Bought lists vs built lists: the maths and the risk

A bought list looks cheap because you pay per record; a built list looks expensive because you pay for a process. The maths reverses once you count bounced sends, burned domain reputation and the campaigns you cannot run while a mailbox recovers. For UK B2B firms of 5–50 staff, building wins on cost per conversation — the only unit that actually matters.

What does a bought list actually cost?

On the invoice: pennies per record, often a few hundred pounds for several thousand contacts. That is the visible cost. The invisible cost is accuracy. Data vendors sell the same records to many buyers over many months, and the records decay the whole time — people change jobs, firms close, mailboxes get retired. By the time a bought list reaches you, a meaningful share of it is commonly dead, and you have no way of knowing which share without doing the verification work the vendor skipped.

Compare that with what a build costs. Our standalone database build is £950, and the process behind it — source, enrich, verify — is documented end to end in The B2B Database Building Guide. Per record it looks worse. Per deliverable conversation with a correctly targeted decision-maker, it is not close.

What breaks first when you send to a bought list?

The mechanism runs in one direction and it is worth walking through slowly:

1. When you load unverified addresses into a sending tool, dead addresses bounce.
2. When your bounce rate climbs past the low single digits, mailbox providers read it as a spam signal and downgrade the sending domain's reputation.
3. When reputation drops, your emails — including the ones to valid, well-targeted addresses — start landing in spam.
4. When that happens, every future campaign from that domain pays the tax, and recovery takes weeks of careful, reduced-volume sending.

Notice what broke: not the campaign, the infrastructure. A bought list does not just waste the money you paid for it; it damages the asset you send everything else from. Verification before sending is the gate that prevents this, which is why it is non-negotiable regardless of where a list came from.

What does building a list involve?

Three stages. First, targeting: define who you sell to precisely enough that a list builder can execute it — ICP before volume, always. Second, sourcing: pull companies from the public record and people from professional networks, as covered in where UK B2B data actually comes from. Third, enrichment and verification: find each decision-maker's address and confirm it accepts mail before it goes anywhere near a campaign.

The output is smaller than a bought list and better in every dimension that matters: accuracy, relevance, and a provenance trail for every record. It takes days rather than minutes. That is the trade.

What about compliance?

UK law permits B2B cold email to corporate subscribers under PECR, provided you identify yourself and offer an opt-out, and UK GDPR's legitimate interest basis is commonly relied on for prospect data. But legitimate interest requires you to know what data you hold, where it came from and why holding it is justified. A built list answers those questions by construction. A bought list of unknown provenance typically cannot — vendors rarely document where records originated or when. None of this is legal advice; the practical point is that provenance you control is easier to defend than provenance you purchased.

When does buying ever make sense?

As raw material, occasionally — a licensed dataset from a reputable vendor can accelerate the company-shortlist stage, provided every record still passes through your own enrichment and verification before sending. What never makes sense is the thing the vendor implies: loading the file and pressing send.

One habit change makes the built approach sustainable: treat list building as a standing weekly block rather than a panic purchase when the pipeline looks thin. A list is a stock that decays; topping it up belongs in the calendar, the same way I schedule the rest of my week. Firms buy lists when they are behind. Firms that build on a cadence do not get behind.

---

Next step: the Growth System Audit — £450, seven days, credited against any build — maps where your growth system leaks and what to build first.