The sales page says 10,000 leads for $99. What it doesn’t say is that the sticker price is the smallest cost of buying email lists — the real bill arrives later, as bounced sends, spam complaints, a sending domain that mailbox providers stop trusting, and often a suspended account at your email platform. None of that shows up on the invoice, which makes it easy to pretend it isn’t part of the price. So let’s do the math the seller skips.
Why buying email lists looks cheap (and isn’t)
Ten thousand contacts for $99 works out to about a penny per lead. Collecting emails yourself costs a landing page, something worth signing up for, and months of patience. On a spreadsheet, the bought list wins every time.
The spreadsheet is missing six line items.
The bounce bill arrives first
Purchased lists commonly bounce at anywhere from 10% to 50% of addresses — that’s the commonly reported range from people who have tested them, since no seller publishes audited numbers. The mechanism is straightforward: these lists are assembled from scraped websites, old databases, and other resold lists, so a large share of the addresses are simply dead. Mailbox providers watch your bounce rate closely, and a spike tells them you’re mailing people you don’t know. We’ve covered what a single dead address does (and doesn’t do) in what happens when you send email to an invalid address — the short version is that one bounce is harmless and a thousand of them mark you as a careless sender. Once your domain’s reputation drops, recovery takes months, not days, and the damage applies to every email you send in the meantime, including the ones to customers who actually want them.
Spam complaints: the arithmetic is brutal
Nobody on that list opted in to hear from you. A few of them opted in to hear from somebody, years ago, on a website they’ve forgotten. When your unfamiliar name lands in their inbox, the spam button is one click away.
And the thresholds are lower than most people guess. Gmail’s enforcement threshold is a 0.3% spam complaint rate — one complaint per roughly 330 delivered emails. On a list of strangers, staying under that isn’t a plan. It’s a hope.
Spam traps concentrate in sold lists
A spam trap is an address that exists only to catch senders with bad list hygiene — either planted on the web to be harvested, or recycled from a mailbox that died long ago. Where do addresses like that pile up? In exactly the databases that get packaged and resold. A trap never opts in to anything, so finding one on your list is proof the list wasn’t permission-based, and the operators who run traps treat it that way.
Your email platform is not on your side here
Mailchimp, Brevo, Constant Contact, and essentially every mainstream email platform prohibit purchased lists outright in their terms of use. That’s not posturing; their business depends on shared sending infrastructure staying clean. Their compliance systems know the signature of a bought list — a sudden import of thousands of contacts followed by a spike in bounces and complaints — and respond with warnings, forced list removal, or account suspension. Plenty of buyers learn about the rule only when the account freezes mid-campaign.
The legal picture depends on where your recipients live
This one needs careful phrasing, because it genuinely varies. If any of your recipients are covered by GDPR, you need a lawful basis to email them, and “I bought their address” is not one. Other regions draw the lines differently — some allow unsolicited commercial email under conditions, others require prior consent explicitly. Sellers love the phrase “GDPR-compliant list,” which should raise an eyebrow: compliance depends on how you obtained permission, not on the seller’s say-so. None of this is legal advice. Before sending anything, check the rules where your recipients live, not where you are.
“Fresh” is a marketing word, not a measurement
The same database gets resold to buyer after buyer, sometimes for years. Meanwhile the data underneath keeps aging: people change jobs, abandon inboxes, companies fold. Even well-kept lists lose a meaningful share of their valid addresses every year to list decay — and a resold list was never well-kept. When a seller says “fresh,” ask for the date the addresses were collected. You won’t get a straight answer, and that is the answer.
The math on that $99 list
If you’re weighing whether you should buy an email list, here’s the honest version of the pitch. Every number below is illustrative — real lists vary wildly, which is itself part of the problem — but the shape of the math holds.
| Contacts | What’s left | |
|---|---|---|
| What the seller sold you | 10,000 | 10,000 — about $0.01 each |
| Hard bounces at 30% (illustrative mid-range for purchased lists) | −3,000 | 7,000 |
| People who never engage — no relationship, no recognition; assume 95% of the remainder | −6,650 | 350 |
| Contacts who might actually respond | ≈350 — about $0.28 each |
So the realistic per-contact price is roughly 28 times what the seller claimed. And that still ignores the complaint budget: if all 7,000 deliverable emails go out, Gmail’s 0.3% threshold leaves you headroom for about 21 complaints. From 7,000 strangers, that’s not much of a cushion.
The biggest cost isn’t in the table at all, because it can’t be priced per contact. A damaged domain reputation follows everything you send from that domain — receipts, support replies, the newsletter your real subscribers asked for. That’s the asymmetry that makes this a bad trade: the upside is a few hundred maybe-contacts, the downside is your domain.
Already bought one? Here’s the calm version
No lecture. You have the file; the question is what to do with it. The risks that come with a purchased email list don’t disappear after checkout, but they can be managed.
Don’t import it into your email platform raw. That single move triggers everything above at once — the bounces, the compliance flags, the suspension risk. Whatever else you decide, skip that step.
Verify it before anything else. Running the file through bulk email verification splits the salvage from the poison: which addresses exist, which are dead, which are risky, and which look like traps. Expect a meaningful share to fail. That’s normal for purchased data, and it’s far better to learn it from a verification report than from your bounce statistics.
Be honest about what verification fixed. It fixed the deliverability risk. It did not fix consent. The valid remainder still consists of people who never agreed to hear from you, and any of them can still press the spam button. So the safest uses for that remainder are modest ones: careful, low-volume, well-targeted outreach where the rules covering your recipients actually permit it — or treating the file as market research (who’s in this space, which companies, which roles) rather than as a send list.
The better $99
The alternative isn’t “spend nothing.” It’s spending effort instead of money, on a list that compounds instead of decays.
A signup form with real-time validation collects far fewer addresses than a $99 file — but every one of them chose to be there, and contacts like that open, click, and almost never complain. A decent lead magnet (a checklist, a template, a small free tool) keeps the form fed. Lists built this way grow slowly at first and then keep growing, which is the one thing a bought list can never do.
For B2B outreach there’s a middle path that keeps you in control of data quality: collect public business directory listings yourself with a tool like Reoon YellowPages Scraper, so you know exactly where every contact came from and how fresh the collection date is. Then apply the same discipline you’d apply to any imported data: verify scraped contacts before any outreach, and follow the outreach rules that apply to your recipients.
Either way, one habit protects you: never send to an address you haven’t checked. If a list is sitting on your drive right now — bought, scraped, or exported from an old CRM — you can verify a sample of it free with Reoon’s daily credits, no card required, and see for yourself how much of it is real. That number will tell you more about the seller than any sales page ever will.
FAQ
Is buying email lists illegal?
It depends on where your recipients are. Emailing GDPR-covered recipients requires a lawful basis, which a purchased list almost never provides. Other jurisdictions regulate commercial email differently — some permit unsolicited B2B email under conditions, others require prior consent. There is no single answer, which is exactly why the safe move is checking the rules for where your recipients live, not where you are. (This is general information, not legal advice.)
Can I clean a purchased email list with an email verifier?
For deliverability, yes — verification identifies the dead, risky, and trap-like addresses so they never get the chance to bounce or burn your reputation. For consent, no. Verification tells you an address exists; it cannot tell you the person agreed to hear from you. A verified purchased list is safer to send to, not automatically fine to send to.
Why do purchased email lists bounce so much?
Because of how they’re built and how long they circulate. The addresses come from web scraping, old databases, and earlier resold lists, and every resale adds age. People change jobs and abandon mailboxes constantly, so even a file collected two years ago has lost a large slice of its valid addresses — and most sold files are older than the listing admits.
What should I do with a list I already bought?
Don’t import it into your email platform as-is. Verify it first to strip out invalid and dangerous addresses, then treat what remains with caution: low-volume, carefully targeted outreach where the law permits, or plain market research. And consider putting the next $99 toward collecting contacts you won’t have to apologize for.
