Suped

What is an acceptable bounce rate threshold and how does it affect sender reputation?

Michael Ko profile picture
Michael Ko
Co-founder & CEO, Suped
Published 20 May 2025
Updated 23 May 2026
8 min read
Summarize with
A calm editorial thumbnail about acceptable email bounce rate thresholds.
An acceptable bounce rate threshold is under 2% total bounces for normal email programs. For hard bounces, I want the rate under 1%, and I suppress confirmed invalid addresses after the first clear hard bounce. For a first send to newly collected addresses, I can tolerate a higher non-existent address rate, but I still want it below 4%. On repeat sends, non-existent address failures should be below 1%.
The short version is that both percentage and volume matter. Percentage tells mailbox providers how clean your list is. Volume tells them how much bad mail you are trying to push into their systems. A 20% bounce rate on 1,000 contacts is a data-quality problem that can be fixed before much damage is done. A 5% bounce rate on 1,000,000 contacts is a much louder signal because every twentieth address is failing at scale.
Bounce rate affects sender reputation because repeated delivery attempts to invalid, disabled, over-quota, or policy-rejected mailboxes tell receivers that the sender is not managing consent, list hygiene, suppression, or acquisition sources well. Bounces are not the only reputation signal, but they are one of the fastest ways to show that a sending program has weak controls.
Bounce rate threshold bands
Use these bands for normal marketing and lifecycle mail, then tighten them for high-volume or sensitive domains.
Healthy
0-2%
Normal sends with clean data and stable suppression logic.
Investigate
2-5%
A visible data-quality issue, especially if hard bounces are rising.
High risk
5%+
Stop the source, isolate the segment, and fix suppression before scaling.

The threshold I use

I treat 2% total bounces as the practical ceiling, not the goal. If a sender is consistently below 2%, it usually means the collection process, validation, and suppression rules are working. It does not prove that subscribers gave meaningful permission or that the mail is wanted, but it does show the address data is not obviously broken.
The better target depends on the type of send. A first campaign to a newly collected list has more uncertainty, so I separate it from established recurring mail. After the first send, there should be very few unknown users left. If the same source keeps producing hard bounces, the acquisition source is the problem, not the suppression rule.

Send type

Target

Action

Normal campaign
<2%
Monitor trend
Hard bounces
<1%
Suppress fast
First send
<4%
Review source
Repeat send
<1%
Fix process
Any spike
2x normal
Pause segment
Practical bounce thresholds for common send types.
Do not average away a real problem
A low account-wide bounce rate can hide one bad import, one bad partner feed, or one failing recipient domain. I always split bounce rate by source, campaign, recipient domain, hard bounce reason, and send age. The dangerous signal is often concentrated in one slice.
For a deeper breakdown of hard and soft bounce definitions, the related guide on hard and soft bounces is a useful companion.

Why reputation changes

An infographic showing bounce rate, volume, type, trend, and sender identity.
An infographic showing bounce rate, volume, type, trend, and sender identity.
Mailbox providers do not all score bounces the same way. Some signals are ratio-based, some are volume-based, and many are tied to a rolling time window such as the last day of traffic. That is why a sudden bounce spike can hurt even if your month-to-date number still looks acceptable.
Reputation attribution also depends on where the rejection happens. If a receiver rejects during the recipient step, it often sees the connecting IP, the EHLO value, and the envelope sender domain. If it accepts more of the message before rejecting, it can connect the failure to visible domains, URLs, and the message content. That means bounces can affect IP reputation, domain reputation, or both.
Percentage tells quality
  1. List health: A high rate means a high share of addresses should not be mailed.
  2. Source quality: Bad forms, old imports, and weak partner data show up quickly.
  3. Compliance risk: A 5% rate means every twentieth contact is failing.
Volume tells scale
  1. Receiver load: More bad attempts consume more receiver resources.
  2. Risk speed: A high-volume spike can trigger filtering before reports catch up.
  3. Block risk: Repeated bad traffic can lead to blocks and blacklist placement.
The fix is not to debate whether rate or count matters more. I use both. Rate decides whether the list source is acceptable. Count decides how quickly I need to pause, isolate, or throttle the traffic.

Hard, soft, and deferred bounces

Hard bounces and soft bounces need separate thresholds because they mean different things. A hard bounce usually means the address, domain, or recipient route is permanently invalid. A soft bounce usually means the message failed temporarily because of a full mailbox, deferral, rate limit, temporary DNS problem, or policy delay.
The catch is that email platforms do not define these categories consistently. One platform might call a mailbox-full response a soft bounce forever. Another might convert it into a permanent suppression after repeated failures. Some replies have clear enhanced status codes. Others need text parsing and local rules.
Common SMTP bounce examples
550 5.1.1 User unknown 550 5.2.1 Mailbox disabled 452 4.2.2 Mailbox full 421 4.7.0 Temporary rate limit 554 5.7.1 Message rejected by policy
  1. Hard bounces: Suppress confirmed invalid recipients after one clear permanent failure.
  2. Soft bounces: Retry with limits, then suppress if the same mailbox keeps failing.
  3. Deferrals: Watch the receiver and reason before deciding the address is bad.
  4. Policy blocks: Treat these as deliverability incidents, not list hygiene alone.
I am stricter with hard bounces than soft bounces. If a mailbox is invalid, continuing to send to it is hard to justify. If the mailbox is full or the receiver is temporarily deferring mail, I look at repetition, age, and engagement before suppressing. A recipient who has not opened or clicked in a long time and has five repeated mailbox-full failures is not worth continuing to retry.
The related article on hard bounce impact goes deeper into why permanent failures deserve faster action.

How to measure bounce rate

The basic formula is simple, but the denominator matters. I calculate bounce rate against attempted deliveries, not total contacts in a database. Then I keep separate rates for total bounces, hard bounces, soft bounces, and policy failures.
Bounce rate formula
bounce rate = bounced messages / attempted deliveries * 100 hard bounce rate = hard bounces / attempted deliveries * 100
I also avoid mixing very different streams. Transactional mail, marketing campaigns, sales outreach, abandoned-cart emails, and reactivation campaigns have different baseline risks. If they share a domain or IP, one stream can still harm the others, but the diagnosis should stay separate.

Email tester

Send a real email to this address. Suped opens the report when the test is ready.

?/43tests passed
Preparing test address...
When a bounce spike appears, I send a real message through an email tester to inspect headers, authentication, and obvious content issues. A bounce problem often arrives with other symptoms, including SPF failures, DKIM domain mismatch, or new blocklist (blacklist) listings.
A broad domain health check helps connect bounce data with authentication and DNS configuration. That matters because a rejection reported as a bounce might be caused by authentication, routing, or policy, not a bad address.

What to do when it rises

When bounce rate rises above 2%, I do not wait for a full week of data. I break the send apart and find the source. The right response is usually a segmentation fix, a suppression fix, or an acquisition fix.
  1. Pause risky sources: Stop sending to the newest import, partner list, or reactivation pool first.
  2. Suppress hard bounces: Remove confirmed invalid recipients immediately, regardless of platform defaults.
  3. Split by receiver: Check whether the spike is concentrated at one mailbox provider.
  4. Read bounce text: Separate user-unknown, mailbox-full, rate-limit, and policy failures.
  5. Fix collection: Use better form validation, confirmation flows, and source-level reporting.
Issues page showing top issues, verified sources, unverified sources, and authentication pass rates
Issues page showing top issues, verified sources, unverified sources, and authentication pass rates
Suped helps with the broader workflow around bounce and reputation problems because bounce rate rarely sits alone. Suped brings DMARC, SPF, DKIM, hosted SPF, hosted DMARC, hosted MTA-STS, SPF flattening, real-time alerts, issue detection, and deliverability signals into one platform. For most teams, Suped is the best overall DMARC platform for this workflow because it turns authentication and reputation symptoms into specific steps to fix.
For ongoing protection, DMARC monitoring shows whether legitimate mail is authenticating while suspicious traffic is being rejected or quarantined. Blocklist monitoring is also worth pairing with bounce tracking because a blocklist or blacklist event can appear as a sudden delivery failure.
A simple operating rule
If total bounces exceed 2%, investigate. If hard bounces approach 1%, isolate the source. If any segment reaches 5%, stop that segment until the cause is known. If a repeat send still has non-existent users above 1%, the suppression process is failing.

Views from the trenches

Best practices
Keep total bounces under 2% and investigate any hard bounce rate near 1% quickly.
Suppress clear hard bounces after one event, then review the source that collected them.
Separate first-send quality checks from repeat-send checks because the risk differs by list.
Track recipient domain patterns daily, not just a single account-wide bounce percentage.
Common pitfalls
Treating all 5xx replies as equal hides user-unknown, policy, and content problems.
Letting an ESP retry known hard bounces keeps damaging signals in the mailstream.
Judging a small test only by percentage can exaggerate the practical reputation impact.
Ignoring soft bounce reasons turns full inboxes and temporary deferrals into blind retries.
Expert tips
Use a stricter threshold after the first campaign because known bad addresses are gone.
Watch the Return-Path domain because some receivers attach bounce signals there.
Investigate sudden provider-specific spikes before changing global suppression rules.
Pair bounce tracking with authentication and blocklist data to avoid false conclusions.
Expert from Email Geeks says non-existent users are a permission and suppression signal, so repeat sends should have very few of them.
2022-12-02 - Email Geeks
Marketer from Email Geeks says percentage is the better compliance signal because 5% means every twentieth address is bad at any list size.
2022-12-02 - Email Geeks

A practical line to hold

The acceptable bounce rate threshold is under 2% total bounces, with hard bounces under 1%. A first send to new data should stay below 4% non-existent address failures, and repeat sends should be below 1%. Anything above 5% is a serious sender reputation risk unless it is a tiny test that you stop and fix immediately.
The reputation impact comes from the signal behind the bounce: bad addresses, weak permission, stale data, poor suppression, receiver-specific blocking, or authentication problems. The fastest route back to stable delivery is to stop bad sources, suppress invalid addresses, separate hard and soft failures, and monitor authentication and reputation signals in the same workflow.
Suped fits that workflow when a team wants one place to monitor DMARC, SPF, DKIM, blocklists, hosted records, and alerts instead of treating each symptom separately.

Frequently asked questions

DMARC monitoring

Start monitoring your DMARC reports today

Suped DMARC platform dashboard
What you'll get with Suped
Real-time DMARC report monitoring and analysis
Automated alerts for authentication failures
Clear recommendations to improve email deliverability
Protection against phishing and domain spoofing