What are common pitfalls when scaling community anti-spam?

Context: I'm working on deployment 027 and ran into a decision point.

• What I’ve tried: basic setup + quick benchmarks.
• Constraints: limited time, want something stable.

Question: What are common pitfalls when scaling community anti-spam?

Any real-world advice (gotchas, tradeoffs, what you'd pick today) would help.