A suppression list is the record a sender keeps of addresses they must not mail — people who opted out, and addresses that hard-bounced. It's the unglamorous plumbing that makes unsubscribing actually stick, and it's why a hard bounce is more useful than a silent drop: both an opt-out and a rejection land an address on it. Understanding it explains several things about email that otherwise look arbitrary.
What goes on one
- Unsubscribes. Someone asked to stop. Legally binding for commercial mail.
- Hard bounces. The receiving server permanently rejected the address, so continuing to send damages the sender's reputation.
- Spam complaints. Someone hit "report spam" and the recipient's provider fed that back.
- Manual additions — legal requests, known problematic addresses.
- Spam traps the sender has identified, since mailing one is seriously damaging.
Why senders maintain them carefully
Not purely goodwill. Mailing addresses that bounce or complain wrecks a sender's deliverability reputation, which determines whether their mail reaches anyone's inbox at all. A sloppy suppression list means their legitimate mail starts landing in spam folders.
So the incentives align reasonably well here: a competent sender wants your opt-out honoured as much as you do.
The legal layer
In the US, CAN-SPAM requires an opt-out to be honoured within 10 business days, and — the part worth knowing — once someone has opted out the sender may not sell or transfer their address, even as part of a mailing list. That obligation is enforced through the suppression list. Source: FTC, CAN-SPAM Compliance Guide. Checked: 2026-08-19.
Data-protection regimes use the same mechanism differently: an organisation honouring an objection to marketing needs to retain just enough information to know not to contact you again — which is why a "delete everything" request and a "stop marketing to me" request can produce different outcomes.
Why removal keeps failing without one
This is the concept that explains data-broker whack-a-mole. If a broker deletes your record but keeps no suppression entry, the next time it ingests a public-records dump it rebuilds a matching profile — because nothing tells it not to.
Suppression is the intended fix, and California's Delete Act pushes brokers toward it. How well it works in practice is a question for evidence over the next year or two rather than prediction. The mechanism
The connection to disabling an alias
When you disable an alias and the server rejects mail with a hard SMTP failure, the sending platform sees a permanent bounce — and a competent platform adds that address to its suppression list automatically.
So a rejection does some of your unsubscribing for you, without you asking anyone. A service that instead accepts and silently discards produces no such signal: the sender sees successful delivery and keeps sending indefinitely into nothing. The full comparison
What it doesn't mean
Being on a suppression list isn't deletion. The sender still holds your record — they must, in order to know not to mail you. If you want the underlying data removed, that's a separate request, and the two can conflict: erase everything and they may have nothing left recording that you opted out. Erasure requests