Spam Traps
What spam traps are, why pristine, recycled and typo traps are dangerous and how they get into your list. + A 7-point list-cleaning checklist for cold email.
A spam trap is an email address that mailbox providers and blocklists use to catch spammers and senders with dirty lists. No person reads it, so an email sent there proves the address got into your list without consent or went stale long ago. Hitting a trap lowers your domain's reputation and can get you blocked.
At the end of this article you'll find a 7-point checklist to run before every cold outreach launch on a new list.
At a glance: spam traps in numbers
| Fact | Value | Source |
|---|---|---|
| Types of traps | pristine, recycled, typo | Braze |
| Who runs traps | mailbox providers, blocklists, security organizations | Braze |
| Engagement window when a list is suspected of containing traps | 6 months; 3 months if hits continue | Braze |
| Invalid address threshold for Mail.ru | 5% | Mail.ru |
| Acceptable bounce rate in cold outreach | below 2% | Instantly, 2026 |
How a spam trap works
A trap looks like a normal address and accepts mail without errors. You won't get a bounce and won't know you've hit one.
The trap's owner records the sender's domain and IP. That data feeds mailbox provider filters and blocklists such as Spamhaus. From then on, mail from your domain starts going to spam or getting rejected for all recipients, not just the trap.
A trap's biggest danger is that it's invisible. The problem only shows up through its effects: falling open rates or your domain landing on a blocklist.
What types of spam traps exist
| Type | What it is | How it gets into your list | Risk |
|---|---|---|---|
| Pristine | An address created only to catch spammers. It never belonged to a person | Through bought lists and website scraping | High: can get your domain or IP blocklisted |
| Recycled | A real address abandoned by its owner and repurposed as a trap | From old lists: former employees, closed companies | Medium: builds up with repeated sends |
| Typo | An address on a misspelled domain: gnail.com, yaho.com, .con instead of .com | Typos when addresses are entered by hand | Lower, but harms reputation over time |
Type descriptions are based on Braze. Recycled traps are the trickiest in B2B: an address may have been live when you collected it and turned into a trap after the employee left.
Where spam traps in your list come from
The risk depends on where the list came from.
| List source | Trap risk | Why |
|---|---|---|
| Bought or downloaded list | Very high | Unknown age and origin of addresses, often contains pristine traps |
| Scraped websites and directories | High | Traps are deliberately placed on pages that spammers scan |
| Your own old list (over a year) | Medium | Recycled traps accumulate |
| Fresh list from manual research, validated | Low | Addresses are current and verified |
| Clients and leads who entered their own address | Low, except typos | Typo traps from forms are possible |
More on building a list for outreach in “Cold Email Outreach”.
How to tell you've hit a spam trap
Directly, you can't: trap addresses aren't disclosed. Suspect a trap from indirect signs:
- Your domain or IP appeared on a blocklist right after sending to a new list.
- Domain reputation in Gmail Postmaster Tools or Mail.ru Postmaster dropped without a rise in complaints.
- Open rates fall sharply across the whole list, not just one segment.
- The list has many addresses with no open or reply for a long time.
Holymailer monitors blocklists (in Russian) for every domain in your dashboard. If a domain gets blocklisted, you can replace it in a couple of minutes, but first find and remove the cause in your list.
What to do if your domain hit a trap
- Stop sending to the list after which the problems started.
- Identify the source segment: which part of the list was added most recently or came from an unreliable source.
- Remove inactive addresses and everyone who hasn't opened or replied for more than 6 months.
- Request delisting from the blocklist according to its rules — only after cleaning the list.
- Go back to low volume and warm-up, or move sending to a new domain.
Checklist: cleaning your list before cold outreach
Run all 7 points before launching every new list. If even one fails, the campaign puts your domain's reputation at risk.
- Known source. You know where and when every address came from; no bought lists.
- Validation. The list was checked with a validator no more than a week before launch.
- Domain typos. Addresses on gnail, yandx, mial and similar domains removed, as well as .con and .ru.ru.
- Duplicates. Each address appears in the list once.
- Suppression list. Addresses from the suppression list excluded: unsubscribes, complaints, hard bounces.
- Inactive contacts. Addresses with no engagement for over 6 months removed or moved to a separate segment.
- Test batch. The first 100–200 emails went to a small segment, with bounces below 2%.
Frequently asked questions
What is a spam trap in simple terms?
It's a decoy email address that nobody reads. If you email it, mailbox providers conclude your list was collected dishonestly or isn't kept up to date.
Can I find spam traps in my list?
Not reliably: trap addresses aren't published. Validators catch some suspicious addresses and typos, but the main protection is a clear list source and regular removal of inactive contacts.
Why are spam traps dangerous?
Hitting a trap lowers your domain and IP reputation and can get you blocklisted. After that, your email goes to spam or gets rejected for all recipients.
Will a validator get rid of traps?
Partly. A validator removes non-existent addresses and some typos, but pristine and recycled traps accept mail like normal mailboxes. Only a clean list source filters them out.
How often should I clean inactive addresses from my list?
Before every large campaign, not once a year. Braze recommends limiting sends to addresses active in the last 6 months, or 3 months if trap hits continue.
How is a spam trap different from a non-existent address?
A non-existent address returns a 5.1.1 bounce, and you see the problem right away. A trap accepts the email without an error and quietly records the sender.
Sources
- Braze: Spam Traps — Types, Risks, and How to Avoid Them.
- Mail.ru: general mailing rules (in Russian) — the 5% invalid address threshold.
- Instantly: Cold Email Benchmark Report 2026.
- Holymailer: capabilities, deliverability (in Russian).