Skip to content

// email intelligence

Mailbox Verification

GlossaryEmail intelligenceUpdated March 23, 2026

Definition
The process of confirming that a specific email mailbox exists, is active, and can accept incoming messages.

Mailbox verification is the process of confirming that a particular email mailbox is real, active, and capable of receiving messages. It goes beyond checking email syntax or domain validity mailbox verification determines whether the specific user account exists on the mail server. This is the deepest level of email verification and the most reliable way to ensure deliverability before sending outreach.

The verification process involves querying the mail server to check for the existence of the target mailbox. This can reveal whether an address is valid, invalid, or risky. Risky addresses include catch-all domains where the server accepts all incoming mail regardless of the recipient, disposable email addresses, and role-based addresses like info@ or sales@ that may not reach a specific person.

For B2B sales teams, mailbox verification is a critical step before launching any outreach campaign. Sending to unverified addresses leads to hard bounces, which signal to email service providers that you may be a spammer. Over time, high bounce rates can cause your domain to be blacklisted, preventing your emails from reaching anyone.

Key Points

  • Mailbox verification confirms the existence and activity of a specific email account on a server
  • It identifies valid, invalid, risky, and disposable addresses to guide sending decisions
  • Verification before outreach prevents bounces and protects domain sender reputation

Best Practices

  • Verify every email address before including it in an outreach campaign or sales sequence
  • Pay attention to risky classifications like catch-all and disposable addresses
  • Re-verify addresses periodically as mailbox status can change over time due to data decay

Free Tools

// 02 · in practice with tomba

The API calls behind this term

Verify an address before it reaches a sequence, and find the right one when you only have a name and a company domain.

// quick start

Make your first call in a minute

Free account, real API key, the same endpoints Enterprise customers use.

  1. 1Create a free account25 searches a month. No card.
  2. 2Copy your key and secretFrom API keys in the dashboard.
  3. 3Call the APIPaste the request; the answer is JSON.
curl "https://api.tomba.io/v1/email-finder?domain=piedpiper.com&first_name=Richard&last_name=Hendricks" \
  -H "X-Tomba-Key: $TOMBA_API_KEY" \
  -H "X-Tomba-Secret: $TOMBA_SECRET_KEY"
Response
200 OK· 1 search credit
{
  "data": {
    "email": "richard@piedpiper.com",
    "first_name": "Richard",
    "last_name": "Hendricks",
    "full_name": "Richard Hendricks",
    "website_url": "piedpiper.com",
    "company": "Pied Piper",
    "pattern": "{first}",
    "department": "executive",
    "type": "personal",
    "position": "CEO",
    "country": "US",
    "gender": "male",
    "twitter": null,
    "linkedin": "https://www.linkedin.com/in/richard-hendricks",
    "score": 100,
    "accept_all": false,
    "phone_number": true,
    "verification": {
      "date": "2025-01-15T10:32:00+01:00",
      "status": "valid"
    },
    "sources": [
      {
        "uri": "https://piedpiper.com/blog/engineering",
        "website_url": "piedpiper.com",
        "extracted_on": "2024-06-01T09:14:07+01:00",
        "last_seen_on": "2025-01-10T17:02:44+01:00",
        "still_on_page": true
      }
    ],
    "phone_data": []
  }
}