Email harvesting
Qué es Email harvesting?
Esta entrada está disponible actualmente solo en inglés.
Email harvesting is the practice of collecting email addresses without the recipients' consent — scraping addresses from websites, forums, and published directories, or buying address lists from third parties. Because harvested lists are filled with spam traps and invalid addresses, mailing them collapses sender reputation: bounces, trap hits, and spam complaints tell mailbox providers the list was never legitimately acquired, and even the sender's legitimate mail starts landing in spam.
More detail
Harvester bots crawl public pages and crawl contact forms hunting for anything matching an address pattern (name@domain), then package the catches into lists that get resold. Scraped addresses are sold to senders who want volume without the work of earning opt-ins — the economics only make sense because acquiring addresses honestly, one confirmed signup at a time, is slow.
The deliverability penalty is structural, not coincidental. Pristine spam traps only ever get mailed when an address was scraped or bought, so a trap hit positively identifies harvesting to the mailbox provider; recycled traps and long-abandoned scraped addresses drive hard bounces; and recipients who never opted in file complaints. Bounce rate, trap hits, and complaint rate are the three heaviest signals in a sender-reputation score, so a single mail shot to a harvested list can drag a previously clean domain's inbox placement down across every future campaign.
The legitimate alternative is opt-in list building: collector forms with confirmed (double) opt-in, clear consent language at signup, suppressed addresses honored globally across every sending domain on the account, and periodic pruning of long-unengaged recipients. In Devotel Orbit, suppression applies per organization — one unsubscribe stops every channel and every campaign on the tenant, so an opt-out honoured once cannot be re-imported later by another list upload.
Preguntas frecuentes
- Is email harvesting illegal?
- It depends on the jurisdiction, but the deliverability consequence is universal. The US CAN-SPAM Act outlawed sending commercial email to addresses harvested by automated means in 2003, and Canada's CASL treats mailing to scraped or purchased addresses as sending without consent. Even where the statute is grey, mailbox providers weight trap hits and complaint rates heavily enough that a harvested list damages deliverability for every future send from that domain.
- Why does mailing a harvested list hurt even my opted-in recipients?
- Sender reputation attaches to the domain (and the sending IP), not to a single campaign. When a harvested send doubles the bounce rate and adds trap hits and complaints, mailbox providers lower the domain's reputation score, and the next send — even one addressed purely to confirmed opt-ins — gets placed further down the inbox or into spam. List hygiene failures multiply across every subsequent send from the same identity.
- What practices prevent accidentally mailing harvested addresses?
- Use confirmed (double) opt-in at every collector point so no address enters the list by scrape, import, or guess; reject third-party purchased lists outright; and keep the global suppression list authoritative so a recipient who opted out once can never re-enter through a new import. Pair that with periodic suppression of long-unengaged addresses to keep recycled-trap exposure low.
See also
Build it on Orbit
Voice, messaging, email, video, and AI agents on one platform and one pay-as-you-go bill. Start free — no credit card required.