Maybe not even going to fully ML/AI but definitely some NLP to understand the intent behind the spam. It's sort of like the approach taken with https://spampatrol.io for forms. Probably can use it for email too.
regex is too specific, LLMs seem like they could help us make more general types if we can avoid hallucinations, maybe we could teach one to generate spam in order to teach another how to recognize it