What are live-verified leads? And why bought lists burn money

The pitch usually arrives on a quiet Tuesday: 5,000 UK decision makers, with names, job titles, emails and direct dials, for less than a day's ad spend. You buy the file, load it into your email tool and press send. Then the story unfolds in the order it always does. A worrying slice of the addresses bounce straight away. Some belong to companies that stopped trading a while ago. Plenty reach real businesses but the wrong people: the "operations director" left two roles back and her old address forwards to nobody. And a few land with people who never asked to hear from you, and who say so, loudly, to their spam button.

I have heard versions of this story from enough business owners to finish it for them. The list gets quietly abandoned. The sending domain limps for months, because the bounces and complaints taught every mailbox provider to distrust it. And "buying leads" gets filed under things that do not work, which is a shame, because the idea was never the problem. The product was.

Here is why it happens. Contact data starts decaying the moment it is collected. People change jobs and titles constantly. Businesses close, merge, move premises, rebrand and change numbers. Websites lapse. A list is a photograph of a moving crowd, and by the time a warehouse database has been packaged, marketed and resold to you, the crowd has moved on. Nobody went back to check who was still standing where the photograph said they were.

Live-verified leads, defined

Live-verified leads are prospect records that have been checked alive on the day they are delivered: the website loads, the phone number is current, the business trades under that name at that address, and the contact route reaches someone with a reason to care about your offer. They are built fresh, to one buyer's specification, rather than resold from a warehouse database that anyone with a card can buy. Same product category as a bought list, completely different object.

The phrase doing the work is "on the day". Not verified at some unstated point in the past, not "regularly cleansed", not "updated quarterly". Checked alive on the day the file reaches you, with the check date attached to each record, because that is the only day on which anyone can say the record is true.

What verification actually involves

"Verified" is one of the most abused words in the leads business, so here is what it should mean, in plain English. For every record, someone or something has confirmed, on delivery day:

• The company exists and trades. A real, current business, not a dissolved company, a dormant shell or a brand that vanished when the founder retired.
• The website is live. It loads, it describes the business, and what it describes matches the record.
• It fits your spec. The business does the thing you asked for. If you wanted independent physiotherapy clinics in the East of England, that is what each record is, not "healthcare, miscellaneous".
• The contact details are current. The phone number connects to that business, and the contact route, whether a role address, a named person or a form, reaches the right desk.
• It is not already yours. Every record is checked against your existing customers and open conversations, because nothing dents credibility like cold-pitching someone you already serve.
• It is screened for obvious conflicts. Direct competitors of your current clients, firms you have asked to avoid, categories that make no sense next to your offer.

And what it deliberately is not

Live verification is not scraping the personal email of every employee whose name appears near a company. A junior designer's inbox is a person, not a business contact route, and treating people as inventory is how this category earned its reputation. It is also not a master database sold to fifty buyers, where you and your competitors take turns exhausting the same tired names. A live-verified list exists once, for one buyer, to one spec, and then the work starts again for the next buyer.

The UK legal frame, in plain English

This is the practical shape of the rules as I work to them, not legal advice; a campaign big enough to bet your business on is big enough to run past a solicitor. With that said, the UK position on B2B outreach is more workable than most owners fear and stricter than most list sellers admit.

• Email to corporate addresses runs on legitimate interests. Under UK GDPR you can generally contact people at limited companies about things relevant to their role without prior consent, relying on legitimate interests as your lawful basis. That basis is not a free pass. It requires a genuine assessment, written down, that your interest does not override theirs; outreach that is actually relevant to the recipient's work; a plain opt-out in every message; and suppression the same day someone uses it.
• Sole traders and partnerships are treated differently. PECR, the electronic marketing rules that sit alongside UK GDPR, treats sole traders and most partnerships more like individuals than like companies. In practice that means consent-grade care: they should be flagged in any list you buy and approached on a proper basis, not swept into a corporate blast.
• Cold calls have their own gate. Before any cold call, the number needs screening against the TPS and CTPS registers, and against your own do-not-call list. "They are a business" is not an exemption.
• Bought consumer lists are where businesses get burned. Consent rarely survives being sold on. A consumer who ticked a box on a prize-draw site years ago did not consent to hearing from you, whatever the seller's paperwork implies, and responsibility for checking sits with the business that presses send, not the one that sold the file.

None of this makes lawful outreach hard. It makes lazy outreach hard, which is rather the point.

How to judge any lead vendor

Whoever you are thinking of buying from, including our own Prospect Vault, ask these questions before any money moves. The answers separate list builders from warehouses very quickly.

• When was each record last checked? You want a date on the record. "Recently" and "continuously refreshed" are not dates.
• Was this built to my spec, or does it already exist? If the list existed before you asked, you are buying the old photograph.
• Will you show the verification evidence? What was checked, how, and when, per record, not a paragraph of reassurance on a sales page.
• Do you flag sole traders and partnerships? A vendor who does not understand why you are asking has answered the question.
• Do you screen suppression and TPS/CTPS? Your existing opt-outs and the statutory registers, both, before delivery.
• What happens to records that fail checks? The right answer is that they are removed and replaced. The wrong answer is that they are padded in to hit the count you paid for.
• Will you explain the lawful basis in writing? A vendor who can put in writing why you may lawfully contact each type of record has done the thinking. A "GDPR compliant" badge in a footer is not that.

One "no" is survivable if you understand what you are taking on. Several is a warehouse with a nicer website.

Prospect Vault: what the compliant version looks like

That checklist is the standard Prospect Vault is built to, because I wanted a lead product I could defend line by line. Lists are built fresh to your spec and never resold. Every record is checked alive on the day of delivery and carries its check date. Records that fail a check are removed and replaced before the file reaches you. Sole traders and partnerships are flagged. Your existing customers and stated conflicts are screened out. And every delivery includes a compliance note: the lawful basis for each record type, what was screened, and how opt-outs will be suppressed from day one.

The part I care about most is what happens after delivery, because no list books anything on its own. Prospect Vault plugs into the rest of our system: the same AI receptionist that answers your inbound enquiries can work a verified list politely, opening conversations at a respectful pace, replying within a minute when a prospect responds, and dropping anyone who opts out the same day. It is the same thinking that drives our reactivation work and the campaigns engine: real conversations with real businesses, with records kept. Prices are on the pricing page.

When not to buy any list at all

I would rather turn down an order than watch it fail, so here is the uncomfortable bit. There are two situations in which you should not buy a list from anyone, me included.

You cannot follow up fast. A reply to cold outreach is an enquiry, and enquiries are brutally time-sensitive: leads contacted within the first minute convert up to 391% better (Velocify, across roughly 3.5 million leads), and replying within the hour makes a meaningful conversation about seven times more likely (Harvard Business Review). If the enquiries you already get wait until tomorrow, a list will simply produce more silence at higher cost. Fix speed to lead first. Most owners believe this is already handled, which is why it comes first among the lies businesses tell themselves about their enquiries.

Your offer is not clear yet. If you cannot say in one sentence who this is for, what they get and what happens next, a list amplifies the confusion rather than fixing it, and cold prospects are the least forgiving audience you will ever write for. Sharpen the offer on warmer names first: your own past customers and lapsed clients usually respond better than strangers, which is the whole argument of our reactivation playbook.

The term "live-verified" will get borrowed, and I hope it is, because if it pushes even a few vendors to put a check date on every record, buyers win either way. Until then, one question does most of the work: when was this record last checked alive? Ask it of everyone, us included.