Spamhaus, Barracuda, SpamCop - these blacklists are the gatekeepers of email deliverability. Get listed on one of them and your emails stop reaching inboxes across the board, not just on Gmail.
How blacklisting happens
The most common path to a blacklist is surprisingly simple: you send emails to addresses that don't exist. These "hard bounces" are a strong signal that you're sending to unverified lists - a hallmark of spammers.
Spamhaus is particularly aggressive. Their DBL (Domain Block List) can flag your entire domain based on a pattern of bounces, spam complaints, or hitting spam traps. Once listed, removal requires a formal delisting request and evidence that you've fixed the problem.
Spam traps: the silent killers
Spam traps are email addresses specifically created (or recycled from abandoned accounts) to catch senders who don't maintain clean lists. They never sign up for anything - so if you're sending to one, you got that address from a purchased list, a scraper, or you're not cleaning your database.
Hitting even one spam trap can trigger a blacklist investigation. The problem is you can't identify them - they look like normal email addresses.
Prevention: clean your database before every campaign
The only reliable prevention is rigorous list hygiene. Before every major campaign, run your database through a verification process that checks for: invalid addresses (syntax errors, non-existent domains), full mailboxes, catch-all domains (which accept everything but may be traps), role-based addresses (info@, admin@), and disposable email addresses.
Remove any address that bounced in previous campaigns - immediately, not "eventually." A bounce rate above 2% is a red flag. Above 5% is an emergency.
What to do if you're already blacklisted
First, stop sending immediately. Continuing to send while blacklisted makes delisting harder. Then identify the cause - usually your bounce logs will tell you. Clean your database thoroughly, submit a delisting request with evidence of remediation, and wait. Most blacklists process requests within 24-72 hours.