Paste the address
Drop in any address you plan to send to. Gmail, Outlook, custom domains and role aliases, one at a time or in bulk.
Instant Spam Risk Check
Score any address for spam-trap, disposable and deliverability risk in 2 seconds.Score any address for spam-trap, disposable, and deliverability risk in about 2 seconds on our full nine-check engine. No signup, no card.
Trusted by 500,000+ leading GTM teams
Three steps, no signup, no card on file. Paste any address and the nine-check engine scores its spam-trap risk in about two seconds.
Drop in any address you plan to send to. Gmail, Outlook, custom domains and role aliases, one at a time or in bulk.
Nine checks weigh the signals that surround a trap: disposable domains, trap patterns, catch-all behavior, role aliases.
Safe to send, risky or do not send, named with the exact signal that tripped and a 0-100 risk score. Drop what is flagged.
Spam traps never announce themselves, so the engine works from the signals that surround them. These are the nine it scores on every address.
Every address runs a full RFC 5321 and RFC 5322 compliance pass before a single network call goes out. The engine catches what visual scanning misses, the double dot in [email protected], the trailing period, the IDN homograph that looks valid but resolves to a different domain.
Bundled typo suggestions let your form offer “did you mean [email protected]?” instead of rejecting silently.


Once syntax passes, the engine resolves the domain. We confirm the DNS records exist, fetch the MX record priority list in order, and verify at least one mail-exchange server is actively accepting connections right now.
Misspelled domains like gmial.com, expired domains, and parked-for-sale domains all fail this gate before the engine wastes a single SMTP roundtrip.


The engine opens a TCP connection on port 25, performs the EHLO handshake, then negotiates MAIL FROM and RCPT TO. Every server response code (220, 250, 550, 552) is parsed deterministically against the IANA enhanced-status registry.
This is the moment a mailbox proves it actually exists. No third-party guesses, no statistical heuristics, just the receiving server's own answer.


Some domains accept every email regardless of whether the mailbox exists, a setup known as a catch-all configuration. The engine sends a deterministic probe to a deliberately fake address ([email protected]); if the server returns the same 250 OK it returned for the real address, the domain is catch-all.
The verdict isn't dropped, it's flagged RISKY so you know the deliverability signal is degraded.


The engine maintains a curated registry of 10,247 disposable email providers, including Mailinator, Guerrilla Mail, 10MinuteMail, Tempmail, and the long tail of regional clones.
Any address matching the blocklist is flagged INVALID. Deliverability to a mailbox that exists for 10 minutes and is never checked is functionally zero, regardless of whether the SMTP handshake passes.


info@, support@, no-reply@, admin@, billing@. These are shared inboxes, not individuals.
The engine extracts the local-part of every address, matches it against the known role-prefix registry, and tags the result with a reduced engagement score.
You don't drop them automatically. The verdict flags them as roles so you can decide.


Fresh-spam domains registered hours ago are the single biggest source of inbound abuse. The engine queries WHOIS and RDAP for every unique domain, extracts the registration date, and flags anything under 30 days old with a “fresh” warning.
Domains aged 5+ years pick up a corresponding trust signal. The same heuristic spam filters have been using since the early 2000s, ported into the verdict.


SPF, DKIM, and DMARC together prove the sender is authorised to send from that domain.
The engine reads each policy via DNS, validates SPF includes recursively, scans six common DKIM selectors, and confirms DMARC alignment with the From: header.
A failing DMARC policy means the sender can be spoofed, so the verdict warns you before you reply.


Beyond “exists vs doesn't exist”, the engine extracts the precise mailbox state from the SMTP server's response. Full inbox (552 / 522 quota), disabled mailbox (550 5.1.1), out-of-office autoresponder, frozen account.
Each state maps to a specific retry policy. Full inbox retries in 6 hours. Disabled drops permanently. The verdict tells you which bucket the bounce belongs in so your retry logic doesn't waste cycles.


Two different questions hide behind the same phrase. This page answers the older one: an address-level check scores the recipient, not the message.
Type the phrase into a search bar and you could mean two different things. One is content testing: will my subject line or body copy trip a filter, which is what the email spam content checker measures. This page answers the other, older question: is this address dangerous to send to at all. An address-level spam check scores the recipient, not the message. It asks whether the mailbox really exists, whether the domain is disposable or days old, whether it accepts mail indiscriminately, and whether the whole profile reads like a tripwire instead of a person.
Paste one address or upload a whole CSV, score every trap, disposable and dead-mailbox signal, and drop the risky rows before they touch a campaign.
The same nine-check pipeline as the paid API runs on every address, free or not.
Score your first addresses right here, no account, no card.
Bulk CSV in, risky rows flagged out. Same speed on every plan.
Not just a risk score, the exact trap signal behind it.
So you drop addresses that are really risky, not a guess.
1,000 free on signup. 2,500 with a work email. Pay as you go after.
Processed in memory, dropped on response. SOC 2 · GDPR · CCPA.
Same nine-check pipeline, the highest published accuracy, credits that never expire, and an MCP server no competitor offers. Head-to-head with the two providers our buyers shortlist.
Growth leads, marketers, and engineers running real campaigns on real lists, with a verified email on every byline.

We were paying ZeroBounce a four-figure monthly bill and still landing 3% bounces on cold campaigns. Switched the pipeline to Verifox, dropped to 0.4% bounces, and cut the bill by more than 90%.

Other tools flag 30% of our B2B list as 'risky catch-all' and leave the call to us. Verifox returns a real verdict on those addresses, with a confidence score. We send more, we send safer.

We had a Gmail spam-folder problem after a bad list import. Verifox cleaned the list and the warmup ran on the same engine. Back in primary inbox in six weeks. One vendor, half the cost.

Ran a 50,000-address outbound list through Verifox before our quarterly campaign. Bounces landed at 0.7%, sender reputation didn't move, replies were up 22% over last quarter.

Their MCP server let me wire email verification directly into our internal Claude agent in about ten minutes. Zero glue code. No other vendor in this space has thought about that workflow.

Tested Verifox at 10,000 verifications per minute on a Tuesday morning. Latency held under 400ms median, no soft failures, no rate-limit walls. The vendor we benched throttled at 2,000/min.

Our SDRs were enriching from three tools and 14% of the emails were invalid before they hit the sequencer. Verifox sits in the pipeline now and the team stopped seeing 'undeliverable' replies the next week.

Bulk upload, sorted CSV back in twenty minutes, plug into our growth stack. The half-day list-hygiene project per cohort turned into something the marketing intern runs on autopilot.

Verifox returns a 0-100 confidence score per address, not just a label. We thresholded at 75 for the cold sequencer, 60 for nurture, and our deliverability team finally has a knob they can tune.

We were paying ZeroBounce a four-figure monthly bill and still landing 3% bounces on cold campaigns. Switched the pipeline to Verifox, dropped to 0.4% bounces, and cut the bill by more than 90%.

We had a Gmail spam-folder problem after a bad list import. Verifox cleaned the list and the warmup ran on the same engine. Back in primary inbox in six weeks. One vendor, half the cost.

Their MCP server let me wire email verification directly into our internal Claude agent in about ten minutes. Zero glue code. No other vendor in this space has thought about that workflow.

Our SDRs were enriching from three tools and 14% of the emails were invalid before they hit the sequencer. Verifox sits in the pipeline now and the team stopped seeing 'undeliverable' replies the next week.

Verifox returns a 0-100 confidence score per address, not just a label. We thresholded at 75 for the cold sequencer, 60 for nurture, and our deliverability team finally has a knob they can tune.

Other tools flag 30% of our B2B list as 'risky catch-all' and leave the call to us. Verifox returns a real verdict on those addresses, with a confidence score. We send more, we send safer.

Ran a 50,000-address outbound list through Verifox before our quarterly campaign. Bounces landed at 0.7%, sender reputation didn't move, replies were up 22% over last quarter.

Tested Verifox at 10,000 verifications per minute on a Tuesday morning. Latency held under 400ms median, no soft failures, no rate-limit walls. The vendor we benched throttled at 2,000/min.

Bulk upload, sorted CSV back in twenty minutes, plug into our growth stack. The half-day list-hygiene project per cohort turned into something the marketing intern runs on autopilot.

We were paying ZeroBounce a four-figure monthly bill and still landing 3% bounces on cold campaigns. Switched the pipeline to Verifox, dropped to 0.4% bounces, and cut the bill by more than 90%.

Ran a 50,000-address outbound list through Verifox before our quarterly campaign. Bounces landed at 0.7%, sender reputation didn't move, replies were up 22% over last quarter.

Our SDRs were enriching from three tools and 14% of the emails were invalid before they hit the sequencer. Verifox sits in the pipeline now and the team stopped seeing 'undeliverable' replies the next week.

Other tools flag 30% of our B2B list as 'risky catch-all' and leave the call to us. Verifox returns a real verdict on those addresses, with a confidence score. We send more, we send safer.

Their MCP server let me wire email verification directly into our internal Claude agent in about ten minutes. Zero glue code. No other vendor in this space has thought about that workflow.

Bulk upload, sorted CSV back in twenty minutes, plug into our growth stack. The half-day list-hygiene project per cohort turned into something the marketing intern runs on autopilot.

We had a Gmail spam-folder problem after a bad list import. Verifox cleaned the list and the warmup ran on the same engine. Back in primary inbox in six weeks. One vendor, half the cost.

Tested Verifox at 10,000 verifications per minute on a Tuesday morning. Latency held under 400ms median, no soft failures, no rate-limit walls. The vendor we benched throttled at 2,000/min.

Verifox returns a 0-100 confidence score per address, not just a label. We thresholded at 75 for the cold sequencer, 60 for nurture, and our deliverability team finally has a knob they can tune.
Most tools reset your balance every month. Verifox sells credits that sit in your account until you spend them.
forever
1,000credits on signup
No card required
2,500 with a work email
Free includes
one time
10,000credits
$0.0059 eachSAVE 34%
Everything in Free, plus
per month
15,000credits a month
$0.0053 each
Unused credits roll over
Everything in packs, plus
One credit verifies one address; a find costs 10. All prices in USD, checkout via Stripe.
Every layer of the stack carries a third-party attestation, so you can ship into regulated industries without rebuilding your compliance posture.

Independently audited to the SOC 2 Type II standard.

Built for the EU with full GDPR data-subject rights.

California opt-out, do-not-sell, plus DSAR handling.

Information security held to the ISO 27001 standard.

AI governance aligned to the new ISO 42001 standard.
An investigation into the money leaking out of your list - and the nine checks that decide whether your email is read, or never arrives at all.

57 pages, free PDF, no signup
Common questions
The questions we get from teams that land here to check an email for spam, with the real numbers, real limits, and real opinions behind our deliverability stack.
Yes. The widget above runs 4 spam-risk checks a day with no account and no card, and each one runs the full nine-point engine. Nothing is held back to upsell you.
Sign up free and you start with 1,000 credits, or 2,500 when your signup email is a work address. Credits are pay-as-you-go, never expire, and volume pricing is localized to your region.
Nine address-level signals, scored in parallel and rolled into one spam-risk verdict: syntax and format validation (RFC 5321 / 5322), domain existence and MX record presence, SMTP handshake and mailbox-exists ping, disposable-domain match (a top spam-trap source), role-address detection (info@, abuse@, postmaster@), catch-all domain detection, an AI-confidence pass on catch-all addresses, domain age scoring, and email authentication (SPF, DKIM, DMARC).
The catch-all resolution is the one most spam checkers skip, and it’s where 20 to 40 % of B2B email lists hide the risky addresses. If you just need to check one address at a time, the free email checker runs the very same engine.
We surface the strongest spam-trap signals: disposable and throwaway domains, role addresses, dead mailboxes that bounce, and catch-all domains that quietly accept everything. A high spam-risk verdict on any of those is your flag to drop the address before you send.
No tool can label a pristine spam trap with 100 % certainty from the address alone, because that is the whole point of a trap. What we can do is score the deliverability risk so the addresses most likely to be traps, recycled, or unreachable never make it onto your send list. That is how you protect sender reputation at scale.
An invalid address bounces, and the damage stops at your bounce rate. A spam trap accepts your mail and reports you. Recycled traps are abandoned mailboxes providers resurrect to catch senders with stale lists; pristine traps never belonged to a person at all and only exist to catch scraped or purchased data.
The check on this page flags the precursors of both: dead mailboxes before providers recycle them, and the disposable domains that feed trap networks. Re-run anything older than six months through the email verifier before a send.
Most mailbox providers start throttling senders above roughly a 2 % bounce rate, and Gmail and Yahoo’s bulk-sender rules require keeping spam complaints under 0.3 % to stay in the inbox. Spam-trap hits have no published threshold at all; a handful can sink a domain.
A pre-send check keeps you under every one of those lines. Strip the invalids so bounces stay near zero, and the trap-likely addresses so complaints never accrue. The free email validator cleans an entire list in one pass.
99.99 % on our 1,000-address benchmark, self-measured and including the catch-all domains where most checkers shrug. Accuracy matters more here than in plain validation: a false “safe” on a trap-adjacent address costs sender reputation, not just one bounce.
Free and paid run the identical pipeline; the free tier caps volume, never depth. The Email Verification API returns the same per-check breakdown, with an AI-confidence score on every catch-all verdict and volume pricing on the pricing page.
Yes. Upload a CSV and bulk processing scores roughly 10,000 emails per minute on the standard tier, flagging traps, disposables, and dead mailboxes row by row. Your 1,000 signup credits (2,500 with a work email) cover most small lists outright.
Lists decay, so re-check anything that has sat untouched for a quarter. For continuous screening, wire the REST API into your forms, or point an AI agent at the native MCP server and let it screen addresses without glue code.
No. Every address is checked in memory and gone the moment the verdict renders. We never log, retain, or resell what you paste, which matters when the list you’re screening is your customer data.
Verifox is SOC 2 Type II audited, and the privacy policy spells out exactly what touches disk. Spoiler: nothing you check on this page does.
No. This is an address-level spam check, not a message-content scanner. It tells you whether a given email address is risky to send to, a likely spam trap, disposable, or unreachable, not whether your subject line or body copy trips a spam filter.
The two work together: scan your copy with the spam content checker, and clean the recipient list here so your bounce and trap rates stay low. Good content sent to a dirty list still ends up in the junk folder, which is why the address check comes first.
Around 380 ms median for a single address, and under 50 ms when the result is cached. The verdict on this page lands inside two seconds end to end, including the SMTP handshake.
That speed is the point: a spam check only protects you if it can sit inline, screening a signup form or a CRM write before the bad address ever lands in your list. The API docs cover the real-time endpoint and its response shape.