Contact Risk Scoring Before Outreach: How to Read and Use It

Contact risk scoring before outreach answers a narrow question: based on the signals we can see, how risky is it to send to this address? The answer comes as a score and a single decision. In Secwyn, that decision is Send, Review, or Block.

Used well, the score keeps obviously bad addresses out of a campaign and flags the uncertain ones for a person to look at. Used badly, it becomes a false promise that every Send address will land and reply.

This article explains what the score is built from, how to act on each decision, what it cannot tell you, and where it fits after you have found people and guessed their emails.

The Core Problem in This Specific Scenario

Most outreach lists are a mix. Some addresses came from a company website. Some came from a pattern guess like first.last@company.com. Some came from an old spreadsheet that nobody remembers building.

You cannot tell these apart by looking. An address that looks clean may sit on a domain with no working mail setup. An address that looks odd may be perfectly fine.

Sending to all of them has a cost. Bad addresses bounce. Bounces and complaints hurt the reputation of the mailbox you send from. When that mailbox is your own Gmail or Google Workspace account, the damage lands on the same account you use for real customers.

So you need a fast, consistent way to sort addresses before they go out. Checking each one by hand does not scale past a few dozen. A risk score gives every address the same treatment and leaves a record of why it was kept or removed.

The catch is that a score is only as good as the way you act on it. Teams that ignore Review results, or treat Send as a guarantee, lose most of the benefit.

A Targeted Way to Solve It

Treat risk scoring as one step in a longer flow, and give each decision a clear action.

Step 1: Score only contacts you would actually email

Scoring belongs after targeting. First confirm the company is a fit and the person holds a relevant role. In Secwyn, that means matching buyer companies from your description, revealing the ones you want, and finding named people on each company's own website.

There is no reason to spend Audit credits on a contact you would drop anyway for being the wrong role or the wrong company. The full ordering is laid out in the pre-send audit for cold email.

Step 2: Run the check

Enter a single address or domain on the risk check page, or upload a list for a bulk check on the web. Each check uses Audit credits. Results come back with a risk score and a decision. For lists, download the output as CSV or XLSX so you can sort and filter it.

The score draws on signals such as:

• whether the domain exists and is set up to receive mail
• whether the domain looks disposable or temporary
• whether the address follows a role pattern, like sales@ or info@
• other patterns linked to higher risk

Step 3: Act on each decision

Send. No strong risk signals were found. Keep the address in the campaign. Still follow normal sending rules: business hours, sensible daily limits, and a ramp for new mailboxes.

Review. The check found something uncertain. Do not send automatically. Open each row and decide. Common cases:

• A role address such as info@ at a company where you also have a named contact. Use the named contact.
• A guessed address at a domain with an unusual mail setup. Consider reaching the company through its contact page or main phone instead.
• A small company where the role address is the only way in. Sending may be reasonable, but at low volume.

Block. Strong risk signals. Remove the address from this campaign. If the company is still a strong fit, use another channel: the LinkedIn company page, the site's contact page, or the main phone shown on the site.

Step 4: Keep the record

Save the downloaded file with the campaign. If bounces or complaints come back later, you can see which decision each address had and whether Review rows were handled the way you intended.

Where This Approach Fits — and Where It Does Not

Risk scoring fits any B2B outreach where the list includes addresses you did not collect directly from the person. That covers almost all cold outreach.

It fits especially well right after an email pattern guess. Secwyn suggests a likely work email pattern for named people it finds on a company's website, and those guesses are marked unverified. A risk check on each guess catches domain-level and pattern-level problems before you send.

It does not fit as a replacement for consent rules or opt-out handling. A low-risk address belonging to someone who asked not to be contacted should not be emailed.

It also does not tell you whether a specific mailbox exists. That is a separate question, covered in risk decision vs email verification. Secwyn's email verification is coming soon; it is not part of the current risk check.

And it says nothing about whether the person will care about your message. Fit and relevance are decided earlier, by targeting.

Common Misconceptions

"A Send decision guarantees delivery." It does not. Mailbox providers decide what lands in the inbox, and that depends on your sending reputation and content too. Send means no strong risk signals were found in the address and domain.

"A Send decision proves the person works there." The check looks at signals about the address and domain. It does not confirm that a named person still holds that job or that the mailbox is active.

"Review means the address is bad." Review means uncertain. Many Review addresses are fine to use after a quick look. Dropping them all throws away real contacts.

"A higher score threshold is always safer." Over-filtering shrinks a good list to a handful of addresses and pushes teams to buy worse lists to fill the gap. Act on the three decisions instead of inventing your own cutoffs.

Frequently Asked Questions

What is a contact risk score?

It is a summary of risk signals for an email address or domain, turned into one decision: Send, Review, or Block. It helps you decide whether to include the address in outreach.

Is risk scoring the same as email verification?

No. Verification tries to confirm a mailbox exists. A risk decision weighs signals about the address and domain and tells you how to route it. Both are useful, and they answer different questions.

Should I score guessed email addresses?

Yes. Pattern guesses are the addresses most likely to have problems. Scoring them filters out domain-level issues. Because the guesses are unverified, keep sending volume modest.

How do I handle a large list?

Use the web bulk check, then download the results as CSV or XLSX. Filter to Review rows and handle those by hand. Remove Block rows. Keep the file with the campaign.

What does a check cost?

Address and domain checks use Audit credits. New accounts start with a one-time set of Audit credits, and paid plans include a monthly amount. Current numbers are on the pricing page.

What should I do with a blocked contact at a great-fit company?

Do not force the email. Reach the company through the channels shown when you reveal it: the LinkedIn company page, the contact page on its website, or the main phone number listed there.