Rule types

Email address rules

Allow or block addresses by local part, domain, or top-level domain using exact values or wildcard patterns.

  • Block local: admin
  • Allow domain: yourpartner.com
  • Block TLD: .xyz

IP rules

Block email addresses associated with specific IP ranges or known bad actors.

  • Block IPs associated with spam infrastructure

Country rules

Enforce geographic restrictions on email signups.

  • Block signups from specific countries
  • Allow only certain regions

Actions

Allow

Override automatic block detections for trusted domains or addresses. Useful for known partners or internal addresses that would otherwise be flagged.

Block

Force a Block verdict for any email matching the rule, regardless of what automatic scanning detects. Useful for enforcing geographic or domain restrictions.

How rules are applied

Rules are evaluated before automatic scanning verdicts. A matching Allow rule overrides a detection; a matching Block rule forces a Block verdict. Rules are applied in order of specificity — domain rules take precedence over country rules.

Managing rules

Create, edit, delete, and temporarily disable rules from the Email Rules section of your dashboard. Rules are shared across your workspace and apply to all email scans — whether performed via the web interface or the API. Matching rules are shown in scan history so you can see exactly why an address passed or failed.

Examples

  • Block all signups from .ru or .xyz domains for a campaign with heavy abuse.
  • Allow a trusted partner domain even when broad filtering would otherwise flag it.
  • Block noreply and admin local parts when collecting sales leads.
  • Block or allow traffic by country when a form is only intended for specific regions.