Email Senders Who Buy Your Address: How They Got It
Most cold email senders bought your address. Here is the data broker ecosystem, the typical price points, and what you can actually do about it.
Most strangers who email you cold did not find your address themselves. They bought it. The data broker ecosystem that sells email addresses is large, mature, and largely unregulated. This post is about how the ecosystem works, why your address is in it, and what you can actually do about it.
The Data Broker Ecosystem
The major B2B contact databases.
Apollo.io. One of the largest. Sells access to 250+ million B2B contacts at subscription pricing. Common entry point for outbound sales tooling.
ZoomInfo. Enterprise-tier. Sells higher-quality verified contacts at premium pricing. Common for enterprise sales teams.
RocketReach. Mid-tier. Subscription-based access to a broad contact database. Common for individual contributors and smaller sales teams.
Hunter.io. Specialized in finding email addresses given a name and company. Smaller but widely used.
Lusha. Focused on direct contact information including phone numbers. Subscription-based.
Clearbit. Acquired by HubSpot. API-based contact enrichment for marketing automation.
LinkedIn Sales Navigator. LinkedIn’s own contact database, accessed through paid tier.
Niche brokers. Hundreds of smaller specialized providers covering specific industries, geographies, or seniority levels.
The brokers compete on data freshness, verification accuracy, coverage, and pricing. Together they provide near-total coverage of professional email addresses in major markets.
How They Compile the Data
The aggregation methods.
LinkedIn scraping. LinkedIn profiles are public information. Brokers scrape profiles, then guess email addresses based on common corporate patterns (firstname.lastname@company.com, etc.). Verification confirms which guesses work.
Company website scraping. Email addresses listed on company team pages, contact pages, and footer disclosures.
Professional directory scraping. Industry-specific directories (lawyer directories, medical directories, real estate listings) where members publish contact information.
GitHub scraping. Email addresses associated with GitHub commits and profiles.
Conference attendee lists. Sometimes obtained through partnerships or scraped from public attendee lists.
Data partnerships. Brokers swap data with each other and with marketing services. An address that enters one ecosystem propagates across many.
Breach data laundered through “skip tracing.” Some brokers use breach data indirectly by claiming to use only “publicly available” sources after the data has been laundered through enough intermediaries.
Email pattern guessing plus verification. A common technique: guess the pattern, then check whether the guess accepts mail. Verification can be done quietly without ever sending a real email; SMTP probing reveals which addresses exist.
The result is that any professional with a public profile or company affiliation has their email in many broker databases.
Typical Pricing
What the lists actually cost.
Apollo Pro tier. Around $99/month for individual access. Generous credits per month for accessing contact records.
ZoomInfo Professional. Several thousand per year for individual access; enterprise pricing for teams.
RocketReach. Around $50-100/month for moderate-volume access.
Hunter.io. Around $50/month for moderate volume.
Bulk list purchase. $5,000-$15,000 for 50,000 verified records, depending on quality and segmentation.
Per-record retail. $0.10-$1 per verified record.
Per-record at scale. As low as $0.01-$0.05 per record for large purchases or syndicated data.
The economics make purchase the dominant acquisition method for cold outreach. A sales team can be running a 100,000-record campaign within a week of incorporating, for less than the cost of a junior employee’s monthly salary.
What This Means for the Volume You Receive
The implications for your inbox.
Your address is in many databases. Probably 5-20 different broker systems if you have been professionally active for several years.
New senders find you constantly. As new SaaS companies start, they buy lists. Each new entrant adds your address to their outreach. The volume keeps increasing as more companies enter.
Removing from one broker does not remove from others. Each broker has its own database. You have to opt out of each one individually.
Removal is incomplete. Even after opting out, your address may persist in cached data, secondary brokers who bought from the primary, or in data that has propagated to thousands of customers’ CRMs.
Re-acquisition happens. Even after thorough cleanup, your address gets re-added when brokers refresh their data from public sources.
The structural reality is that you cannot fully remove your address from the data broker ecosystem. You can reduce your presence; you cannot eliminate it.
What You Can Actually Do About Removal
The practical options.
Opt out from major brokers. Apollo, ZoomInfo, RocketReach, Hunter, Lusha, Clearbit all have opt-out forms. Submitting them takes 30-60 minutes total. Reduces your presence in the major databases.
LinkedIn privacy settings. Limit who can see your profile. Reduces scrape availability. Does not remove existing scraped data.
Avoid public contact pages. If your address does not appear on your company’s contact page or your personal site, it is harder to find. Does not help if your address has already been harvested.
Use aliases for new exposure. When signing up for new services, use aliases. Limits the propagation of your real address. We covered this at email address hygiene: should you use aliases.
Periodic re-opt-out. Every 6-12 months, re-submit opt-out forms to major brokers. Catches new data that was added since the last opt-out.
Accept that complete removal is impossible. The realistic stance is reduction, not elimination. Set your expectations accordingly.
Why Removal Has Diminishing Returns
The structural problem with relying on removal as a defense.
The brokers profit from having data. Their incentive is to acquire and keep your information. Opt-outs are minimum-compliance measures, not core to their business model.
The data ecosystem is fragmented. Hundreds of brokers exist; you can only practically opt out from a fraction.
Re-acquisition happens automatically. Brokers refresh their data continuously. Your address comes back from public sources.
Cached and propagated data persists. Even after removal from a primary broker, your address may exist in customer CRMs that bought it before your removal.
Compliance regimes are weak. Outside GDPR jurisdictions, enforcement is limited. Even within GDPR, enforcement is uneven.
The honest assessment: removal helps at the margin but does not solve the volume problem.
What a Cover Charge Does Structurally
The structural answer addresses the demand side rather than the supply side.
The brokers exist because cold outreach is profitable. Their economic justification depends on customers who profit from cold outreach.
Cold outreach is profitable because cost-per-send is approximately zero. A four-cent cover charge changes that math.
At any nonzero cost per recipient, indiscriminate cold outreach becomes uneconomical. A campaign at 50,000 records that previously cost effectively zero now costs $2,000. The unit economics that drive the data broker ecosystem stop working.
The brokers’ customers shrink. When cold outreach is less profitable, fewer companies buy lists. The brokers either reduce prices (which still does not fix the unit economics for buyers) or lose customers.
Your address remains in databases, but it stops getting acted on. The data exists; the act of using it costs more than the campaigns can support.
The shift is structural. Removal targets the data; the cover charge targets the act of using the data. The latter is more durable because it does not depend on convincing each broker individually.
What This Does Not Do
Three things to be clear about.
It does not remove your address from broker databases. The data exists; the cover charge just makes acting on it expensive.
It does not stop targeted outreach. Senders genuinely interested in reaching you specifically can pay the cover charge. The volume drops; the targeted outreach continues.
It does not address the underlying privacy concern. If you have philosophical issues with your data being for sale, the cover charge does not fix that. Removal advocacy and broader regulation are the appropriate tools for that concern.
The realistic outcome: less volume reaching the inbox without requiring you to fight the data broker ecosystem.
A Specific Honest Note
Most cold senders bought your address. The data broker ecosystem is mature and unlikely to disappear. Removal is partial and ongoing; complete elimination is not realistic.
The structural answer is to change the economics of using the data rather than fighting to remove it. A cover charge gate makes mass-volume cold outreach uneconomical regardless of where the addresses came from. The brokers can keep selling your address; the buyers stop being able to profitably blast you.
For the related guides, see why am I getting so much spam, the anatomy of modern cold outreach, data breach lookups: was your email leaked, and email address hygiene: should you use aliases. For the broader frame, see what is an email paywall and your inbox is a marketing battlefield. Rythm is $1.65 per month, cancel anytime.