On my own mailserver with spamassassin, I had my very first false positive in years just yesterday. It seemed that however the organisation emailing me does it, they're using mail hosts on blocklists.