Spam Trap
A spam trap (or honeypot) is an email address that no real person uses and that should therefore never receive legitimate mail. Blocklist operators and mailbox providers monitor these addresses: any message that lands in one is, by definition, mail the sender should not have sent, so a hit is treated as hard evidence of poor list hygiene and can quickly damage your reputation or get you blacklisted.
- An address that should never get mail, so any hit means your list contains addresses you should not have
- The two main kinds are pristine traps (never real) and recycled traps (once real, now repurposed)
- Hitting one can trigger a blacklist listing and sink inbox placement across providers
- You cannot scrub traps off a list by name; you avoid them with permission-based collection and hygiene
What a spam trap is for
A spam trap is a deliberately planted email address used to catch senders who are not following permission-based practices. The logic is simple and unforgiving: the address was never given to you, never signed up for anything, and is monitored by the people who decide your reputation. So if your mail arrives there, the only explanations are that you bought or scraped a list, harvested addresses, or failed to clean out addresses that went dead. None of those reflect well on you.
Operators run traps precisely because they are a high-signal, low-noise detector. Most reputation metrics are fuzzy, but a trap hit is close to proof. That is why a single hit on the wrong kind of trap can outweigh thousands of clean sends and push a sender onto a blocklist.
The two kinds of trap
Traps come in two flavours, and the difference matters because it changes what a hit says about you:
- Pristine traps were never used by a real person. They are created purely as bait, then seeded on websites (often hidden in the page source) where only a harvester would find them. A hit means an address entered your list through scraping, harvesting, or a purchased list, so it carries the heaviest penalty.
- Recycled traps were once genuine, active mailboxes that the owner abandoned. After a long dormancy the provider deactivates the address, bounces it for a while, and later reactivates it as a trap. A hit means you kept mailing an address that had gone dead, a list-hygiene failure rather than a sourcing one.
There is also a minor third type, the typo trap, built on common misspellings of big domains (think gmial.com), which catches senders who do not validate addresses at signup.
How to keep traps off your list
You cannot identify a trap by looking at it; a good trap is indistinguishable from a normal address, and it will not bounce. Prevention is the only real defence:
- Only ever mail people who opted in. Never buy, rent, scrape, or append lists. This alone eliminates almost all pristine-trap risk.
- Use confirmed opt-in on high-risk sources so a harvested or mistyped address never makes it onto the list in the first place.
- Remove hard bounces immediately and prune the unengaged. Addresses that have not opened or clicked in months are exactly the ones that drift into recycled traps. Strong list hygiene is your insurance.
- Validate at the point of capture to catch typos before they become typo-trap hits.
How an address becomes a trap hit
Pristine vs recycled spam traps
| Pristine trap | Recycled trap | |
|---|---|---|
| Was it ever real? | No, created as bait | Yes, a genuine old mailbox |
| What a hit signals | Scraped or bought data | Failure to remove dead addresses |
| How it got on your list | Harvesting / purchase | Aging, unengaged contacts |
| Severity | Highest, near-instant | Serious but more gradual |
| Warning before the hit | None | It hard-bounced first |