Spam trap
A spam trap is an email address mailbox providers and blocklist operators secretly maintain to catch senders with poor list hygiene — hitting one is catastrophic for reputation.
- Also called "honeypot" or "spam-bait"
- Blocklist signal · List hygiene
- Avoidance — never hit one
- Auditing a purchased list or revived dormant addresses
What it is
A spam trap is an inbox that exists for one purpose: to receive mail it should never have received. The address is published nowhere, or was once real but is now abandoned, or was specifically seeded into scraped data sets. When a message arrives, the operator — Spamhaus, SpamCop, the major mailbox providers themselves — logs the sending IP and domain as a list-hygiene problem at best and a malicious sender at worst. There are three flavours worth knowing.
- Pristine traps were never real addresses. They were seeded onto websites, into list-rental databases, and into scraped corpora to catch anyone harvesting or buying lists.
- Recycled traps were real addresses years ago, went unused for an extended period, bounced 5xx for months, and were then re-enabled by the provider as traps.
- Typo traps are common misspellings of legitimate providers —
gmial.com,yaho.com— that mailbox operators claim and use to catch senders who do not validate input.
How it works
A single recycled-trap hit is usually a quiet flag. A pristine-trap hit is a near-instant escalation to the major blocklists, and from there to inbox providers worldwide. Spamhaus's SBL and Composite Blocklist (CBL) both ingest trap data continuously. Once your IP or domain is listed, delivery effectively stops at Yahoo, Outlook, and a large slice of corporate gateways within minutes.
Why it matters
Hitting traps is the fastest way to destroy sender reputation. Avoiding them is also straightforward: never buy or rent lists, verify email addresses before adding them to outreach, prune any address that has not engaged in six months, and validate syntax plus MX records at the point of capture. A reputable real-time verification API will catch the typos and most of the pristine traps; nothing catches recycled traps except keeping your list active.