This study aims to investigate how language functions as a tool of deception within spam emails. The research involves a detailed analysis of the linguistic content found in 20 spam messages, focusing on the identification and examination of the linguistic features utilized. Particular attention is given to lexical, grammatical, and orthographic elements that spammers employ in crafting deceptive messages. The analysis is grounded in Halliday’s Systemic Functional Linguistics (SFL) theory, particularly through the lens of the tristratal model, which guides the examination of various linguistic levels. Furthermore, the study explores how these linguistic choices contribute to manipulation and deceit. The findings reveal that spammers make deliberate and strategic linguistic choices designed to influence recipients' perceptions and prompt compliance. The analysis also underscores the importance of the linguistic options selected over other possible alternatives. Ultimately, the study concludes that these language strategies are intentionally designed to fulfill the spammers’ goal—exploiting internet users, thereby contributing to the broader issue of cybercrime.