Information associated with a plurality of electronic communications between a first entity and a second entity is obtained. First and second determinations are performed that the number of communications in the plurality of electronic communications exceeds a first threshold, and that the plurality of electronic communications were exchanged during a period of time that exceeds a second threshold. A classification is performed on a received electronic communication based at least in part on the first determination and the second determination, the electronic communication is assigned one of three different classifications: good, bad, and undetermined. At least one action is performed based at least in part on the performed classification.