Blacklist / Blocklist

A list of IPs or domains flagged for sending spam. Being listed can block or filter your emails. Good sending practices help avoid it.

Some blocklists are managed by ISPs while other blocklists are operated independently and are sometimes referred to by ISPs to filter out bad actors.

It's important to note that not all blocklists carry weight in the decision-making of ISPs. Some blocklist operators even accept compensation to remove a sender from their list, even if that listing is not materially impacting deliverability. Not all blocklists are created equal!

How blocklists work

A blocklist (still called a blacklist by many tools) is a database of IP addresses or domains that an operator believes are sending spam. Mailbox providers and corporate spam filters query these lists in real time when a message arrives. If your sending IP address, your from domain, or a domain used in your links appears on a list they trust, the message can be rejected outright, sent to spam, or quietly dropped.

Listings are triggered by evidence, not opinion. Common causes are hitting spam traps, a spike in complaints from recipients marking mail as spam, sending to a large number of invalid addresses, and compromised accounts or servers relaying unwanted mail. Each list has its own rules for what gets you on and how long you stay.

Which blocklists actually matter

The lists with the most influence on delivery are the ones major providers and filtering vendors consult. Spamhaus runs the most widely used ones: the SBL for known spam sources, the XBL for compromised machines, the PBL for IP ranges that should not send mail directly, and the DBL for domains. Spamhaus listings can stop mail at a large share of mailbox providers, so they deserve immediate attention. Other lists that filtering products reference include Barracuda, SpamCop, and SURBL and URIBL for link domains.

Beyond the public lists, every large mailbox provider runs its own internal reputation system. Gmail, Microsoft, and Yahoo do not publish these and you cannot request removal from them. Their internal scoring, driven by engagement and complaint rates, matters more to day-to-day deliverability than most public blocklists.

Not every list carries weight. Some small operators list aggressively and charge for removal. If a listing is not appearing in your bounce messages, it is probably not affecting your delivery, and paying to be delisted is never necessary on a reputable list.

How to check whether you are on a blocklist

• Read your bounces. A hard bounce that mentions a blocklist by name, often with a 550 5.7.1 code and a lookup URL, is the clearest signal. Your ESP's bounce log or feedback loop reports will show these.
• Run a lookup. MXToolbox and similar tools check your IP and domain against dozens of lists at once. Spamhaus offers a direct lookup on its site.
• Check provider tools. Google Postmaster Tools reports your domain and IP reputation at Gmail. Microsoft SNDS does the same for Outlook. These reveal internal reputation problems that no public list will show.
• Watch delivery by provider. A sudden drop in delivered or opened mail at a single provider, while others look normal, often points to a listing or reputation issue at that provider.

How to get delisted

Most reputable lists remove entries automatically once the problem stops, or accept a removal request through a form. Before requesting removal, fix the root cause: pause the campaign that caused complaints, remove invalid and unengaged addresses, close any open relay or compromised account, and confirm SPF, DKIM, and DMARC are passing. Requesting removal without fixing the cause usually leads to a relisting, and repeat listings take longer to clear.

If you send through a shared IP pool at an ESP, the provider handles delisting for the pool, but your sending behavior still affects everyone on it. Persistent problems usually end with the ESP moving or suspending the account.

How to stay off blocklists

• Only send to people who asked. Use double opt-in where practical and never import purchased or scraped lists, which are the most common source of spam traps.
• Keep the list clean. Remove hard bounces immediately, suppress addresses that have not engaged in months, and validate addresses collected through forms. See list hygiene.
• Authenticate every domain you send from. Aligned SPF, DKIM, and DMARC are baseline requirements at Gmail and Yahoo for bulk senders.
• Make unsubscribing effortless. A one-click unsubscribe is far cheaper than a spam complaint. Complaint rates above 0.3 percent at Gmail put your domain at risk.
• Warm up new IPs and domains gradually. Sudden volume from an unknown sender looks like an attack to most filters.
• Monitor continuously. A weekly blocklist check and a look at Postmaster Tools take minutes and catch problems before they compound.