Back
Email Verification Online: I Ran the Checks on 5 Addresses — Here's What 'Valid' Really Means

Email Verification Online: I Ran the Checks on 5 Addresses — Here's What 'Valid' Really Means

Sophia Bennett
Written by Sophia Bennett Privacy Researcher & Software Developer
Fact-Checked Nov 13, 2026 17 Views
Share article:
TempoMail USA App Get OTPs faster on the app!
Get the App
Advertisement

Nobody types "email verification online" because they enjoy the phrase. They type it because they are staring at an address and need one answer: is this real? Sometimes the address is their own, typed into a signup form that just rejected it. Sometimes it belongs to a lead, a customer, or a stranger who emailed first. Sometimes it is an address they are about to send money or a job offer to. The tools that answer all use the same word — "valid" — as if that settled the matter. It does not. I ran the same checks those tools run, on five addresses, and read the pages currently ranking for this keyword before writing this one. Here is what a "valid" result actually proves, what it never proves, and the minute of manual checking that tells you more than most free tools will.

Two different jobs share one name

"Email verification" means two different jobs, and the ranking pages almost never say which one they do.

Job one is checking whether an address can receive mail. You paste an address into a box, the tool runs a few lookups, and it tells you deliverable, risky, or undeliverable. Nothing is sent, nobody clicks anything, and the address owner never knows you checked. This is the job behind this keyword, and the job this guide is about.

Job two is proving that an address belongs to you. A service emails you a six-digit code, you type it back, and the service now believes you control the inbox. That is a different mechanism — the code is the proof, not the address — and no online checker can do it for you, because the proof requires access to the inbox itself. If you are the one signing up somewhere, you do not need a verifier at all: you need an inbox and a code. Our guide to how to verify an email address covers five methods for that side, and our explainer on verification codes covers what those six digits are and why they expire in minutes.

Keep the two jobs apart and half the confusion around this topic disappears. A verifier answers "could mail reach this address?" It never answers "does this person own it?" — and any page that implies otherwise is selling a stronger claim than the technology supports.

The test: five addresses, four answers

Advertisement

The core of every online verifier is a mail-routing lookup: does the domain after the @ publish MX records, the DNS entries that say which server accepts its mail? No MX records, no delivery — the address is dead on arrival, whatever the spelling looks like. I ran that lookup myself tonight on five addresses, using the same DNS query a verifier runs first.

Five envelope cards on a workbench, each with a green, red or amber status light above it
Address checkedMX records foundWhat it means
someone@gmail.comYes — alt1, alt3, alt4.gmail-smtp-in.l.google.comRoutable. Mail has somewhere to go.
someone@gmial.comNoneDead. The domain publishes no mail servers at all.
test@guerrillamail.comYes — mail.guerrillamail.comRoutable — and disposable. A real inbox, just not a permanent one.
test@temp-mail.orgYes — three Cloudflare MX hostsRoutable — and disposable. Same story, different provider.
test@yopmail.comYes — smtp.yopmail.comRoutable — and disposable. One of the oldest throwaway services there is.

Four of the five are "valid" in the only sense a routing check can establish, and one of them — gmial.com, the classic transposed-letter typo of gmail.com — is dead before any further check runs. That single row is the most useful thing a free verifier does for an ordinary person: it catches the typo before you send a password reset, a contract, or a job application into a void.

The three disposable rows are the more interesting ones. All three publish real MX records. All three can receive mail right now. A checker that only looked at routing would call them valid, and it would be right — and it would also be telling you almost nothing you actually wanted to know, because "can receive mail" and "is a real person's permanent address" are different questions, and the disposables answer yes to the first and no to the second. That is why the better tools add a second layer: a maintained list of disposable domains. ToolTrace says it checks against around 9,000 of them; DBI Infomatics says its list runs past 12,000. I did not verify those list sizes independently — they are the tools' own claims, and list sizes are easy to inflate — but the mechanism is real, and it is the difference between a routing check and a verification. The MX lookup tells you the door exists. The disposable list tells you the door belongs to a hotel, not a home.

The four layers a real check runs

A serious online verifier runs four layers, in order, and each layer can only fail the address in its own way. Knowing the layers is what lets you read a result instead of just accepting it.

Layer one: syntax. Does the address conform to the shape of an email address — something, an @, a domain, a dot, a top-level domain? This catches the missing @, the space in the middle, the double dot. It is instant, it never touches the network, and it is the layer most people could do by eye. It proves nothing about delivery: an address can be perfectly formed and point at a domain that has never existed.

Layer two: DNS and MX. Does the domain exist, and does it publish mail servers? This is the lookup I ran above, and it is where most real-world failures live: typos in the domain, lapsed domains, domains that never had mail set up. A domain with no MX records cannot receive mail, full stop — there is nowhere for the sending server to hand the message. Note the asymmetry: a domain with MX records might still reject the specific address. MX only proves the building has a mailroom. It says nothing about whether the person you named works there.

Layer three: the SMTP handshake. The verifier opens a connection to the domain's mail server and asks, politely and without sending anything, whether it would accept mail for this exact recipient — the RCPT TO command — then closes the connection before any message is delivered. This is the layer that separates "the domain receives mail" from "this mailbox exists", and it is the layer every serious tool advertises. It is also the layer with the most honest caveats, and the ranking pages mostly bury them: many servers accept the recipient command without revealing whether the mailbox exists, some deliberately return inconclusive answers, and some greylist or block the check outright. ToolTrace says so plainly on its own page — "a passive check cannot reliably prove that a person owns an inbox" — and Hunter labels the inconclusive cases "Unknown" rather than guessing. When a tool tells you it cannot tell, believe it. That is the tool being honest, not broken.

Layer four: risk flags. Is the domain on a disposable list? Is the address a role address — info@, sales@, admin@ — that goes to a team, not a person? Is it a free consumer provider or a company domain? Does the domain accept mail for any address (catch-all), which makes the layer-three answer meaningless? This layer is judgement, not routing, and it is where tools differ most. 1Lookup publishes its own numbers, refreshed daily: of the 209,783 addresses verified on its platform between 5 September and 4 October 2026, 88.4% were deliverable, 4.0% undeliverable, and 3.9% risky because their domain accepts mail for any address. Another 4.9% were role addresses and 0.1% disposable. Those are its customers' lead lists, not a random sample of the internet — do not read them as the internet's averages — but they show the shape of the problem: roughly one address in twelve is undeliverable or risky, and the risky ones are mostly catch-all domains, not typos.

What "valid" does not mean

This is the section the ranking pages should have and mostly do not. A "valid" or "deliverable" result means, at most: the address is well-formed, the domain exists, it publishes mail servers, and the server did not reject this recipient when asked. It does not mean any of the following.

An open mailbox with an envelope inside and a large question mark floating above it

It does not mean someone owns the inbox. Ownership is proven by receiving a code and typing it back, not by a routing check. A verifier never logs into anything. If you are checking whether a seller, a candidate, or a new contact is who they say they are, a green "valid" badge tells you their address can receive mail. It tells you nothing about who reads it.

It does not mean the mail will land in the inbox. Deliverable means the server accepted the recipient. Inbox placement — primary tab versus spam folder versus silent rejection — is a separate decision made by spam filters, reputation scores, and content rules after acceptance. A valid address on a domain with a ruined reputation can still eat your mail.

It does not mean the address will stay valid. Disposable inboxes are valid until they expire — thirty days on a free TempMailUSA inbox, a year on Pro — and then they are gone. The check is a snapshot, not a warranty. If you verified a list in October and mail it in January, re-verify it. Hunter's own pricing hints at this: re-verifying the same address in the same month is free, because the result is expected to go stale.

It does not mean the check worked. Catch-all domains accept mail for any address, including ones that were never created — 3.9% of 1Lookup's verified volume, by its own count. On a catch-all domain, the SMTP layer returns "accepted" for a made-up name, and the honest result is "risky" or "unknown", not "valid". A tool that reports a catch-all domain's random address as cleanly deliverable is not verifying anything; it is repeating the server's politeness back to you.

My opinion, after reading the ranking pages side by side: the best of them — ToolTrace and 1Lookup in particular — are unusually honest about these limits, and their pages are worth reading. The worst pattern is the page that lists its accuracy as 99.2% or 99.8% without saying what was measured, against what, or by whom. Accuracy claims without a corpus are decoration. 1Lookup at least names its corpus and its dates; ToolTrace names its 97.9% figure as an audited validation corpus with zero false positives. The others just print a number. Treat a bare percentage the way you would treat a bare "valid": as a claim waiting for evidence.

The free limits, as the tools state them

Nobody puts the limits side by side, so here they are, taken from the tools' own pages as they stand today:

  • Hunter — 5 free checks a day, no signup; free plan covers 100 verifications a month, no credit card. A verification costs half a credit on its outreach plans.
  • ToolTrace — free for up to 100 checks a day, no account. The API takes batches of up to 500 addresses, duplicates in a batch charged once.
  • DBI Infomatics — 20 free verifications a day, resetting at midnight IST, no registration or card. It claims a sub-1.8-second average response and 99.2% handshake accuracy.
  • 1Lookup — one address at a time free, no signup, with a small daily limit per visitor; lists cost one credit per address, about half a cent on its Starter plan, with a seven-day free trial.
  • ReachStream — single emails free with no signup; lists start with a 30-day trial of 100 credits, one credit per address, and it claims 99.8% accuracy.

Two things stand out. First, the free tier is designed for the occasional check — the person verifying one address before sending something important — not for list cleaning. If you need to verify a thousand addresses, you are a paying customer at every one of these tools, and that is the business model working as intended. Second, the daily limits are per visitor and they reset — so if you hit Hunter's five and still need more, waiting a day or trying another tool's free tier is the honest route. Do not pay for what the free tier already gives you, and do not build a workflow on a free tier that was never meant to carry one.

When the answer is a temp inbox instead

There is a second reason people search this keyword, and it is the one this site is actually about. Sometimes the address you are checking is not someone else's — it is the one a signup form just handed you, or the one you are about to give away. The verification question flips: instead of "is this address real?", it becomes "how do I get through this form without giving them my real address?" The answer is a disposable inbox, and the mechanics are the mirror image of everything above.

Advertisement

A temp inbox is a real address with real MX records — remember the three disposable rows in my test — so it passes the routing checks a signup form runs. The form sends its code, the code lands in the temp inbox, and you read it there. That is job two, the ownership proof, done with an address you can throw away. You can try it in seconds on the TempMailUSA homepage — no signup, no payment, an address appears on load.

The catch is the same one the risk flags warn about: some services block disposable domains outright, and then no verifier result in the world helps you — the block is aimed at the domain, not the address. When that happens the fix is a different domain, not a different address on the same one. Our test of the best temp email services put four services through one real Microsoft signup and found only one delivered the code — the domain matters more than the service name.

And the code itself deserves a mention, because the two halves of this topic meet there. The six digits in your inbox are read by tools of their own — some of them are called OTP scanners, and the name hides three different tools — and our guide to OTP scanners sorts out which one you are actually looking at. Use the code the moment it lands: codes expire in five to fifteen minutes, while the inbox around them lasts for weeks, and the most common failure in this whole area is not a bad address but a good code read too late.

Do it yourself in sixty seconds

You do not need a tool for the single most useful check. Here is the manual version — the same first two layers the tools run — and it takes about a minute.

First, read the address out loud, slowly, character by character. Most failures are typos — gmial for gmail, an extra letter, a missing dot — and your eyes will skip them at reading speed. Saying the address forces you to see it.

Second, check the domain's MX records. On any computer, open a terminal and type dig MX domain.com — or paste the domain into any free MX lookup page if the terminal is not your thing. If the answer comes back empty, the address cannot receive mail, and no further checking is needed. If MX records come back, the domain has a mailroom. That is the whole test, and it is the same answer the first two layers of any verifier would give you, without handing your query to a third party or spending one of your five free checks.

Third, ask whether the domain is disposable. You know the big names by now — guerrillamail, yopmail, temp-mail — and a quick search of the domain name plus "temp mail" settles the rest. If it is disposable, the address is real but temporary: fine for a one-off code, wrong for a customer you expect to email next year.

What you cannot do manually is the SMTP handshake — that takes a mail server's cooperation and a tolerance for being greylisted — and that is the one layer worth spending a free check on. Use the manual method for the routing question, and save the tool for the mailbox question. That division of labour is the entire practical content of this guide: the easy checks are yours, the hard one is theirs, and the judgement about what "valid" means is nobody's but yours.

FAQ

How can I verify an email address online for free?

Paste it into a free checker — Hunter allows five free checks a day with no signup, ToolTrace allows 100 a day, DBI Infomatics 20 a day — or run the manual check: read the address aloud for typos, then look up the domain's MX records. No MX records means the address cannot receive mail. A green result means the address is routable; it does not prove anyone owns it.

Is an online email verifier accurate?

For routing, yes: syntax, DNS, and MX checks are deterministic. For the mailbox question, accuracy is limited by the receiving server — some servers accept any recipient, some greylist, some block checks. 1Lookup reports 88.4% deliverable across the 209,783 addresses it verified in the month to 4 October 2026, with 3.9% risky because of catch-all domains. Treat bare "99% accurate" claims without a named corpus as marketing.

Does email verification send an email to the address?

No. A verifier checks the format, looks up the domain's mail servers, and asks the server whether it would accept mail for that recipient — then closes the connection before anything is delivered. The address owner never sees the check. Ownership is proven separately, by sending a code the owner has to type back.

What does it mean if an email is valid but disposable?

It means the address is real and can receive mail right now, but it belongs to a throwaway service and will expire. Disposable domains publish genuine MX records — I verified three of them live — so they pass routing checks. Verifiers flag them through disposable-domain lists, not through the routing check. Use one for a one-off signup code; do not use one for an account you will need next year.

Why did a valid email address bounce?

Because "valid" was a snapshot of routing, not a delivery guarantee. The mailbox may have been deleted since the check, the domain's reputation may have landed your mail in a spam folder or a silent reject, or the address may sit behind a catch-all domain that accepts everything and delivers nothing. Re-verify before an important send, and check whether the bounce message says the mailbox does not exist or the message was rejected for policy reasons — those are different failures.

Can I verify an email address without a tool?

Yes, for the routing half: check the spelling, then run dig MX domain.com in a terminal or use any free MX lookup page. An empty result means the address is dead. What you cannot do by hand is the SMTP mailbox check — for that, spend one of the free checks on Hunter, ToolTrace, or 1Lookup, and read "risky" or "unknown" as an honest answer, not a failure.

The bottom line

Email verification online is a smaller tool than its name suggests, and a more useful one than its critics admit. It answers one question well — can mail reach this address? — and three questions not at all: who owns it, whether the mail will be seen, and whether the address will exist next month. I ran the routing check on five addresses and the results were exactly as unglamorous as the technology promises: Gmail routable, a typo dead, three disposables alive and flagged by list, not by routing. The free tools will do the same checks for you, five to a hundred times a day depending on whose free tier you are on, and the best of them are honest about where their answers stop. Use the manual MX check for the routing question, spend a free check on the mailbox question, and keep the judgement — what "valid" is worth to you — for yourself. That is the whole job, and it takes about a minute once you know which question you are actually asking.

Need a disposable temporary email?

Protect your real inbox from spam and promotional clutter instantly and free.

Generate Now

Received a suspicious email, text, or charge alert?

Verify whether the sender domain is disposable, spoofed, or unverified before clicking links.

Verify Email Sender

Take TempoMail USA anywhere

Faster OTPs, instant push notifications, and offline inbox access — free on Android.

Get it on Google Play
Advertisement

Join the Conversation 0

Join the discussion

Log in to share your thoughts, ask questions, and reply to others.

Log In or Sign Up

Be the first to share your thoughts on this article!