Home › Blog › Check a Cold Email List Against Your Global Suppression List

Back to Blog
Compliance5 min readJuly 21, 2026

Check a Cold Email List Against Your Global Suppression List (Free Tool)

Every operator eventually sends a cold pitch to an existing customer, an unsubscribed prospect, or the company their biggest client works at. The damage ranges from embarrassing to contract-ending, and it happens because suppression lives in five different tools while campaigns launch from a sixth. Here is the suppression check that should gate every import: exact email matching, company-domain matching, and the free browser tool that runs both without your list leaving your machine.

Cold Email Expert · WarmInboxes
Checking a cold email campaign list against a suppression list

Quick Answer: The Pre-Import Suppression Gate

Before any list enters your sequencer, check it against your merged suppression sources by exact email AND by company domain (with free providers excluded from domain matching). The free Suppression Checker takes your campaign CSV plus any number of suppression files or pasted domains, runs both matches in your browser, flags companies getting too many contacts, and returns a clean import-ready CSV with every column preserved.

Why Suppression Fails in Real Operations

Nobody decides to email their customers cold; it happens structurally. Unsubscribes live in the sequencer, customers live in the CRM, bounces live in a verification export, the do-not-contact spreadsheet lives with legal, and the new campaign launches from a fresh Apollo export that has never met any of them. Five sources of truth, zero enforcement between them. The fix is not more discipline, it is a gate: one mechanical check that every list passes through between export and import. Gates work because they do not rely on anyone remembering.

The Three Matches That Matter

  • •Exact email match: the baseline. Case-insensitive, whitespace-trimmed, run against every suppression source at once. Catches the contact who unsubscribed last quarter appearing in this quarter's export, which happens constantly because data vendors re-sell the same records.
  • •Company domain match: the one everybody skips. Extract the domain from every suppressed email, add any explicitly suppressed company domains, exclude free providers, and remove every campaign contact whose domain matches. This catches new hires at previously contacted companies, colleagues of the person who said stop, and contacts at customer accounts your CRM does not know about.
  • •Account collision check: suppression's sibling. Within the campaign itself, count contacts per company domain; more than 2-3 contacts hitting one company in the same campaign reads as an attack on their mail filter and gets your domain blocked for everyone at once. Full treatment in our domain suppression guide.

The Monthly Suppression Workflow

Suppression ops, monthly cadence
WEEK 1 OF MONTH
1. Export customers from CRM        -> customers.csv
2. Export unsubscribes + negatives
   from every sequencer workspace   -> optouts.csv
3. Export hard bounces from last
   month's verification + campaigns -> bounces.csv
4. Append manual do-not-contact     -> dnc.csv

EVERY CAMPAIGN, BEFORE IMPORT
5. Upload campaign CSV + all four
   files to the Suppression Checker
6. Domain matching ON, free
   providers auto-excluded
7. Review domain matches (5 min,
   catches over-suppression like a
   7,000-employee enterprise where
   one person opted out)
8. Import the clean CSV only

Step 7 deserves a note: domain suppression has one legitimate false-positive class, very large companies where one individual's opt-out should not block a different division. The stats tiles make this visible: if domain matches look disproportionate, scan the suppressed-rows download (it includes the reason and matched domain per row) and re-add the rows you consciously want. Deliberate exceptions are fine; silent collisions are not. For the full unsubscribe plumbing between tools, see the unsubscribe sync guide.

The test that justifies the whole habit: take your last campaign's sent list and run it against your current customer export right now. Across the operators we have walked through this, finding zero matches is the exception. Every match you find is an email a customer already received; every match the gate would have caught is one they never will.

Frequently Asked Questions

What belongs on a global suppression list?

Six sources, merged: current customers (nothing burns trust like pitching someone who already pays you), everyone who unsubscribed or replied negatively from any past campaign, hard bounces (re-sending to them repeats the reputation damage), do-not-contact requests including legal ones, active deal contacts your sales team owns, and partner or investor companies where a cold pitch would be politically expensive. Rebuild the merged file monthly; each source lives in a different tool and drifts out of date on its own schedule. Our guide to global suppression lists covers the maintenance workflow.

Why match by company domain and not just email?

Because people change and companies remember. The champion you emailed in March left; their replacement is in your fresh export with a new address, and email-only matching happily lets the same company get pitched twice, or lets you cold-pitch a company that is an active customer through a contact your CRM has never seen. Domain matching catches every present and future contact at a suppressed company. The one mandatory safeguard: free providers (gmail.com, outlook.com) must be excluded from domain matching, or one consumer address suppresses every Gmail user on your list.

Should suppression happen in my sequencer or before import?

Both, with before-import as the primary gate. Sequencer blocklists are per-workspace and per-platform: they miss anything that happened in a different tool, a past agency, or a colleague's account, and they typically match email-only, not domain. Checking before import means the suppressed rows never enter the platform at all, which also keeps your sequencer contact counts (and per-contact billing) clean. Keep the sequencer blocklist as the second layer for unsubscribes that happen mid-campaign.

Is it safe to upload my suppression list to an online tool?

Treat suppression data as the most sensitive file you own: it is literally a list of your customers and everyone who told you no. Prefer tools that process locally in the browser, where the file is parsed in your own tab and never transmitted. Our Suppression Checker works this way: both the campaign CSV and the suppression files are read client-side, matching happens in your browser's memory, and the downloads are generated locally. If a tool requires uploading the file to a server, you are trading your customer list for convenience.

How do I handle suppression across multiple clients as an agency?

Per-client suppression hubs with a bright line between them: client A's customers and unsubscribes must never inform client B's targeting, that is precisely the misuse client contracts prohibit. Run the suppression check per campaign against that client's hub only. Separately, the agency may keep a minimal shared hard-compliance list (spam-trap hits, legal complaints) applied defensively everywhere. The full architecture is in our client data isolation guide.

Get FREE .com Domains

Prewarmed Inboxes So You Can Send Cold Emails Today

Get Prewarmed & Fresh Inboxes

Prewarmed & Fresh Inboxes

Google, Microsoft 365 and Azure inboxes with free prewarmed domains and DNS configured before you log in. Prewarmed inboxes send the day they land; every order is delivered within 48 to 72 hours.

Get Prewarmed & Fresh Inboxes