How to Clean an Old or Purchased Email List Safely
Inherited, old or purchased lists are risky. A careful process: check consent, verify, send gently and be ready to stop.
Old lists tempt with size, but they hide bounces, spam traps and people who never agreed to hear from you.
First, ask where the list came from
If the people did not give permission to you, or someone like you, in a way that fits the law where they live, do not email them. Verification cannot create consent. A purchased list is the riskiest case.
If you have consent but the list is old
- Verify the whole list and remove invalid and disposable addresses.
- Remove role addresses and set aside accept-all ones.
- Segment by age: the older the contact, the more careful the first message.
- Send a gentle re-permission email that reminds people why they are hearing from you and makes unsubscribing easy.
- Start small: send to a small batch, watch bounces and complaints, then scale.
Warning signs to stop
- Hard bounces above 2%
- Any spam complaint spike
- Blocks from major providers
Keep records
Store where and when each contact opted in. It protects you if a provider or a regulator asks.
Begin with the bulk verifier, but treat it as one step in a consent-first process.
A cautious workflow for an uncertain list
- Keep it out of your main sending tool. Work on a copy.
- Verify first. Remove invalid, disposable and role addresses. A purchased or very old list usually loses a large share here.
- Send a test batch. Pick a small random sample (1,000 or fewer) from the verified remainder and send a plain, honest message that says why they are hearing from you and how to unsubscribe.
- Measure for 48 hours. If bounces stay under 2% and complaints are close to zero, continue in stages. If not, stop.
- Keep the evidence. Record where the list came from, when, and what permission existed.
The consent question verification cannot answer
A verifier tells you which mailboxes exist. It does not tell you whether the people agreed to receive your mail. If you cannot show a lawful basis or permission (see our guide on GDPR, KVKK and verification), do not send marketing to the list, however clean it is. Many mailbox providers and regulators treat a list that was bought as unsolicited.
Safer alternatives
Invite the contacts to opt in with a one-time, relevant message from a source you can name, or build the audience through content, events and forms with confirmation.
If the list has a legitimate origin and just needs repair, verify it in bulk before you send a single message.
