Where your list comes from determines your bounce rate, your spam complaints, your legal exposure and ultimately your domain reputation. It is the least glamorous part of outbound and the one that most reliably decides whether any of it works.
firstname@company.com and firing at all variants produces bounces and hits catch-all traps. Verification exists precisely so you do not have to guess.Every address should be checked before it is sent to. Verification services confirm that a mailbox exists without sending anything, and they cost very little relative to the damage a high bounce rate does.
info@, sales@, admin@. They are frequently monitored by several people, ignored, or configured as complaint traps. A named person is both more effective and safer.Sourcing rules differ by jurisdiction and are stricter than most outreach advice admits. In the European Union and the United Kingdom, personal data — which includes named business email addresses — falls under data protection law, and you need a lawful basis plus, in practice, a privacy notice explaining where you got it. Australia's Privacy Act limits using data for purposes other than why it was collected. New Zealand and the United States are more permissive for business-to-business contact but still require genuine sender identity and a working opt-out.
Country-by-country detail: New Zealand · Australia · United States · EU and GDPR · United Kingdom.
It depends on jurisdiction and on what you scrape. Publicly published business contact details are generally acceptable for business-to-business contact in New Zealand, Australia and the United States, subject to identification and opt-out rules. In the EU and UK, named business addresses are personal data and require a lawful basis and transparency about the source. Automated scraping may also breach a site's terms of service independently of privacy law.
The reputable ones aggregate public sources and verify deliverability, which is legitimate and saves real time. What matters is where their data comes from — a provider that cannot tell you is one whose data you should not use. Verify anything they give you before sending regardless.
Under two percent. Above that, providers begin treating you as someone sending to an unverified list, which is exactly what is happening. If a campaign starts bouncing heavily, stop it rather than letting it run — every additional bounce compounds the damage.
Rarely, for cold outreach. They are often monitored by several people, frequently ignored, and sometimes configured specifically to catch unsolicited mail. A named person at the same company is more likely to reply and less likely to generate a complaint.
The Cold Outreach Machine finds the companies you sell to, writes a different email for each one, and sends them on its own — paced, inside working hours. US$299.99, paid once, live setup call included.