Email verification and list hygiene

Email verification is the firewall between your sender reputation and disaster. Every invalid email you send generates a bounce. Too many bounces in a short period and email service providers flag your domain as a spammer. Once that happens, even your messages to valid, interested prospects start landing in spam. The fix is slow, painful, and entirely preventable.

This chapter covers everything you need to know about verification: what it is, how it works, which tools to use, and the routine that keeps your lists clean over time.

Why verification is non-negotiable

Here's the math. Most email service providers start flagging accounts when bounce rates exceed 5%. Some tighten that threshold to 3% for newer domains. If you send 200 emails from a freshly warmed domain and 15 of them bounce, that's a 7.5% bounce rate. Your domain reputation just took a hit. Do that twice more and you're in serious trouble.

Verification isn't optional. It isn't something you do "when you have time." It's a mandatory step between list building and sending. Every contact, every time. No exceptions.

Understanding bounce types

Not all bounces are created equal. Understanding the difference between bounce types helps you diagnose list quality issues and respond appropriately.

Hard bounces

A hard bounce means the email address is permanently undeliverable. The mailbox doesn't exist, the domain isn't active, or the address has a syntax error. Hard bounces are the most damaging to your sender reputation because they signal to providers that you're sending to invalid addresses, which is a hallmark of spammers.

Common causes: the contact left the company and their email was deactivated, a typo in the email address, the company changed its email format, or the domain expired.

Soft bounces

A soft bounce means the email address exists but the message couldn't be delivered right now. The mailbox might be full, the server might be temporarily down, or the message was too large. Soft bounces are less damaging individually, but repeated soft bounces to the same address eventually count against you.

Most outreach platforms handle soft bounces automatically by retrying delivery. If an address soft-bounces three or more times across different campaigns, treat it as a hard bounce and remove it from your list.

Spam bounces

These occur when the recipient's server rejects your email based on content, sender reputation, or security policies. This isn't a list quality issue but a deliverability issue. If you're seeing spam bounces, revisit Module 2 on deliverability to diagnose the root cause.

How email verification works

Email verification tools check whether an address is likely to be deliverable without actually sending an email. Here's what happens behind the scenes:

• Syntax check. Is the email formatted correctly? Does it follow standard conventions? This catches obvious typos like "john@companycom" (missing the dot).
• Domain verification. Does the domain exist? Are MX records configured? Is the mail server responding? This eliminates addresses at dead or parked domains.
• Mailbox verification. The tool pings the mail server and asks "does this mailbox exist?" without sending an actual email. This is the most important check and catches the majority of invalid addresses.
• Disposable email detection. Identifies temporary email addresses from services like Mailinator or Guerrilla Mail. These are useless for B2B outreach.
• Role-based detection. Identifies generic addresses like info@, sales@, or support@. These aren't tied to a specific person and typically have lower response rates.

The catch-all domain problem

Catch-all (or "accept-all") domains are configured to accept email to any address at that domain, regardless of whether the specific mailbox exists. If a company's domain is catch-all, a verification tool can't determine whether [email protected] is real or whether [email protected] would also be accepted. Both would show as "valid."

This is a significant challenge because approximately 20-30% of business domains are configured as catch-all. Your verification results will show these as "accept-all" or "risky" rather than "valid" or "invalid."

How to handle catch-all domains:

• Don't discard them entirely. Catch-all contacts can still be valid. Throwing them all out means losing up to 30% of your list.
• Cross-reference with other sources. If the email came from a reliable data platform and the person clearly works at the company (verified via LinkedIn), it's probably fine.
• Send to catch-all addresses at a slower rate. Don't batch 500 catch-all emails in one day. Spread them out so that if some bounce, the volume doesn't spike your bounce rate.
• Monitor bounce rates by domain type. Track your bounce rate for catch-all addresses separately. If it exceeds 5%, tighten your criteria for including them.

Verification tools compared

There are dozens of email verification tools on the market. They vary in accuracy, speed, pricing, and additional features. Here's what to look for when choosing one:

• Accuracy rate. The best tools achieve 97-99% accuracy on non-catch-all domains. Ask for this number and test it yourself with a sample of 100 known-good and known-bad addresses.
• Catch-all handling. How does the tool handle catch-all domains? Does it simply label them "risky," or does it offer deeper analysis?
• Speed. If you're verifying thousands of contacts, processing time matters. Most tools verify 1,000-10,000 emails per hour for bulk uploads.
• API availability. If you want real-time verification as contacts enter your system, you need an API. Check rate limits and response times.
• Integration. Does it connect to your outreach platform or CRM? Native integrations save time and reduce manual data handling.

Well-known options include ZeroBounce, NeverBounce, Bouncer, MillionVerifier, and Reoon. Pricing typically ranges from $3-$10 per 1,000 verifications. At those prices, there's no rational reason not to verify every contact.

Your list cleaning routine

Verification isn't a one-time task. Email addresses decay. People change jobs, companies get acquired, and servers get reconfigured. Here's the routine that keeps your lists healthy:

• Before every campaign: Verify all contacts that haven't been checked in the last 30 days. This is the absolute minimum.
• After every campaign: Remove hard bounces immediately. Flag soft bounces for monitoring. Update your suppression list with opt-outs.
• Monthly: Re-verify your entire active database. Contacts older than 90 days that haven't been re-verified should be quarantined until checked.
• Quarterly: Audit your list sources. Which sources produce the most bounces? Adjust your sourcing strategy based on data quality patterns.

Setting your acceptable bounce rate

Your target bounce rate for cold outreach should be under 2%. Here's how to think about it by campaign stage:

• New domains (first 30 days): Target under 1%. Your reputation is fragile and providers are watching closely.
• Established domains: Target under 2%. This gives you a safety margin while allowing for natural data decay.
• Red alert: Anything above 3% requires immediate action. Stop sending, identify the source of bad data, clean your list, and only resume once the problem is fixed.

Monitor bounce rates per campaign, per sending domain, and per data source. This granularity lets you quickly identify and isolate problems before they spread to your entire operation.

Email verification is unsexy work. Nobody brags about their clean list at conferences. But it's the difference between outreach teams that scale smoothly and those that constantly battle deliverability fires. Invest in verification, build the routine, and protect your sender reputation like the asset it is.