Skip to content
Adrythm
Email, texting and privacy

Spam trap

spamtrap / spam traps / pristine spam trap / recycled spam trap

In short

A spam trap is an email address kept to catch senders who mail people without permission. Nobody ever signed up with it, or its owner abandoned it long ago, so mail arriving there points to a problem with how a list was built. Hitting traps can get your email blocked.

Spamhaus, which publishes widely used email blocklists, asks senders to view spamtraps as proof of a data collection or hygiene issue. A trap exists to expose senders who add addresses to their lists without permission. Mail landing in one says something about the list the message came from.

The trap types show where a list went wrong. A pristine trap was never given to a real person or published on a website, yet it receives mail. A seeded trap is placed where only a scraper would find it, such as in a page's source code. A dead address trap was once a real mailbox that rejected mail for a period, often 12 months or more, before being quietly switched back on.

Typo domain traps sit at lookalike domains such as yaaho.com or homail.com. Spamhaus notes these can hold a lot of real mail and are weighted accordingly, so a stray typo carries less weight than a scraped list.

Trap owners keep their addresses secret. Spamhaus gives two reasons: the traps are part of how filtering works, and a sender who finds one tends to delete that address and change nothing else. Microsoft moved the same way. Its Smart Network Data Services report stopped including trap hit counts on July 22, 2026, to protect its anti-abuse systems.

In practice

A clinic imports 4,000 addresses collected at trade shows over several years and sends a newsletter. Hundreds bounce straight away. Among the rest are old addresses that bounced for a year and now accept mail as traps. The clinic never learns which ones. It sees mail landing in spam or being refused, and the lasting fix is to mail only people who recently asked to hear from it.

Not the same as

Spam complaint rate
A complaint is a person pressing report spam. A trap hit involves no person at all, only an address that should never have been on the list.

Why it matters to you

A trap hit is evidence about list building, and the usual causes are buying lists, scraping addresses and mailing contacts long gone quiet. Spamhaus warns against hunting for the traps, because removing them only treats the symptom. The list practice that collected them keeps collecting more.

What to ask or check

  1. 01Where did every address on this list come from, and when did each person last opt in?
  2. 02Does the email system stop mailing an address after it hard bounces?
  3. 03Has any part of this list been bought, rented or scraped?

What people get wrong

That a list cleaning service can find and strip out every trap. Trap owners keep them secret, and Spamhaus says removing traps only treats the symptom of a list problem.

Red flags

  • A list bought, rented or scraped from a third party.
  • Addresses that hard bounced still being mailed months later.
  • A plan to find the trap addresses instead of fixing how addresses are collected.

Spam complaint rate

Your spam complaint rate is how often recipients mark your mail as spam. Google publishes a target and a ceiling: keep it below 0.10% and avoid ever reaching 0.30%. Yahoo asks for below 0.3% and adds the detail that changes the arithmetic: it counts mail delivered to the inbox.

Unsubscribe

Unsubscribing has a legal shape and a technical one. The law allows a reply or a single web page, with no fee and no information beyond the address, honored within 10 business days. The one-click standard exists because automated scanners were unsubscribing people by accident.

DMARC

DMARC is a DNS record that tells receiving mail systems what you think about messages using your domain that fail authentication. The current standard, RFC 9989, is explicit that receivers can honor your request but are not required to. It was revised in 2026, and the percentage rollout tag was removed.

DKIM

DKIM attaches a cryptographic signature to a message so a receiver can confirm the signed parts were not altered. The standard describes it as a domain claiming some responsibility for the message, and it separates the signer from the purported author. Modifying a message in transit breaks the signature.

SPF

SPF is a DNS record listing which servers may send mail using your domain in the envelope sender. The specification caps it at ten DNS-querying terms, and receivers must return permerror if that is exceeded, which means the check fails. It does not check the From address a recipient sees.

Consent mode

Consent mode is how an advertising tag is told whether a visitor agreed to be tracked. Both major platforms now require a consent signal, and the penalties differ in kind: Google's policy allows it to suspend or terminate your account, while Microsoft simply stops recording your conversions.

Want this explained against your own numbers?

Twenty minutes, a straight answer, and no follow-up sequence if you decide not to work with us.