We have Spamassasin enabled for all the accounts hosted in our servers. It moves all messages that it perceives as spam into a junk folder that you can check in your web-mail or external mail client provided imap is being used.