising: scanning a first set of messages to generate a plurality of profiles for persons associated with one or more of the messages, the profiles including a first profile comprising a first address and an alternate address; scanning, by a computer, a second set of messages that are classified by a spam filter as spam; determining, by the computer, one or more false positive spam messages from the second set of messages classified as spam using one or more of the plurality of profiles, the determining the false positive spam messages comprising determining that a message of the second set of messages was received from the first address and that a user previously sent a message to the alternate address; and presenting a list to identify the one or more false positive spam messages to the user.