Spam traps and bought email lists

What it means

A spam trap is an email address that no real person uses. It exists only to catch senders who mail people without permission. Blacklist operators and big mailbox providers run them. There are a few kinds:

• Pristine traps: addresses that were never used by anyone and never signed up anywhere. They are hidden on web pages so that address-harvesting robots pick them up. If you email one, your list was scraped or bought.
• Recycled traps: old addresses that were abandoned, bounced for months, then turned into traps. If you email one, you are not cleaning your list.
• Typo traps: addresses on misspelled domains, such as gmial.com. They catch lists without confirmation.

Why it matters

• Hitting a pristine trap can get your IP or domain listed quickly on blacklists such as Spamhaus or SpamCop.
• Mailbox providers lower your reputation silently: more emails go to spam, with no clear error.
• You cannot know which addresses are traps. That is the point: the only protection is good habits.

About bought lists

Lists sold as "10,000 verified business contacts" are a bad deal:

• They almost always contain spam traps and dead addresses.
• The people on them never agreed to hear from you, so they report you as spam.
• In many countries, emailing people without consent breaks the law (for example the GDPR in Europe).
• Most email tools forbid bought lists and close accounts that use them.

How to check

You cannot test an address to see if it is a trap. But you can watch the signs:

• Check your sending IP and domain at /blacklists. A listing on Spamhaus or SpamCop often points to traps.
• Send a test email from the home page (/): the report shows any blacklist hit on your IP or domains.
• In your sending tool, look for high bounce rates, low opens and spam complaints on a specific list or import.

How to fix it

1. Stop using any bought, rented or scraped list, now. Delete it.
2. Find the bad import. If problems started after adding a list, pause sending to it.
3. Keep only people who opted in, ideally with double opt-in (they confirm by clicking a link).
4. Remove hard bounces after every send and remove readers inactive for 6 to 12 months.
5. Protect your forms with a captcha and double opt-in, so bots and typos do not add trap addresses.
6. Request removal from any blacklist only after you fixed the cause. Removing first and sending again will get you listed again, often for longer.

Check that it is fixed

Recheck your IP and domain at /blacklists and send a new Delivmail test. Once you are delisted and only mail people who asked for it, your reputation recovers over a few weeks. In the paid dashboard, Delivmail blacklist removal explains how each list handles removal requests.