A spam trap is an email address planted by blocklist operators, mailbox providers, or anti-spam organizations specifically to identify senders with poor list practices. Because the address was never used to opt in to anything, any message sent to it is, by definition, unsolicited. A single hit on a high-value trap can trigger a Spamhaus listing.
Spam traps are invisible — there is no way to test whether a specific address is a trap before sending to it. The only defense is list hygiene practices that prevent stale, purchased, or harvested addresses from entering your list in the first place.
Types of spam traps
Pristine traps (pure honeypots) are addresses that were never used by a real person. They appear in scraped lists, purchased databases, and public directories. A hit on a pristine trap is the most severe — it signals that you either harvested addresses or bought a list. Spamhaus treats a pristine trap hit as high-confidence evidence of deliberate or negligent spam.
Recycled traps are real addresses that were once used by a real person, abandoned, and then reclaimed by a mailbox provider and repurposed as traps. They appear in lists that are not maintained — if you have been sending to an address for two years with no engagement and it starts bouncing, there is a chance the provider has recycled it. The standard defense is to suppress addresses with no engagement in the last 12 months.
Typo traps are addresses created at common typo domains (gmial.com instead of gmail.com). Sending to a typo domain address signals that your sign-up form does not validate email format or that you have imported unvalidated data.
How to avoid spam trap hits
Do not buy email lists or import lists from third parties without verification. Even lists sold as 'opt-in' often contain traps — the vendor's definition of opt-in may not match yours or the data may have been collected years ago.
Use confirmed opt-in (double opt-in) for new subscribers. A confirmation email step ensures that the address provided is real, accessible to the subscriber, and actively monitored. Traps never confirm.
Suppress unengaged subscribers before they become traps. Any address with no open, click, or other engagement signal in 12 months should be moved to a suppression list. Re-engagement campaigns to these addresses should use a small, graduated send — not a blast.
Frequently asked questions
01How do I know if I hit a spam trap?
You generally don't know directly — traps do not bounce or complain, they just absorb the message silently. The signal is downstream: a Spamhaus listing that appears without an obvious cause, a sudden drop in Gmail or Outlook inbox placement, or a spike in spam complaint rate. If you suspect a trap hit, audit recent imports for non-opt-in sources.
02Can email verification services detect spam traps?
Some can detect recycled traps and typo domains. No verification service can reliably detect pristine traps — by design, pristine traps look like valid, active email addresses. Verification reduces risk but is not a complete defense; confirmed opt-in and list hygiene are the more reliable controls.
03What should I do if I have already hit a spam trap?
Identify the source: which import or campaign led to the hit? Suppress every address from that source. Submit a blocklist delisting request explaining the root cause and the remediation taken. Do not resume sending from the affected domain until the listing clears. Going forward, apply pre-import verification to every new list.
Run a free deliverability audit on your sending domain.
MailerMonk checks DMARC alignment, SPF lookups, DKIM keys, MX records, and major blocklists in under a minute. No signup, no card.