How to Verify Curator Emails Before You Pitch

A typical pitch takes real effort: you pick the right playlist, write a short note, attach a private link. If the address is dead, that effort disappears. Worse, repeated sends to bad addresses bounce, and bounces can hurt how mailbox providers treat your own email account.

There is a second risk. Some "curator emails" belong to nobody who runs a real playlist. They come from scraped lists, resold spreadsheets or people who want your money more than your music. Verification is the habit that separates a pitch list you can trust from a pile of guesses.

So think of it as two layers:

1. Technical verification: can this address receive an email today?
2. Identity verification: is this a real, active human curator who runs the playlist I think they do?

Layer one: check that the address works

What an email verifier actually does

A good verifier checks the address syntax, looks up the domain's MX records (the DNS entries that say where mail for that domain goes), and asks the receiving server whether it would accept the specific mailbox, all without sending a message. That last step is why you can test an address without alerting the curator.

To run one:

1. Copy the address exactly as you found it. Strip spaces and trailing punctuation.
2. Paste it into a verifier, or upload a small batch as a file.
3. Read the result category, not just a green or red icon.
4. Save the result next to the curator's name in your sheet.

How to read the results

The labels vary a little between tools, but they cluster into four groups.

Two details matter most for musicians.

Catch-all is common on small custom domains. A curator with a personal domain or a small blog often has a catch-all setup, so a verifier cannot say whether `hello@` or `submissions@` is read by anyone. Some providers also block verification checks, which produces an unknown result. Do not discard these contacts. Move them to a "needs a second check" list.

A green result is not an endorsement. An email checker tells you whether an address can receive mail, not who owns it. A scammer's inbox can verify perfectly.

Free Gmail and Outlook addresses

Many independent curators use a free consumer address. These usually verify cleanly, which tells you only that the mailbox exists. Keep going to layer two.

Layer two: check that the curator is real

Once an address passes the technical test, confirm the human. This takes about five minutes per curator and removes most of the risk.

Match the name, handle and brand

A real curator leaves a consistent trail. Look for the same name or handle, the same profile picture or brand, and the same playlist names across Spotify, Instagram, TikTok and any blog or site. If the email says one name, the Spotify profile says another and the website says a third, pause. A consistent identity is one of the standard signals recommended in vetting checklists for playlist pitching, alongside a plausible email domain and a message that is not a copy-paste blast.

Read the curator profile

Open the curator's Spotify profile. Music-industry coverage on spotting fake playlists points to a bio, a profile picture, social links and credible follower activity as signs of a real person. A huge playlist paired with an empty profile or odd followers is a warning sign.

Also check:

• Update history. Is the playlist refreshed regularly, or has it sat untouched for a year?
• Genre fit. A list that takes every genre is often built for submission volume, not listeners.
• Track mix. Do the songs look like a curated set, or a random pile?
• Contact route. Is the email listed on the playlist description or the curator's own page, or did it come from a spreadsheet of unknown origin?

The email source matters. An address the curator published themselves is far better than one pulled from a list you cannot trace.

Check the domain

If the address is on a custom domain, open the website. Does it exist, and does it describe the same person and playlists? For anything that looks like a business, you can also see whether the domain uses email authentication. The U.S. Federal Trade Commission explains that SPF identifies authorized sending servers, DKIM adds a signature that helps verify the message came from the organization's servers, and DMARC checks that those domains align with the visible From address. You do not need to be technical here. It is simply one more reason to trust a reply that comes from a properly set up domain over a lookalike.

Red flags: fake curators and pay-for-placement scams

Verification will occasionally lead you to a contact that is technically fine and ethically bad. Watch for these.

• A guaranteed placement or stream count for a fee. Spotify states that any service claiming guaranteed playlist placement in exchange for money violates its terms. The same page says confirmed artificial streaming can lead to withheld royalties and corrected public stream numbers, so this is not only a wasted-money problem.
• Urgency and pressure. "Last slot this week" is a sales line, not a curator's workflow.
• A reply from a different address or name than you wrote to. Your pitch may have gone to a middleman.
• No playlist link, or a link to a playlist that does not match their description.
• Requests for payment by an unusual route. Treat any request that skips normal invoicing as a stop sign.

Paying for honest consideration or for software that helps you do your own outreach is different from paying for a promised outcome. The line is the promise: tools and campaign work are services, guaranteed placement is a violation.

If an email looks like phishing or spoofing, the FTC recommends reporting it to local law enforcement, the FBI's Internet Crime Complaint Center and the FTC itself. It also says phishing emails can be forwarded to spam@uce.gov and reportphishing@apwg.org.

A repeatable verification workflow

Here is a routine you can run for every curator before you pitch.

1. Source. Note where the email came from: the curator's own profile, their website, or a tool.
2. Verify the address. Run it through a verifier and record the result category.
3. Match the identity. Compare the name, handle and brand across Spotify and one social platform.
4. Check the playlist. Look at the update history, the genre fit and the track mix.
5. Decide. Deliverable plus a consistent identity: pitch. Catch-all or unknown plus a consistent identity: pitch, but expect a slower reply. Invalid or inconsistent identity: skip.
6. Log it. Add the curator, the date you checked, the result and the date you pitched.

Keep the log. Addresses go stale, curators move to new playlists, and a note that says "verified, replied" is worth more than a new list of unknowns.

A quick worked example

Say you find `playlist.chill.vibes@` a free-mail address on a playlist's description. The verifier returns "deliverable". You open the Spotify profile: it has a bio, a photo and an Instagram link that uses the same handle, and the playlist updated last week. That is a pitch-ready contact.

Now a second case: a spreadsheet gives you `info@` at a domain the verifier flags as catch-all. The playlist owner has no profile photo, no bio and 40,000 followers. The address is unconfirmed and the identity is thin. Skip it, or look for the curator's own public contact.

Perspective

At Playlist Pilot we see verification as the first step of a relationship, not a chore before a blast. Most of the effort musicians waste comes from pitching people who were never going to read the message, or from paying for promises nobody can keep. That is why we built the platform around matching songs to playlists curated by real humans, checking curator authenticity with bot detection, and generating personalized pitches that show why a track fits. We do not charge per pitch, so a curator who likes your music stays in your contact list for the next release instead of becoming a one-time transaction. Our own reported average response rate from curators is 47%. We attribute that to relevance and a clear, personal pitch rather than volume. A verified address and a real fit do more for you than a thousand unchecked sends. Zander

Where Playlist Pilot fits

Checking addresses and identities by hand works, but it is slow when you are pitching a new release to dozens of playlists. Playlist Pilot matches your track to relevant playlists using its audio characteristics, genre and mood, helps you find curator contacts, and drafts a personalized pitch for each one. Plans start at $19.99 per month for Starter, and Professional is $29.99 per month. You can see what each includes on the Playlist Pilot pricing section.

If you want to go deeper first, our guide on how to find Spotify curator emails and verify leads walks through sourcing contacts, and our overview of direct curator contact covers the find, vet and pitch cycle.

After the address checks out: pitch well

Verification gets your message to a real inbox. The pitch itself still has to earn the reply.

• Name the specific playlist and say why the song fits it.
• Keep it short: who you are, the track, one line of context, a private streaming link.
• Send from a professional-looking address, ideally one on your own domain.
• Follow up once, politely, after a reasonable wait.

Our pieces on how to pitch Spotify curators and email versus form pitching explain when to use each route. For wording help, see these examples of compelling curator pitches.

One more point about long-term thinking. Curators are people with taste and limited time. If you network with music curators rather than treating them as a list to mine, a verified contact becomes a repeat audience for each new release.

Common mistakes to avoid

• Treating "valid" as "real person". The address can receive mail. That is all it says.
• Deleting every catch-all or unknown result. These are inconclusive, not bad. Check the identity another way.
• Buying a contact list without knowing its source. Old and scraped data decays fast, and you cannot tell who is behind it.
• Re-verifying constantly. Check an address before the first pitch and again if it has been months or an email bounces.
• Ignoring a bounce. A bounce is data. Mark the contact and look for a fresh route.

Sources