Your "Blocked Emails" List Is Called a Suppression List — and Every Platform Hides It Differently

You're looking for a "blocked emails" list, and it seems to be nowhere. That's because the email industry calls it something else entirely: a suppression list. Once you know the term, finding it gets much easier.

A suppression list is your master "do not send" database. According to Mailchimp's email marketing resources, it covers five categories: unsubscribed users, hard bounces, spam complaints, manually added contacts, and legal or regulatory exclusions. It's broader than a simple unsubscribe list, which is why searching for "blocked" or "unsubscribed" contacts often leads you to the wrong place.

Most of this list builds itself. Customer.io's documentation confirms platforms automatically suppress hard bounces, spam complaints, and unsubscribes without any action from you. Soft bounces are handled on a delay — Microsoft Dynamics 365, for example, suppresses an address only after five consecutive soft bounce failures.

You can also add addresses manually. Common reasons include competitors, test accounts, removal requests that came through a support channel, and compliance flags, per Emercury's suppression list guidance.

This isn't just housekeeping. Suppression lists serve two critical functions: legal compliance (CAN-SPAM, GDPR, CASL) and deliverability protection. The stakes are real — industry compliance data puts the maximum CAN-SPAM fine at $53,088 per email, and Gmail caps your spam complaint rate at 0.3% before deliverability suffers.

There's another wrinkle worth knowing: suppression works at the email address level, not the contact level. The contact record stays intact in your system — only that specific address is blocked. And spam complaint suppressions are permanent; Microsoft notes those addresses "will never be eligible for delisting" due to privacy regulations.

Here's why you're stuck. Every platform hides its suppression list somewhere different:

• Customer.io: Workspace Settings → Email → Suppression List
• Microsoft Dynamics 365: Contacts → Communication tab
• MailerSend: A dedicated "suppressions list" page inside the app
• Postalytics: Lists → Suppression Lists
• Custom SMTP users: Manage it directly through your external email provider, not your marketing platform

So before you go hunting through menus, answer one question: what platform actually sends your email? That answer determines exactly where your list lives. If you're evaluating providers, this is worth adding to your checklist — some tools bury suppression as an invisible backend process, while others give you full visibility into why each address was suppressed.

It's a detail the team at Worqd weighs when setting up outreach and follow-up systems for clients, because a suppression list you can't find is a compliance risk you can't manage.

The sections below walk through the exact location for each major platform, plus the permission requirements and export options you'll need once you get there.

Where the Suppression List Lives in Each Major Platform

Finding your suppression list shouldn't require a treasure map, yet every major platform hides it in a different spot. What users casually call a "blocked emails list" is industry-standardly termed a suppression list — a master "do not contact" database covering unsubscribes, hard bounces, spam complaints, and manually added addresses. According to Mailchimp's resource guide, these lists serve dual purposes: legal compliance (CAN-SPAM, GDPR, CASL) and deliverability protection, with continuing to send to suppressed contacts actively harming sender reputation.

The exact navigation path depends entirely on your platform:

• Customer.io: Workspace Settings → Email → Suppression List (restricted to Account Admins and Workspace Admins only)
• Microsoft Dynamics 365: Contacts → Communication tab (operates at email-address level, not contact level)
• MailerSend: Dedicated "suppressions list page" in the app with 72-hour soft-bounce hold period
• Postalytics (direct mail): Lists → Suppression Lists
• Emercury: Dedicated "Suppression Lists" feature with full visibility into suppression reasons

Critical edge cases change where you actually manage this data. If you use a custom SMTP server, Customer.io explicitly states you must manage suppression directly through your external ESP — not inside Customer.io. Customer.io's documentation confirms this distinction. Meanwhile, Microsoft Dynamics 365 notes that spam-complaint suppressions are permanently non-removable by the sender due to privacy regulations, and only the recipient can request delisting. Microsoft Learn also caps removal attempts, requiring support requests for large-scale changes.

Platform philosophy varies too. Mailchimp's approach works largely behind the scenes — preventing sends to unsubscribed contacts even if accidentally re-added to an audience. Emercury emphasizes full visibility into why each address was suppressed, recommending quarterly audits (monthly for senders exceeding 100,000 emails/month). At Worqd, we've seen clients waste weeks debugging deliverability issues that a simple suppression list audit would have caught — especially when running multi-channel outreach where suppression must apply to both marketing and sales touches. The safest habit: export your suppression list as CSV from each platform (supported by MailerSend, Postalytics, and Emercury) and maintain a centralized master list synced via API where possible.

Why This List Protects Both Your Compliance and Your Inbox Placement

A suppression list does more than keep you legal — it quietly protects the reputation that determines whether your next campaign reaches the inbox or the spam folder. Every address on that list represents a signal you ignored at your peril: a hard bounce, a spam complaint, or an unsubscribe request that the law gives you just 10 business days to honor under CAN-SPAM, though modern bulk-sender standards now expect processing in two days or less.

The compliance stakes are real. CAN-SPAM penalties can reach $53,088 per email, and GDPR and CASL add their own enforcement teeth. But the deliverability math is just as unforgiving. Gmail caps acceptable spam complaints at 0.3% and recommends staying under 0.1%, while a bounce rate above 2% starts to erode sender reputation and anything over 5% is critical territory. With email lists decaying at roughly 23% annually, the suppression list grows whether you manage it or not.

• Hard bounces and spam complaints trigger automatic, permanent suppression on most platforms
• Spam-complaint suppressions are never removable by the sender — only the recipient can request delisting
• Soft bounces typically suppress after 5 consecutive failures or a 72-hour hold period
• Manual additions cover competitors, test accounts, and verbal opt-out requests

Microsoft Dynamics 365 retains hard-bounced addresses for 180 days on a graduated schedule, but spam-complaint entries never expire. Customer.io notes that suppressed contacts still exist in your workspace and can receive messages through other channels — the block is address-level, not contact-level. For teams running cold outreach alongside inbound funnels, that distinction matters: a prospect who unsubscribed from marketing emails might still welcome a personalized, permission-aware conversation from sales.

Worqd helps clients audit suppression lists as part of a broader deliverability review, ensuring compliance gaps don't undermine the paid campaigns, AI SDR follow-up, and creative testing that drive booked calls. The goal isn't just a clean list — it's a sender reputation that keeps every channel performing.

How to Manage Your Suppression List the Right Way

A suppression list only protects you if you actually maintain it. Treat it as a living asset, not a "set it and forget it" feature — as AiSDR's Joshua Schiefelbein warns, failing to update your list can undo all your compliance work.

Audit on a schedule. Export and review your full suppression list quarterly, and move to monthly if you send more than 100,000 emails a month, according to Emercury's best practices. Start every audit the same way: export the complete list categorized by reason — hard bounce, spam complaint, unsubscribe, or manual addition. That categorization surfaces patterns, like a batch of bad addresses from one lead source, before they damage your sender reputation.

The stakes are real. Email lists decay at roughly 23% per year, and CAN-SPAM fines can reach $53,088 per offending email. Gmail caps acceptable spam complaint rates at 0.3% and recommends staying under 0.1%.

Build one centralized master list. If you send from multiple tools, each platform holds its own suppression data — and gaps between them are where compliance failures hide. MailerSend, for example, lets you export a CSV of suppressions to upload into your other platforms' blocklists, and Postalytics lists can be edited, downloaded, appended, or deleted. For ongoing sync, Customer.io offers an ESP Suppression API that propagates bounce and spam-complaint suppressions across every sending domain in a workspace, while Emercury's Incoming Webhooks pull suppression data in from external tools.

Then follow the rules that trip most teams up:

• Never manually re-add a suppressed address. Let contacts re-subscribe on their own terms — Mailchimp's guidance is explicit, and its system blocks re-added unsubscribes behind the scenes anyway.
• Fix typos on the contact record, not the suppression entry. If "[email protected]" hard-bounced, correct the address on the contact rather than removing the old one from suppression, per Microsoft Dynamics 365.
• Accept that spam complaint suppressions are permanent. Microsoft notes these addresses will never be eligible for delisting due to privacy regulations — only the recipient can reverse it.
• Remember suppression is address-level, not contact-level. The contact record stays intact and can still receive messages through other channels, as Customer.io's documentation confirms.

If this sounds like a lot of operational overhead on top of running campaigns, it is — which is why teams working with a growth partner like Worqd get outreach and follow-up built with permission-aware compliance baked in from the start, rather than bolted on after a deliverability scare.

Check your permissions before your first audit, too. Customer.io limits suppression list access to Account Admins and Workspace Admins, and Dynamics 365 caps how many addresses you can remove before requiring a support request. Get the right access, set the recurring audit on your calendar, and your suppression list becomes an asset instead of a liability.

When Suppression Management Outgrows Your Team

Finding your suppression list is the easy part. Keeping it accurate across every tool your team touches is where most organizations quietly fall behind.

Suppression lists aren't a "set it and forget it" task. As one outreach expert puts it, failing to update them can undo your compliance efforts entirely. Common mistakes include forgetting to apply the list to a new campaign, suppressing only one channel instead of both marketing and sales, and managing updates by hand across disconnected systems.

The stakes are real. CAN-SPAM violations can cost up to $53,088 per email, and Gmail's spam complaint threshold sits at 0.3% — with a recommended rate below 0.1%. One unsuppressed list synced to the wrong tool can push you past both.

The fragmentation problem is structural. Your ads run in one platform, cold outreach in another, and follow-up sequences in a third — each with its own suppression rules hidden in a different menu. Microsoft Dynamics 365, for instance, suppresses an address only at the email level, not the contact level, so a "blocked" lead can still receive messages through other channels. And Customer.io's documentation warns that custom SMTP users must manage suppression directly through their external provider — a detail that's easy to miss when your sending setup spans multiple systems.

That's exactly the kind of gap a quarterly audit is meant to catch. Emercury recommends exporting and reviewing your full suppression list quarterly — monthly if you send more than 100,000 emails — categorized by reason:

• Hard bounces and invalid addresses
• Spam complaints (permanently non-removable in most systems)
• Unsubscribes and permission withdrawals
• Manual entries like competitors and compliance flags

The real risk isn't any single tool — it's the seams between them. When your ad platform, outreach tools, and CRM each hold a different version of "do not contact," compliance gaps are inevitable. This is where an integrated approach matters. Worqd manages the whole path from first click to booked call under one plan, with permission-aware outreach baked into every follow-up — so your suppression rules travel with the lead instead of living in separate silos.

If juggling suppression lists across fragmented vendors is eating time and creating risk, Book a Growth Call and see what one partner managing your entire funnel looks like.