Spam Traps: Types and What They Signal
Trap types (pristine, recycled, typo), how each gets onto a list, what hitting them signals about data quality, and how to respond.
Based on Word to the Wise's "What Spamtraps Tell Us" (Laura Atkins, March 2025), which updates her earlier "A Brief Guide to Spamtraps" (2011). Spam traps (spamtraps) are email addresses operated by blocklists, anti-spam organizations, and mailbox providers to detect poor sending practices. ISPs and reputation systems cite trap hits as justification for blocking senders.
Trap types
| Type | What it is | How it gets on a list | What a hit signals |
|---|---|---|---|
| Pristine | A fabricated address that has never existed, often at a domain that has never been used for email | Senders making up addresses, or buying them from a list seller | Non-permission-based sending practices (see worst practices) |
| Recycled | An address or domain that received legitimate mail at one point, was decommissioned, allowed to bounce for a minimum of 12 months, then reopened as a trap | Poor bounce handling, or reactivation of an outdated contact database; frequent in purchased lists | Inadequate list hygiene / bounce processing |
| Typo | A real misspelling of an address, typically on the domain portion; security/anti-spam organizations have bought common typo domains and turned them into monitoring addresses | A person mistypes their own address on a signup form | Sender is trying to be opt-in but is not verifying that captured data is correct |
The key insight: traps are a signal, not the problem
Spamtraps are NOT the problem; they're a signal.
Traps indicate underlying data-collection and data-maintenance issues. The critical corollary: if your list processes allow spamtraps onto the list, it's likely you're also sending mail to actual people who don't want it — which is the real reputation damage (see Foundations of Email Deliverability).
How to respond
Do not try to hunt down and remove individual trap addresses — fix the root causes:
- Don't purchase lists.
- Never reactivate old database addresses (recycled-trap source).
- Implement address verification on website signup forms (typo-trap source).
- Maintain proper bounce handling so decommissioned addresses leave the list long before the 12-month recycling window ends.