Proxy 25

What Is Email Validation? — A Simple Guide to Protect Your Sender Reputation
B2B Outbound · Email Infrastructure · 2026

What Is Email Validation? A Simple Guide to Protect Your Sender Reputation

A number that doesn't make sense, in a month you weren't watching, on a campaign that had nothing to do with the list that caused it. This is how email validation failures actually present.

J
Jon
Proxy25.com
13 min read
2026

It wasn't the sequences. It wasn't the timing. It wasn't the copy.

She had been running outbound for the company for two years. 400 to 600 targeted contacts a month, sequenced across a three-touch cadence, tracked against pipeline contribution. She knew what good looked like. She had built the reporting herself.

19–21%
8%
Open rate collapse — January, across all campaigns simultaneously Same domains. Same sending tool. Same sequences that had been performing for eighteen months. Three weeks of subject line changes, send window shifts, format tests, and full sequence rebuilds moved nothing.

What eventually surfaced — not through deliberate diagnosis, but because a colleague happened to check a setting that usually never changes — was that the company's domain reputation score had fallen below the threshold at which Gmail began routing their mail to spam by default.

The score had been declining for eleven weeks before the open rate drop became visible. Silent, continuous, invisible to everything except a metric she had no reason to be watching.

The cause was not the sequences. It was not the domains. It was a contact list sourced in Q3 that had never been validated. Eight hundred addresses. Sent against. A hard bounce rate of 9.3% on that one cohort. That cohort alone was enough to start the clock on the reputation decline that became visible three months later.


The definition, without the padding

Email validation is the process of checking whether an email address is viable before sending to it — confirming that it's structurally formed correctly, that the domain it belongs to is active and configured to receive mail, and that the address is likely to reach a real inbox rather than bounce or disappear.

Validation
The earliest gate. Checks viability before any SMTP conversation happens. Removes addresses for reasons that don't require querying a mail server.
Verification
A deeper operation — initiates an SMTP handshake directly with the receiving mail server to probe whether a specific mailbox exists. Runs after validation.
List Cleaning
A broader practice covering deduplication, formatting normalisation, suppression management, and other hygiene operations that sit around and beyond validity checking.

Teams that treat validation and verification as interchangeable tend to skip validation because they believe verification covers everything. It doesn't. An address attached to a domain that expired six months ago will never return an SMTP response — there is no handshake to initiate, no server to query. Validation eliminates it before any of that happens.


What sender reputation is — and why it's the actual stakes

Every email you send originates from a domain. That domain carries a sender reputation — a continuously updated score maintained by inbox providers including Google, Microsoft, and Yahoo. You cannot see this score directly. No dashboard shows it. But it determines whether your emails arrive in inboxes, in spam, in promotional tabs, or not at all.

2–5%
Hard Bounce
Hard Bounce Rate
A permanent delivery failure — the address doesn't exist, the domain has no mail infrastructure, the mailbox was permanently deactivated. Deliverability data shows degradation beginning around 2% and accelerating above 5%. The woman in January hit 9.3% on a single cohort of 800 addresses.
0.1%
Spam Complaints
Spam Complaint Rate
Google's published threshold before they begin actively filtering your mail. One complaint per thousand sends. That is not a typo. At 0.3%, they start treating your domain with sustained suspicion — a threshold lower than nearly every team assumes.
Engagement
Engagement Rate
Whether recipients open, click, and reply. A domain sending high volume against a list with low engagement signals the list is not opted-in, not current, or not matched to what you're sending — harming reputation more slowly but just as surely.

Validation controls the first of these directly. Every address removed at the validation stage is one fewer potential hard bounce. Clean validation compounds upward into consistent deliverability. Skipped validation compounds downward into exactly what happened in January.


The four checks — what they catch, and what they miss

Validation is not a single operation. It is a sequence of four, and understanding what each one catches — and where each one stops — is the difference between treating validation as a checkbox and using it as a genuine quality filter.

1
Syntax Validation
The opening gate. Checks whether the address is structurally formed per RFC 5321 — a local part, an @ symbol, a domain with at least one dot. Catches typos, copy-paste corruption, never-real addresses.
Catches almost nothing else. An address can be syntactically perfect and completely undeliverable — expired domain, removed MX records, deactivated mailbox.
2
Domain & MX Record Validation
Confirms the domain is registered and active, and has MX records — the DNS entries that tell mail routing infrastructure where to deliver email. A domain with no MX records cannot receive email. Full stop.
In a B2B list unrefreshed for 90+ days, domain and MX failures typically account for 4–9% of addresses — invisible in a spreadsheet without this check.
3
Role-Based & Disposable Detection
Removes addresses that are technically deliverable but functionally useless — info@, contact@, support@, team@, hello@, enquiries@. These route to shared inboxes, deliver, but never reach anyone who was the intended recipient.
Their spam complaint rates run higher than personal addresses, reply rates approach zero, and their presence damages the engagement signal without contributing pipeline.
4
Catch-All Domain Detection
A catch-all domain accepts all inbound email regardless of whether the specific mailbox exists. The server returns an acceptance signal regardless. The address cannot be confirmed valid — and cannot be confirmed invalid.
This is the layer that creates the most downstream confusion. It occupies a category that requires judgment the check itself cannot provide.

The catch-all mistake that looks like a validation problem

The mistake is binary treatment of catch-all addresses. Either include all of them — they weren't flagged invalid, so they're probably fine — or exclude all of them to be safe. Both decisions are wrong.

A 4,000-contact list after a validation run
Valid
2,900
Catch-all
700
Invalid
280
Unknown
120
Sequencing valid + catch-all together produced a 5.8% hard bounce rate on the full send — coming predominantly from the subset of the 700 catch-all addresses where the named mailbox does not exist.

On a list sourced from an enrichment provider and not refreshed in 60+ days, the undeliverable proportion within catch-all addresses can run to 35–50%.

!

Binary exclusion solves the bounce problem but creates a different one: if 17% of your list is flagged catch-all and half of those addresses are functional inboxes, you've removed 8.5% of your reachable contacts — not because those addresses are bad, but because your process couldn't distinguish the good ones.

The correct treatment is stratification — a probability assessment on each address, using signals like recent domain web activity, naming convention match, second-source confirmation, and record recency. No single signal gives certainty. A combination gives a probability ranking, and decisions made against a ranking produce materially better outcomes than decisions made against a binary label.


The failure that lives before validation even starts

There is a class of delivery failure that validation cannot catch — not because validation failed, but because the problem was introduced upstream of it.

You have a target list of companies. You have names and job titles. You construct addresses by combining each contact's name with the domain and the most common email format pattern (first.last@, f.last@, first@, last@).

The constructed addresses go through validation. They pass. The domains are live. MX records exist. Syntax is correct.

The campaign sends. Fourteen percent bounce.

Not because validation failed. Because the premise validation was evaluating was wrong before the check ever ran.

Email format is not uniform across companies. A domain on a company's website may not be the domain where executives receive mail — subsidiaries, acquisitions, and rebrandings leave domains that are live but no longer primary.

Validation sees
A technically viable address
Domain resolves. MX records exist. Syntax correct. Validation confirms it as deliverable — even when the domain itself is the pre-acquisition domain, the holding company domain, or a subsidiary domain that no longer routes to active inboxes.
The actual fix is upstream
Domain resolution
The step that establishes which domain a company actually uses for employee email — before address construction begins. A validated address built against a wrong domain is not a validated address. It is a confirmed-deliverable container for incorrect data.

Reading validation results correctly

A validation run returns four output categories. Most teams read three of them with more confidence than the results warrant, and one of them in entirely the wrong direction.

Valid
Treated as confirmed deliverable. It is not. A valid result means the address cleared domain and MX checks and the server returned an acceptance signal — confirmation the server was willing to accept a query, not that the mailbox exists. On a list with any age to it, a portion of valid-flagged addresses have already been deactivated, migrated, or moved.
Highest confidence — but a probability, not a guarantee
Invalid
The one result you can treat as reliable in the negative direction. A genuine hard rejection — domain doesn't exist, MX absent, 550 permanent failure — will not deliver. Mail servers have no strategic reason to return a false hard rejection.
Remove without hesitation
Catch-all
Should never be processed as a single bucket. The deliverability rate within this category varies too widely for batch inclusion or exclusion to be correct.
Stratify by probability signals
Unknown
The result read most consequentially wrong. High unknown rates are almost universally read as bad data — in most cases, they are not. Unknown means the tool could not get a reliable response from the mail server — not that the address is bad. An 18–22% unknown rate on a list from a reputable provider is telling you the infrastructure couldn't get honest answers, not that your data is bad.
Most commonly misread category

The calibration mechanism that makes all of this meaningful: track your post-send hard bounce rate segmented by the validation result each address carried into the send. Run this after every significant campaign, consistently, over time. It tells you with precision how accurate your validation process actually is against your specific list composition and sending domains — not a benchmark, not theory. That is the number that matters.


When validation needs to be a practice, not a step

The teams with consistently clean sender reputations do not validate before campaigns. They validate as a property of data — every address carries a validation timestamp with an operational expiry, after which it is not sequenced without being re-run.

📉

2–3% decay per month

The industry consensus on B2B contact decay. Over sixty days, that's 4–6% of addresses in any cohort that moved from deliverable to not-deliverable — through no fault in the original validation, just the natural churn of roles changing, acquisitions, and domain restructuring.

Re-validation at send time, or within thirty days, catches addresses that decayed after the initial check. It is not expensive. It is significantly cheaper than the reputation repair that follows a send against a cohort that was clean when validated and wasn't when sent.

For teams sending above 15,000–20,000 emails per month, a 4% hard bounce rate is not a hygiene issue for the next planning cycle. It is an active event that will produce measurable domain reputation damage within weeks — damage that persists through campaigns that had nothing to do with the list that caused it.


What validation actually protects

The woman in January recovered. It took eleven weeks of careful sending at reduced volume to rebuild the domain reputation score to the point where Gmail stopped default-routing their mail to the promotional tab. During those eleven weeks, three campaigns that should have contributed to pipeline contributed almost nothing. The attribution gap was visible in the quarterly numbers. It came up in reviews.

The underlying list that caused it — 800 contacts sourced in Q3 and never validated — took ninety minutes to source and twenty minutes to load into the sequence tool. The cost of not validating it was eleven weeks of degraded deliverability across an entire sending domain that other campaigns also depended on.

The work required to validate a list before use is small, predictable, and front-loaded. The cost of skipping it is delayed, invisible until it isn't, and then disproportionate to what caused it — because the reputation damage doesn't stay contained. It spreads across the domain. Every send that follows inherits it.

Validation does not write better messages or sharpen targeting. It does something more fundamental: it prevents the infrastructure that outbound runs on from being quietly degraded by data that was never fit to send against. Not one campaign. The ground everything else stands on.

Get the domain right before validation even starts

Proxy25.com resolves company names to the verified, active domains where employees actually receive mail — the decision that has to be made correctly before address construction, before validation, before anything outbound touches a list.

Start with 500 free credits → No credit card required