Pardot Email Deliverability: How to Fix High Bounce Rates Before Salesforce Suspends Your Account

A troubleshooting guide for when your emails stop arriving

The email from Salesforce's Email Reputation Team landed in my inbox at 8:47 AM: "Your Account Engagement business unit has exceeded the 10% bounce rate threshold. Email sending will be suspended in 24 hours unless you address this issue."

My client had 47,000 prospects in their database. They'd been sending monthly newsletters without cleaning the list for two years. Now they couldn't email anyone until we fixed it.

This wasn't a technical problem. It was a data hygiene problem that became a technical emergency. Here's how we dug out and what you can do to avoid the same situation.

Understanding What's Actually Happening

When you send an email through Pardot, it travels through multiple checkpoints before reaching the inbox:

1. Your Pardot business unit (sending server)

2. Salesforce's shared or dedicated IP (depending on your plan)

3. The recipient's email server (accepting or rejecting)

4. The recipient's inbox (or spam folder)

Each checkpoint can fail. Pardot tracks these failures as bounces.

Hard bounce: Permanent failure. The email address doesn't exist, the domain is invalid, or the recipient server has permanently blocked your sender. The prospect is marked "Do Not Email" automatically.

Soft bounce: Temporary failure. The recipient's mailbox is full, the server is down, or there's a temporary connection issue. After five soft bounces on the same address, Pardot converts it to a hard bounce.

Salesforce monitors your bounce rate across all sends. Exceed 10% on a single email, and the reputation team takes notice. Hit 10% three times, and your sending gets suspended.

The threshold exists because high bounce rates damage Salesforce's shared IP reputation. If your bad data hurts their deliverability, everyone else using that IP suffers too.

Step 1: Find Out Where You Stand

Before panicking, measure the actual problem.

Run the Email Bounce Report:

Navigate to Account Engagement Reports → Marketing Assets → Emails → Email Bounces

This report shows:

• Total bounces by type (hard vs. soft) over the last 12 months

• Bounce rate by send date

• Individual prospect records that bounced and why

What you're looking for:

Bounce Rate | Status

Under 2% | Healthy

2-5% | Monitor closely

5-10% | Take action now

Over 10% | Stop sending. Clean first.

If a single email pushed you over 10%, check the bounce codes on those prospect records. Common culprits:

• 5.1.1 (User Unknown): The email account doesn't exist. The person left the company or you have a typo.

• 5.2.1 (Mailbox Full): Temporary issue, but often indicates an abandoned inbox.

• 5.7.1 (Blocked by Spam Filter): Your content or sender reputation triggered a block.

Step 2: Understand Hard Bounced, Opted Out, and Do Not Email

These three fields confuse everyone. Here's the distinction:

Opted Out: The prospect clicked an unsubscribe link or used your preference center. They don't want your emails. This field is controllable by the prospect.

Do Not Email: A master suppression field. When checked, the prospect receives nothing from Pardot, including operational emails and autoresponders. This field can be set manually or automatically.

Pardot Hard Bounced: A system-set field indicating the email is permanently undeliverable. When this is true, Do Not Email gets checked automatically and cannot be unchecked through normal means.

The common mistake:

Someone leaves a company. Their email bounces. Pardot marks them "Hard Bounced" and "Do Not Email." Later, you get their new email address. You update the email field. You try to uncheck "Do Not Email."

It doesn't work. The field resets to checked on save.

This happens because Pardot Hard Bounced is the source field. As long as it's true, Do Not Email stays locked. Editing the email address alone doesn't clear the bounce status.

Step 3: Clear Hard Bounces (When Legitimate)

Sometimes a hard bounce isn't permanent. The December 2020 Google outage marked thousands of valid Gmail addresses as hard bounced because Gmail's servers were temporarily unreachable. Those weren't real bounces.

To manually clear a hard bounce:

1. Navigate to the prospect record in Account Engagement

2. Look for the "Hard Bounced" indicator (red envelope icon)

3. Click "Reset Pardot Hard Bounced" link on the prospect record

4. Uncheck "Do Not Email" and save

Important: Only do this if you know the email address is now valid. Resetting a bounce on a dead email just triggers another bounce, which damages your reputation further.

To bulk-clear hard bounces (use with caution):

1. Export a list of hard-bounced prospects with the new email addresses

2. Create an automation rule that:

- Matches prospects where Email does not contain the old domain

- AND Hard Bounced is True

3. Have Pardot support reset the bounce flag in bulk (requires a support case)

4. Reimport with updated emails

I don't recommend bulk resets unless you've verified the new addresses. One client reset 2,000 bounced records without verification. 1,400 bounced again. Their reputation score dropped and took six months to recover.

Step 4: Proactive List Hygiene

The best fix for bounce rates is never letting bad data in. Here's the maintenance routine:

Monthly:

Create a dynamic list of unmailable prospects:

• Do Not Email is True OR

• Opted Out is True OR

• Pardot Hard Bounced is True

Review this list. If it's growing faster than your total database, you have a data source problem.

Quarterly:

Run an engagement-based suppression:

• Last Activity was more than 180 days ago AND

• Score is less than 20 AND

• Grade is less than C

Move these prospects to a "Re-engagement" campaign. If they don't respond to three targeted emails over 60 days, suppress them from future sends.

Before every large send:

Run a pre-send check:

• Create a test dynamic list with your send criteria

• Check the "Mailable Prospects" count vs. total prospects

• If mailable rate is under 90%, clean the list before sending

Step 5: Email Authentication (SPF, DKIM, DMARC)

Authentication tells recipient servers that your emails are legitimate. Without it, even valid emails look suspicious.

Check your authentication status:

Navigate to Account Engagement Settings → Domain Management

You should see green checkmarks for:

• SPF (Sender Policy Framework)

• DKIM (DomainKeys Identified Mail)

• Tracker Domain

If any show red X marks, your emails are more likely to land in spam or bounce from security-conscious domains.

To fix authentication:

1. Copy the SPF and DKIM TXT records from Domain Management

2. Add them to your domain's DNS settings (this requires access to your domain registrar or IT team)

3. Wait 24-48 hours for propagation

4. Return to Domain Management and click "Verify"

If you're using a custom tracker domain (recommended), ensure it's also validated. First-party tracking reduces browser restrictions and improves tracking accuracy.

Step 6: IP Warming (For New or Dedicated IPs)

If you're on a dedicated IP or recently enabled one, you can't blast 100,000 emails on day one. New IPs have no reputation. Large sends from unknown IPs trigger spam filters.

IP warming schedule:

Day | Volume

1-2 | 1,000-2,000

3-5 | 5,000

6-10 | 10,000

11-15 | 20,000

16-20 | 50,000

21+ | Full volume

During warming:

• Send only to your most engaged segments (opened or clicked in last 90 days)

• Monitor bounce rates daily (stay under 5%)

• If bounce rate exceeds 10% on any send, pause and clean before continuing

• Maintain consistent daily volume (don't spike on one day)

I've seen teams rush the warming process because "we have a product launch in two weeks." They ended up blocklisted by Gmail and couldn't email 60% of their database for the launch anyway.

When Salesforce Suspends Your Account

If you receive a suspension notice, here's the sequence:

1. Stop all automated sends immediately. Pause every Engagement Studio program. Turn off all completion actions that trigger emails.

2. Identify the offending send. The suspension notice usually references a specific date or campaign.

3. Pull the bounce details. Export the list of prospects who bounced on that send. Analyze the bounce codes.

4. Document your remediation. Salesforce wants to see:

- What caused the high bounce rate

- What you've done to clean the list

- What process changes prevent future issues

5. Submit a support case with your remediation documentation. The reputation team reviews and reinstates sending, typically within 48-72 hours.

6. Start slow after reinstatement. Even after suspension lifts, send to your most engaged segments first. Rebuilding trust takes time.

The 90-Day Recovery Plan

After the client with the 47,000-prospect database got suspended, here's what we did:

Week 1:

• Exported all prospects marked Hard Bounced or Do Not Email

• Removed 12,400 records (26% of the database) that hadn't engaged in 18+ months

• Verified authentication settings (found DKIM misconfigured after a website migration)

Week 2-4:

• Created engagement tiers: Hot (activity in 30 days), Warm (31-90 days), Cool (91-180 days), Cold (180+ days)

• Built separate Engagement Studio programs for each tier

• Resumed sending to Hot segment only

Week 5-8:

• Expanded to Warm segment

• Monitored bounce rates weekly (never exceeded 2%)

• Added double opt-in for new form submissions

Week 9-12:

• Expanded to Cool segment with re-engagement content

• Archived Cold segment permanently

Bounce rate at the end of 90 days: 0.8%. Deliverability rate: 97.4%. Email engagement actually went up because we stopped sending to people who would never respond.

The Reality Check

Email deliverability isn't a set-and-forget system. Lists decay at about 2-3% per month. People change jobs. Companies go out of business. Addresses get abandoned.

If you're not actively cleaning your database, you're slowly building toward a bounce rate crisis. The question isn't whether it will happen. It's when.

Build the monthly hygiene routine now. Enable score decay to identify stale records. Authenticate your domains. And if you get that suspension email, don't panic. Clean, document, submit, and rebuild.

Next Steps

1. Run the Email Bounce Report and check your current rate

2. Verify SPF and DKIM authentication in Domain Management

3. Build a dynamic list of unmailable prospects and review weekly

4. Enable score decay if not already active

5. Create an engagement-tier segmentation for future sends

Need a full deliverability audit? Clear Concise Consulting offers Account Engagement health checks that cover authentication, list hygiene, and reputation recovery. Sometimes having someone walk through your specific setup surfaces problems you've been looking past for