What each Securify status means
Every profile we check gets one value in securify_status. Here is what each one means, why an address lands there, and what to do with it.
Check and tag writes the status to each profile as securify_status, so you can build Klaviyo segments on it; Check only shows it here without changing Klaviyo. The dashboard, the scan email and the CSV export use the same values.
- deliverable
Deliverable
The mailbox exists and accepts mail, or it is a shared company address (info@, sales@).
Shared company addresses count as deliverable on purpose, even when their provider won't confirm the mailbox: a role name says nothing bad about an address, and these inboxes are usually read by a team.
What to do: Send as usual.
- unverifiable
Unverifiable
The mail provider doesn't let anyone check whether this mailbox exists — common with large consumer providers. Not a sign of a bad address on its own.
Some mail providers refuse verification checks outright — common for t-online.de, outlook.de and sky.com; web.de and GMX refuse about half of them. Nobody outside the provider can tell whether the mailbox exists. That says nothing bad about the address: on engaged lists most unverifiable profiles are real customers.
What to do: Keep sending while the profile engages; drop it if it stays silent for months.
- catch_all
Catch-all
The domain accepts mail for any address, real or made up, so no check can tell whether this mailbox exists. Common with company domains.
A catch-all domain accepts mail for any address — real or made up — so a check can't tell whether this particular mailbox exists. Many company domains are catch-all. A real person may well read it; a mistyped or invented address on the same domain gets the same answer, which is why it stays apart from Deliverable.
What to do: Keep sending while the profile engages; drop it if it bounces or stays silent for months.
- risky
Risky
The mailbox exists but is full, so mail bounces until its owner clears space.
The mailbox exists but has run out of space, so the provider rejects new mail for now. Some owners clear it; many full mailboxes are abandoned.
What to do: Pause sends to these profiles and re-check them later.
- undeliverable
Undeliverable
The mailbox doesn't exist, is disabled, or is a spam trap. Sending to it causes a hard bounce and hurts your sender reputation.
The provider says the mailbox doesn't exist or has been disabled, or the address is a known spam trap. Every send to it bounces or lands in a trap, and inbox providers count that against your sender reputation.
What to do: Suppress these profiles.
- disposable
Disposable
A throwaway inbox (e.g. mailinator, 10minutemail). Nobody reads it.
The domain belongs to a throwaway-inbox service. Addresses like these are typed into signup forms to grab a discount or by bots; nobody comes back to read them.
What to do: Suppress these profiles.
To keep bad addresses out of every send, exclude a segment where securify_status is one of undeliverable, risky, disposable. Unverifiable and Catch-all are left out on purpose — an address nobody can check is not a reason to stop mailing it.
Profiles tagged before we split this status in October 2026 may still carry unverified — Unverifiable and Catch-all together, under their old name — until their list is checked again.