Questions to ask a contact data provider
Bounce rates trace back to how a provider verifies and refreshes its records, which is what a provider checklist asks about.
Email bounce rate is the share of sent emails that the receiving server returns as undeliverable. To calculate it, divide bounced messages by messages sent and multiply by 100: 30 bounces from 1,200 sends is 2.5%. A hard bounce carries a permanent 5.X.X status code, such as 5.1.1 for a mailbox that does not exist, and a soft bounce carries a temporary 4.X.X code. On lists of lawyers and other business contacts, hard bounces follow job moves, firm mergers and retired domains.
Definition
Email bounce rate is the percentage of sent emails that come back undelivered: bounced messages divided by messages sent, times 100. It measures the list before the content, because a bounce happens at the receiving mail server before any recipient sees the message.
A bounce is the non-delivery report a mail server returns when it refuses a message or cannot deliver it. RFC 5321, the SMTP standard published in October 2008, requires a server that accepts a message and then fails to deliver it to send a failure notification to the envelope return path. Sending platforms count those notifications, together with refusals during the SMTP session, as bounces.
The calculation needs 2 numbers from one campaign: messages sent and messages bounced. A campaign of 4,000 emails with 60 bounces has a bounce rate of 1.5%. Report hard bounces and soft bounces as separate rates, because each type calls for a different action.
An email bounce rate checker or calculator runs the same division. Its result describes one send, to one list, on one date, so compare rates only across campaigns sent to similar lists.
Status codes
A hard bounce is a permanent failure that retrying will not fix, such as a mailbox that does not exist. A soft bounce is a temporary failure, such as a full mailbox or a busy server. RFC 3463 marks permanent failures with 5.X.X status codes and temporary ones with 4.X.X.
RFC 3463, the January 2003 standard for enhanced mail system status codes, defines 4.X.X as a persistent transient failure, where sending in the future can succeed, and 5.X.X as a permanent failure, where the message or the destination must change first. The Messaging, Malware and Mobile Anti-Abuse Working Group (M3AAWG), an industry forum against messaging abuse, uses the same split in version 4.0 of its Sender Best Common Practices, updated August 2026.
The code inside the bounce message decides what happens to the address. The table lists 7 codes for address, domain and policy failures, with the action each one calls for.
Codes that begin with 5 call for suppression or a sender-side fix before the next send, while codes that begin with 4 call for a later retry.
| Status code | Meaning in the standard | Bounce type | Action on the list |
|---|---|---|---|
| 5.1.1 | Bad destination mailbox address: the part before the @ is invalid (RFC 3463) | Hard | Suppress the address and look up the contact's current employer |
| 5.1.2 | Bad destination system address: the domain after the @ does not exist or cannot accept mail (RFC 3463) | Hard | Suppress every address at the domain and check for a merger or a new firm domain |
| 5.1.10 | Recipient address has null MX: the domain publishes that it accepts no mail (RFC 7505) | Hard | Suppress every address at the domain |
| 5.7.1 | Delivery not authorized, message refused: per-host or per-recipient filtering (RFC 3463) | Hard, policy block | Fix the sending side, such as authentication, reputation or content, before sending again |
| 5.7.515 | Outlook.com: the sending domain does not meet the required authentication level | Hard, policy block | Publish SPF, DKIM and DMARC for the sending domain |
| 4.2.2 | Mailbox full: the recipient exceeded a storage quota (RFC 3463) | Soft | Let the server retry, and suppress the address when it keeps bouncing |
| 4.X.X | Persistent transient failure: a temporary condition delayed or stopped delivery (RFC 3463) | Soft | Retry later, and lower sending volume when deferrals grow |
List verification
Email list verification tests each address for valid syntax, a domain that accepts mail and a mailbox the server recognizes, without sending a message. It labels each address valid, invalid, catch-all or unknown, so addresses that would hard bounce leave the list before the campaign.
A catch-all domain, also called an accept-all domain, routes mail for nonexistent or misspelled addresses into one designated mailbox. Google Workspace documents this setting as catch-all routing. A verifier that tests an address at such a domain gets an acceptance whether or not the named person has a mailbox, so the result stays unconfirmed. Some servers also accept every recipient during the SMTP session and reject the message afterward, and RFC 5321 then requires them to send a failure notification, which arrives as a bounce.
RFC 5321 lets a server disable VRFY, the command that confirms a mailbox by name, and requires a neutral 252 reply in that case. Verifiers test the recipient step of the SMTP session instead.
Verifying guessed attorney email addresses is the step that turns a pattern into a sendable address, because an address built from a firm's format stays a hypothesis until the firm's server accepts it. Attorney records sold on this site are tested by 2 email verification services, and addresses at catch-all domains carry their own flag; the homepage sets out how attorney email addresses are verified.
Thresholds
Gmail, Yahoo and Outlook.com publish no maximum bounce rate. They set authentication rules and spam-complaint limits instead, and Gmail tells senders to keep user-reported spam under 0.1% and never reach 0.3%. M3AAWG treats large volumes of hard bounces as a sign of an old or misapplied list.
Bounces still shape delivery. The M3AAWG Sender Best Common Practices say receivers use the volume of permanent failures to build a reputation for a sender, and a large volume subtracts points from the sending IP's reputation score. Google's Email sender guidelines tell senders to reduce volume when messages start bouncing or being deferred, then increase it slowly.
The bounce rate on a purchased email list depends on how recently the addresses were verified, not on the purchase itself. The same contacts verified last week and verified 2 years ago produce different results, because people change employers between the 2 dates.
Scope matters for business lists. Google applies its sender requirements to mail sent to personal Gmail accounts and states that they do not apply to messages sent to Google Workspace accounts. Microsoft's rules cover Outlook.com consumer addresses, including hotmail.com and live.com. A campaign to lawyers at firm domains also passes through each firm's own mail filtering.
All 3 providers regulate authentication and spam complaints rather than a bounce percentage, so a list's bounce rate affects delivery through sender reputation.
| Provider | Who the rules cover | Authentication | Complaint and unsubscribe rules | In force since |
|---|---|---|---|---|
| Gmail | Bulk senders: close to 5,000 or more messages in 24 hours to personal Gmail accounts, a status that never expires | SPF and DKIM, plus DMARC with a policy of at least none and From: alignment | Spam rate under 0.3%, with 0.1% advised; one-click unsubscribe for marketing messages | February 1, 2024; stronger enforcement from November 2025 |
| Yahoo Mail | Bulk senders; Yahoo publishes no volume threshold | SPF and DKIM, plus a DMARC policy of at least p=none | Spam rate under 0.3%; one-click unsubscribe; unsubscribes honored within 2 days | February 2024 |
| Outlook.com | Domains that send 5,000 or more messages to Microsoft consumer email services | SPF, DKIM and DMARC, with DMARC passing through alignment | Failing mail is rejected with 550 5.7.515 | May 5, 2025 |
Causes
A high email bounce rate comes from addresses that no longer exist, domains that stopped accepting mail and sending domains that fail authentication. Guessed addresses, typos and old files add hard bounces, while full mailboxes and throttling servers add soft bounces.
Old files add a second risk. Spamhaus, an organization that publishes DNS blocklists, describes recycled spam traps as addresses that were once valid but are no longer used, and states that they make up the majority of spam traps. An unverified contact file from years ago carries that exposure alongside its hard bounces.
Data decay
B2B contact data decays each time a contact changes employer, title, firm or domain, so a file starts losing accuracy on its verification date. The Bureau of Labor Statistics put median job tenure in legal occupations at 4.0 years in January 2024, against 3.9 years for all wage and salary workers.
This guide gives no annual decay percentage. The yearly rates repeated online trace back to vendor marketing rather than to a dated study that states them, so how quickly business contact data decays is explained here through its 4 causes.
Job changes come first. The BLS Employee Tenure release of September 26, 2024 covers wage and salary workers, so it leaves out self-employed lawyers, and its legal occupations category covers more jobs than lawyers alone. Median tenure in that category fell from 5.8 years in January 2020 to 4.0 years in January 2024, which means half of those workers had been with their current employer for 4.0 years or less.
Firm mergers and domain changes come second. When firms combine or rebrand, addresses at the retired domain stop working, and mail to them returns 5.1.2, or 5.1.10 where the domain publishes a null MX record.
License status changes come third. Illinois Supreme Court Rule 756 requires registered attorneys to update their registration information within 30 days of a change, and it makes the listed address, email and phone confidential for attorneys on retirement or inactive status, which removes those contacts from the public record. Role changes inside a firm, such as an associate who becomes a partner, come fourth and change the title field without always changing the address.
The practical control is the verification date. Compare it with the send date, and verify the file again when the gap is long. Microsoft's April 2025 guidance for high-volume senders advises removing inactive or invalid addresses monthly or quarterly.
Reduce bounces
Reduce email bounce rate by verifying the list close to the send date, suppressing hard bounces after the first failure and authenticating the sending domain. Send catch-all addresses as a separate segment, and remove any address that keeps bouncing across campaigns.
Google's guidelines also list automatic unsubscription of recipients with multiple bounced messages as a supporting option for senders who manage subscriptions. The sending platform handles bounces, but the list sets the starting point: every day between a file's verification date and the campaign adds exposure to the causes above.
Related lists and guides
Ask for a free sample of US attorney records and read the email status column, where catch-all addresses are flagged, before you place an order. The database was last fully verified on September 10, 2026 and is refreshed every month, and our team sends the sample with a quote within 1 hour on weekdays, 9am to 6pm UTC.
Questions
Yes. A total bounce rate counts both types. Report them separately: RFC 3463 says a 4.X.X failure can succeed on a later attempt, while a 5.X.X failure needs a change to the address or the message first.
Yes. A mailbox can close after the verification date when the lawyer changes firms, and a server that accepts every recipient during the SMTP session can still reject the message later and return a bounce.
Addresses built from guessed law firm email address formats carry the same risk until a server accepts them.
No. A bounce is a server refusing or failing to deliver a message. A spam complaint is a recipient marking a delivered message as spam, which Gmail counts in the user-reported spam rate shown in Postmaster Tools.
Only for lawyers who use personal Gmail accounts. Google applies its sender requirements to personal Gmail accounts and states that they do not apply to messages sent to Google Workspace accounts, including business domains hosted there.
DMARC reduces policy rejections, not address bounces. Outlook.com rejects mail from high-volume domains that fail its SPF, DKIM and DMARC requirements with code 550 5.7.515, while a nonexistent mailbox bounces whatever the authentication.