emailrules.today
In forceHygieneIn force 15 Feb 2022

A spam-trap hit is a collection or hygiene failure

What is the difference between pristine and recycled spam traps, and what happens if I hit one?

Global

In one sentence

Hitting a means your list source or hygiene failed — not bad luck.

Plain English

are addresses anti-spam operators watch. Some were never real people; some were abandoned inboxes reborn as traps. You hit them by buying lists, scraping, or mailing the dead for years. Fix how you collect and clean addresses; begging for delisting without that fix fails.

Why it matters. Trap hits burn domain and IP reputation. Campaigns that “used to work” stop landing. The root cause is almost always data, not the template.

Dotted words open definitions. Full glossary.

What to do

Your move — not a lecture

This one needs you

No platform does this for you. One concrete move, then you are done.

An may throttle or review an account after trap-like patterns, and shared-IP neighbours can suffer collateral damage. They cannot prove how you collected the address.

Your part: and source records, partner contracts, import QA, and long-dormant addresses before they become dead-address traps.

What to do first

List every non-organic source that fed your in the last year (partners, events, appends, manual CSVs). For each, write who holds evidence. Empty cells are the trap pipeline.

You can skip this if: You only mail freshly addresses with no imports, partners or multi-year segments—and you still monitor .

Who this applies to

Anyone buying lists, taking partner data, importing CSVs, or mailing multi-year databases.

Checklist

  • 01Stop purchased or rented lists. Spamhaus treats as non-transferable with the list.
  • 02Suppress prolonged and do not re-import them from CRM "cleanups".
  • 03Separate pristine-trap response (audit acquisition) from recycled-trap response ( and reconfirm).
  • 04Do not claim Microsoft recycles Hotmail into traps unless Microsoft publishes that policy.

That’s enough to act. Sources and exact wording are below for counsel, bosses, or AI tools that need a citation. Not legal advice.

Proof

Exact position, enforcement, sources

For records and people who will check you. Skip if Monday’s move is already clear.

The exact position

Spamhaus distinguishes pristine traps (addresses never given to a live user) from recycled or dead-address traps (once valid, hard-bounced for a prolonged period—often twelve months or more—then silently reactivated). Hitting either is evidence that acquisition, partners, imports or retention failed. Google states that a deleted Gmail address cannot be used by anyone in the future, which cuts against casual claims that every dormant consumer address becomes a trap. Whether Microsoft reuses closed Outlook addresses as traps is an open question on first-party sources.

What happens if you do not

No statutory fine for a trap hit. Operators list IPs or domains; receivers decide whether to reject, tag or filter. The marketer's real cost is reputation repair and lost .

Sources

History of this page

  • Added from Spamhaus and Google primary pages.

FAQ

Awkward questions

Who is this actually for?

People who ship email and are too busy to re-read every PDF: week-one marketers, lifecycle/CRM, deliverability, multi-country ops, DTC brands, agencies — on Klaviyo, Mailchimp, Braze, HubSpot, SFMC, or something else. Pick your tool and geos so product-specific pages only appear when they match. EU and UK are first-class filters. Not for people who sell tools about email and need a fake score to demo.

Why only ~40 rules? Isn’t that… thin?

On purpose. A wall of 400 undated “best practices” is how you look busy and still get burned. Every page needs a primary source we actually read. Thin and checkable beats fat and folklore. Europe, bulk inbox rules, measurement honesty, and protocol topics like BIMI/DMARC policy are on the shelf when we can cite them — not every Member State and not every vendor myth. Coverage map lists what we still refuse to invent.

Is this legal advice?

No. If it were, you’d have a billable hour and a longer PDF. This is a dated operator reference written by an email geek. Confirm anything high-stakes with counsel who knows your facts. Same for “will this make me compliant?” — no tool does that. Lawyers and judges do. We say what the sources say and what to do first on Monday.

Why no trust score out of 100?

Because we refuse to invent a number you can’t audit. Fake scores sell seed tests and panic. You get findings, dates, and links. If that feels less exciting than a red dial, good — you’re not the red-dial customer.

Why should I trust you more than my ESP’s blog?

ESPs sell seats. Seed-score vendors sell fear. AI invents citations when nobody watches. We sell nothing today — no pixels, no placement scores, no affiliate — so we can say when a tool is the problem. A human verifies, dates, and corrects in public. Tools may help draft; they do not ship unsourced claims. Check the primary links. Fail that test and leave.

Do I need an account?

No. Filters live in this browser and the URL. Share the link. That’s it. Accounts come later only if they earn it — not so we can nurture you about email.

I’m an agency. Where’s multi-client mode?

We tried a client-name CRM on the setup card. It made the product feel like work before it felt useful. Role filters + copy link + one-page brief (optional PDF title) is enough for now. Complexity comes back when the free shelf is habit, not before.

Is the quiet changelog a bug?

No. Quiet means nothing material moved. We don’t invent urgency so the homepage looks “alive.” Sticky risks still show what usually needs a person when the market is still.