Email verification services exist to do one job: tell you which addresses on your list are valid, invalid, or risky. The market is dominated by four vendors that all claim near-identical accuracy and price within ~30% of each other. The real differences emerge when you push them on edge cases — catch-all domains, role accounts, freshly-validated addresses that bounce anyway, false positives that get real users suppressed.
ZeroBounce: broad coverage, generous free tier, slightly conservative on catch-alls. NeverBounce: fast bulk processing, good API, weakest on EU GDPR data handling. Bouncer: best EU / GDPR posture, strong catch-all handling. Kickbox: highest accuracy claims, narrower coverage. Use 2 in combination for critical lists.
How verification actually works
All four use roughly the same techniques in different orders:
- Syntax check. RFC 5322 validation. Catches obvious typos.
- Domain MX lookup. Does the domain accept email at all?
- Disposable / temp-mail detection. 10minutemail, mailinator, etc. — lists maintained per-vendor.
- Role-account detection. info@, sales@, admin@ patterns.
- SMTP probe. Connect to the recipient's mail server and issue RCPT TO without actually sending. Server's response indicates if the mailbox exists.
- Catch-all detection. Probe with a random address; if server accepts everything, the domain is catch-all and SMTP probing can't determine validity.
- Spam-trap database lookup. Vendor-maintained lists of known traps. Coverage varies wildly.
The accuracy difference between vendors comes from: catch-all handling sophistication, spam-trap database completeness, SMTP-probe rate-limiting (so they don't get blocklisted by target servers), and how aggressively they tag risky-but-not-clearly-bad addresses.
ZeroBounce
Largest player by volume. ~$0.0075 per verification at standard tier, dropping to ~$0.001+ at high volumes. Free tier offers 100 verifications/month.
- Strengths: Broad geographic coverage including difficult regions (Russia, China, India SMTP servers that some competitors handle poorly). Activity-based catch-all scoring (separate from boolean valid/invalid). Good API documentation, multi-language SDKs.
- Weaknesses: Slightly conservative on catch-all — tags more as "unknown" than competitors. False positives on Microsoft 365 tenants with strict SMTP probing policies (they reject the probe but the mailbox exists).
- Best for: Mixed international lists, enterprise customers needing detailed sub-status codes (29 different status codes vs competitor 6-10).
- Catch-all handling: Marks as "unknown" with confidence score. You decide threshold.
NeverBounce (ZoomInfo)
Acquired by ZoomInfo in 2018, integrated with their data infrastructure. ~$0.008 per verification standard, drops to ~$0.003 at scale. 1,000 free verifications.
- Strengths: Fastest bulk processing in our testing — 1M list completes in ~6 hours where competitors take 12-24. Strong API rate limits suitable for real-time signup validation. Detailed bounce-cause reporting.
- Weaknesses: EU/GDPR posture is weaker than competitors — data processing happens in US, with vendor terms requiring standard contractual clauses for EU data. EU teams should read carefully.
- Best for: US-based teams with high-volume bulk processing needs, real-time signup validation at scale.
- Catch-all handling: Boolean catch-all flag plus accept-all probability score; less granular than ZeroBounce.
Bouncer
Polish-based, EU-incorporated. ~$0.007 per verification, simpler pricing tier structure. 100 free verifications.
- Strengths: Strongest EU/GDPR compliance posture — data processed in EU, full DPA available, no US transfer for EU customers. Catch-all handling uses an additional intelligence layer that reduces "unknown" rate meaningfully (their "Toxic" vs "Risky" vs "Deliverable" classification).
- Weaknesses: Smaller spam-trap database than ZeroBounce. Less mature on edge-case TLDs (some new gTLDs handled poorly).
- Best for: EU teams, GDPR-strict workflows, teams where catch-all assessment matters and they want a vendor to actually take a position rather than always returning "unknown".
- Catch-all handling: Best in class — uses behavioural signals beyond SMTP probing.
Kickbox
US-based. ~$0.01 per verification, no per-volume discount until very high tiers. 100 free verifications.
- Strengths: Highest accuracy claims (98%+), backed by aggressive SMTP probing and spam-trap database. Sendex score combines deliverability + risk into single number, useful for downstream automation. Strong commitment to ethical probing — they self-rate-limit to avoid being blocklisted by target servers.
- Weaknesses: Higher cost. Smaller catch-all coverage than competitors. Best on US/EU lists, weaker on emerging-market domains.
- Best for: Teams that prioritise accuracy over cost, accuracy-critical use cases (customer-facing notification quality, recovery campaigns).
- Catch-all handling: Returns separate "risky" status; less granular than Bouncer.
The catch-all problem
A catch-all domain accepts mail to any address, then routes internally (or drops it). SMTP probing can't determine if a specific address exists at a catch-all domain — the server accepts everything during probing.
This affects 15-30% of B2B addresses depending on the segment. Office365 tenants are commonly catch-all. G Suite is sometimes catch-all. How vendors handle this is the biggest practical difference between them:
- Conservative (mark as unknown): ZeroBounce, NeverBounce default. Safe but you lose data on huge swaths of business email.
- Behavioural assessment: Bouncer leads here, providing probability scores from secondary signals (LinkedIn presence, activity history, format conventions).
- Send-and-monitor: No verifier can fully solve catch-all. For critical lists, validate then send a low-volume warming message and monitor bounce response.
Every verifier has false-positive rate (marks valid as invalid). In our testing, all four vendors mis-flag 1-3% of valid addresses on B2B lists. That's real revenue if the flagged addresses are real customers. For critical lists, run two verifiers and only suppress on agreement.
When verification fails
Verification reduces but does not eliminate bounces. Reasons validation fails:
- Address became invalid between verification and send (people leave jobs).
- Catch-all domain accepted probing but actually drops the mail.
- Greylisting at recipient: probe accepted, real send delayed, eventually bounced.
- Recipient mailbox full at send-time.
- Sender reputation issue causes recipient to reject — looks like a bounce, isn't the address's fault.
Even with rigorous validation, expect 0.5-1% bounce rate on the cleanest possible list. Anything below 2% is healthy.
Real pricing comparison
At 100K verifications:
- ZeroBounce: ~$650-750
- NeverBounce: ~$700-800
- Bouncer: ~$650-700
- Kickbox: ~$1,000+
Pricing tiers shift quarterly. Always check current rates. Most vendors offer custom pricing above 1M.
Practical recommendation
- Solo founder, US/global mix: ZeroBounce. Free tier generous, broadest coverage.
- EU team, GDPR-strict: Bouncer. Only one with unconditionally clean EU data posture.
- Real-time signup validation at scale: NeverBounce. API throughput leads.
- Accuracy-critical, willing to pay: Kickbox + a second-opinion verifier on flagged addresses.
- Critical list (purchased migration, recovery): Run two verifiers; only suppress on agreement; double-check high-value addresses manually.