False Opt-Outs & Email Clicks

  • Updated

Two unrelated problems can skew your email reports in the same direction: automated opt-outs submitted by recipient mail servers, and clicks from anti-spam scanners that check links before delivery. Both look like real engagement in the Sent Message Report, but neither reflects a human recipient. This article explains how to spot each one and what to do about it.

Why this matters: Both issues distort the metrics you use to judge email health. False opt-outs make unsubscribe rates look worse than they are and can remove contacts who never chose to leave. False clicks inflate click-through rates and push the wrong leads up the score ladder. Getting this right protects both your audience and your decisions about what's working.

False Opt-Outs

Quick Reference (Advanced Users) - Click to Expand
  • Large mail providers auto-click links, including opt-out links, to scan for threats.
  • Act-On cannot stop this at the source. The behaviour is set by the recipient's mail server.
  • Triggers include HTML opt-out links, text-only opt-out links, List-Unsubscribe headers, and one-click unsubscribe headers.
  • If you can identify the false opt-outs, bulk-restore them using Managing Opted-Out or Unsubscribed Contacts in Bulk.
  • For help identifying suspect opt-outs, contact Support.
Try it like this: If opt-out numbers on a recent send look unrealistically high, check whether multiple opt-outs arrived from the same domain within seconds of each other. That pattern usually points to an automated scanner. Use Managing Opted-Out or Unsubscribed Contacts in Bulk to restore the ones you're confident are false.

Why it happens

Most major email providers automatically click links in incoming mail to identify anything malicious. This scanning happens before the recipient ever sees the email. If the scan hits your opt-out link, or fires the List-Unsubscribe header, Act-On records an opt-out that never came from a person.

False opt-outs can be triggered by any of the following:

  • HTML opt-out link.
  • Text-only opt-out link.
  • List-Unsubscribe header, via either forced email send or link click. Example:
    List-Unsubscribe: <mailto:unsubscribe-1234abc...@unsubscribe.b2b-mail.net>, <https://marketing.act-on.com/acton/test-list/...>
  • One-click unsubscribe list header. Example:
    List-Unsubscribe-Post: List-Unsubscribe=One-Click

What you can do

Act-On cannot stop the scanning at the source, because whether an email is flagged for deeper checks is decided by the recipient's mail server. Two things you can do:

False Email Clicks

Quick Reference (Advanced Users) - Click to Expand
  • Anti-spam appliances (e.g. Barracuda ESS, Palo Alto) click the first link of each email to scan it.
  • Typical signs: many clicks on the same domain within seconds of send, almost all on the first link.
  • Fix 1: Toggle Ignore clicks on 'View in Browser' link at Settings > Other Settings > Custom Account Settings > Labs.
  • Fix 2: Add the scanner's IP range to Settings > Other Settings > Internal IP Addresses.
  • Act-On Analytics users can apply the True Open filter to detect bot opens.
Try it like this: If a recent send has a sudden spike of clicks on the "View in Browser" link, toggle on Ignore clicks on 'View in Browser' link under Settings > Other Settings > Custom Account Settings > Labs, and your next reports will filter them out.

What is an anti-spam appliance?

Recipient mail servers use scanners to weed out spam before it reaches the inbox. Some scanners click the first link in each message to check it for threats. Barracuda Email Security Suite (ESS) is a common example. ESS doesn't identify itself as a scanner in the way some similar products do, so Act-On can't automatically exclude those clicks.

Typical signals of scanner activity:

  • A high number of clicks on a single send, often from contacts on the same email domain.
  • Multiple clicks firing within seconds of the email being sent.
  • All clicks hitting the same link, usually the first one in the email (often "View in Browser").
  • Click patterns that are clearly not human behaviour.

Fix 1: Ignore clicks on the "View in Browser" link

We don't recommend removing the "View in Browser" link from your email header. Real recipients rely on it. Instead, use Act-On's optional setting to stop counting clicks on that link.

  1. Go to Settings > Other Settings > Custom Account Settings > Labs.
  2. Toggle on Ignore clicks on 'View in Browser' link.
Labs toggle for ignoring View in Browser clicks
Note: The change applies to new reports only. Existing reports keep any View in Browser clicks they already counted.

Fix 2: Ignore known scanner IP addresses

Add the scanner's IP range to Settings > Other Settings > Internal IP Addresses. Common ranges:

Barracuda ESS

Barracuda US

  • 64.235.144.0-64.235.159.255*
  • 209.222.80.0-209.222.87.255

Barracuda UK

  • 35.176.92.96-35.176.92.127

Barracuda DE (Germany)

  • 35.157.190.224-35.157.190.255

*The range 64.235.144.0-64.235.159.255 is automatically ignored for all accounts created after May 2017.

Palo Alto Networks

  • 65.154.226.100
  • 65.154.226.101
  • 65.154.226.109
  • 65.154.226.159
  • 65.154.226.220

Others

These IP addresses have been associated with abnormal click activity in the past:

  • 196.16.0.0-196.19.255.255
  • 34.192.0.0-34.255.255.255

Full walkthrough for adding IPs: Ignore Activity from Known IP Addresses.

Find scanner IPs from your own data (Data Studio, advanced)

If you have the Data Studio add-on, pull an Email Clickthrough report that includes the IP address field. Those are the IPs generating clicks in your emails. Confirm whether any belong to a security provider by checking their MX record:

  1. Open Command Prompt or Terminal and run Nslookup (Windows guidance here).
  2. Enter the IP address and the recipient's domain when prompted.
  3. Look at the result. It should identify the security provider. For example, Barracuda clicks resolve to .ess.barracudanetworks.com.

Add the confirmed scanner IPs to Settings > Other Settings > Internal IP Addresses. New reports will stop counting clicks from those addresses. Existing reports are not modified.

Act-On Analytics: True Open

Act-On Analytics users can apply the True Open filter and liveboard to detect and filter suspected bot activity from email performance reports. Learn more.

Common pitfalls

  • Removing the "View in Browser" link to stop scanners clicking it. This hurts your real recipients. Use the Labs toggle instead.
  • Assuming Act-On can block false opt-outs. The scanning is driven by the recipient's mail server and cannot be prevented upstream.
  • Only adding the US Barracuda range. If your audience is global, add the UK and DE ranges too.
  • Forgetting that changes are forward-looking for activity history and lead scores, even though reports are updated retroactively.

Was this article helpful?

Have more questions? Submit a request