Skip to content

“Verified” email is a category error

Verification asks a receiving server whether an address exists. Catch-alls answer yes to everything, greylisting answers not now, and enterprise gateways refuse to answer at all. The word promises knowledge the check cannot produce.

Antiqore6 min read

Every data vendor has a green tick. It is the most reassuring pixel in the category and the least examined. What sits behind it is a question asked of a stranger’s mail server — and three common configurations make that question unanswerable.

What the check actually does

A verifier connects to the receiving mail server and walks an SMTP conversation as far as RCPT TO without sending a message, then reads the response code. Accepted is read as valid, rejected as invalid.

That is a reasonable inference about a cooperative server answering honestly. Three situations break it, and B2B lives inside all three.

The three that break it

ConfigurationWhat the server doesWhat the tick means
Catch-allAccepts mail for every address at the domain, existing or notNothing about this person — every address returns success
GreylistingTemporarily rejects unknown senders with a 4xx and expects a retryA valid address can be recorded as unknown or undeliverable
Enterprise gatewayDetects probing and rate-limits, generalises or refuses to answerThe check is being actively defeated by design

The catch-all case is the one that matters most, because it is common in exactly the companies worth selling to and because it fails silently. The verifier gets a real 250 and reports it correctly. The address is then discarded or rejected internally, and the bounce arrives hours or days later — after the send, against your domain reputation, which is the currency you can least afford to spend.

Why a better verifier does not fix it

Accuracy comparisons between verifiers show meaningful spread, and the leaders are well short of certainty. But the interesting part is not the headline number — it is where the residual error sits. It is not scattered evenly. It is concentrated in catch-alls, greylisting and gateways, which is to say concentrated in mid-market and enterprise B2B.

So the error is not merely present, it is correlated with the accounts you care about most. Buying a more accurate verifier moves the number without moving the shape.

The uncertainty is not spread evenly. It is thickest exactly where the deals are.

What a rep actually needs

A single word forces every case into one of two buckets, so it has to round. Two addresses that are not remotely the same object end up wearing the same tick:

  • An address printed on the company's own contact page, read on a date you can check.
  • An address assembled from first.last@ because four other people at that employer use that pattern.

The first is an observation. The second is an inference with a sample size. Both may well deliver, and a rep should treat them differently — which they can only do if the difference survives to the screen.

What we do instead

We publish this as a limit rather than a feature, on the evidence standard: we do not verify email addresses. Every address carries a score from 0 to 100 and the reason for that score. Published on a linkable page scores high. Built from an employer’s observed format scores lower and shows the sample count it was inferred from. Nothing is guessed and then labelled verified.

That is a worse-sounding claim and a more useful one. It also composes with the rest of the work: the reason a low score exists at all is that the alternative is spending domain reputation on a guess, and reputation is the constraint everything else runs on. At a spam-complaint budget of one in a thousand, “probably fine” is not a category you can afford to send to blind.

Frequently asked questions

How does email verification actually work?
A verifier opens an SMTP conversation with the receiving server and gets as far as RCPT TO without sending anything, then reads the response code. It is a question asked of a server that is under no obligation to answer it honestly, and increasingly does not.
What is a catch-all domain?
A domain configured to accept mail for every address at it, whether or not the mailbox exists. Probe one and every address returns success, so the check tells you nothing about the specific person. A large share of B2B domains are configured this way.
Why do verified addresses still bounce?
Because acceptance at the edge is not delivery to a mailbox. A catch-all accepts, then the message is discarded or rejected internally hours later. The verifier saw a real 250 and reported it accurately — it just answered a different question from the one you asked.
Does a higher accuracy score fix this?
It narrows the error, it does not change its shape. Published comparisons of verifier accuracy put the best performers well short of certainty, and the residual is concentrated exactly where B2B lives: catch-alls, greylisting, and domains behind enterprise gateways.
What should be shown instead of a verified flag?
The evidence and its strength. An address published on a linkable page is a different object from one assembled by pattern-matching an employer's format, and a score with a reason lets a rep decide. A single word cannot carry that difference, which is why we do not use one.