Why Vetting Matters (the cost of bad leads)
Before buying leads, demand a sample, verify data freshness and source, confirm consent and TCPA/CAN-SPAM compliance, check for duplicates and exclusivity, and test deliverability. Avoid vendors who won't reveal where leads come from. Real-time, consent-based exclusive leads carry far less risk than bulk lists.
The price on a lead list is never the real price. The real price is the wasted hours your sales team spends dialing disconnected numbers, the emails that bounce and damage your sender reputation, and the legal exposure when a "lead" never consented to be contacted in the first place. A list that looks cheap at $2 per record becomes expensive fast when 40% of it is dead, duplicated, or resold to five competitors.
Vetting is the difference between a list that funds your pipeline and a list that quietly drains it. The good news is that you can catch most junk before money changes hands. Below is the exact checklist we use when evaluating any external data source, plus the questions and red flags that separate a serious vendor from a scammer. If you would rather skip lists entirely, our done-for-you lead generation generates fresh, exclusive leads instead of reselling a database.
The Pre-Purchase Vetting Checklist
Work through every item below before you pay. If a vendor cannot answer or refuses to let you test, that is your answer.
Source and consent
The first question is always: where did this lead come from? A legitimate lead is tied to a specific action a person took, such as filling out a form, requesting a quote, or opting into a newsletter. Ask the vendor to name the source and show you the opt-in language the person agreed to. If consent was collected for one purpose (entering a sweepstakes) and is being sold for an unrelated one (insurance cold calls), that consent is effectively worthless and may expose you to compliance risk.
Get the consent claim in writing, including timestamps and the URL or campaign where the data was captured. Vendors who describe their source only as "proprietary" or "a large network of partners" are usually obscuring scraping, resale, or incentivized data you do not want your brand attached to.
Freshness and exclusivity
Lead data decays quickly. People change jobs, phone numbers, and email addresses constantly, and intent fades within days. Ask exactly when each record was generated. A lead captured this week behaves very differently from one captured eight months ago, even if the contact details still work. Be skeptical of any vendor selling "fresh" data who cannot give you a capture date per record.
Then ask whether the leads are exclusive to you or shared. Shared leads are sold to multiple buyers at once, which means the prospect may already have heard from three or four of your competitors before your first call. Exclusivity should be stated in the contract, not implied. For a deeper breakdown, see our guide on exclusive vs shared leads.
Duplicates and deliverability
Always deduplicate a file against itself and against your existing CRM before you act on it. Padding is common: vendors inflate counts with the same person listed under slight variations, or with records you already paid for in a previous batch. A quick dedupe on email and phone often shrinks a list by 10 to 30%.
Finally, test deliverability on the sample. Run emails through a verification tool to confirm the inbox exists and is not a spam trap, and validate phone numbers against a line-type lookup to filter disconnected and invalid numbers. Watch for patterns that signal fabricated data, such as sequential email addresses, the same area code repeated dozens of times, or names that do not match their email domains.
Questions to Ask Any Lead Vendor
Send these questions in writing and keep the answers. A reputable vendor will respond without hesitation; a list seller will get vague or defensive.
| Question | Good Answer | Warning Sign |
|---|---|---|
| Where do these leads come from? | Named sources, sample forms, opt-in URLs | "Proprietary" or "private network" |
| How and when was consent collected? | Opt-in language plus timestamps | No proof, or consent for another purpose |
| How old is the data? | A capture date per record | "Recently updated" with no dates |
| Exclusive or shared? | Exclusive, stated in the contract | "Limited sharing" or won't say |
| What is the refund or replacement policy? | Clear credit for bad records | All sales final, no guarantees |
| Is it TCPA and CAN-SPAM compliant? | Documented opt-in and compliance terms | "That's on you to check" |
This article is general information, not legal advice. Consult a qualified attorney for guidance on TCPA, CAN-SPAM, and your specific compliance obligations.
Red Flags That Signal a Junk List
Some signals should end the conversation immediately. If you see any of these, the leads are not worth the risk no matter how low the price:
- No sample allowed. A vendor confident in their data will let you test 10 to 25 records first. Refusal almost always means the list will not survive scrutiny.
- Unbelievable volume at an unbelievable price. "50,000 verified buyer leads for $99" is a scraped or recycled list, not real intent data.
- Source is a secret. If they cannot tell you where the data came from, you cannot defend how you obtained it.
- No consent proof. Contacting people who never opted in is both ineffective and a compliance hazard.
- Shared with everyone. If the same record is sold to dozens of buyers, you are paying to be one more cold call in a crowded queue.
- High bounce and disconnect rates in the sample. A dirty sample is the best version of the list you will ever see; the full file is worse.
If most of your evaluations keep ending at one of these red flags, the issue may be the buying-lists model itself rather than the individual vendor. We cover that broader question in is buying leads worth it.
A Lower-Risk Alternative to Buying Lists
Even a perfectly vetted list has a structural problem: you are buying static contact data that someone else generated, often for a different purpose, that starts decaying the moment it is delivered. The contacts never raised their hand for your specific offer, and you are usually not the only buyer.
The lower-risk model is real-time, exclusive, consent-based lead generation, where each lead comes from a campaign built around your offer and reaches you while intent is still warm. Costs vary by industry and market, but in 2026 done-for-you generation typically runs as a per-lead fee or a monthly retainer rather than a one-time list purchase, and the leads are yours alone. For how those pricing structures compare, see pay per lead vs retainer.
That is the model we run at Position Xero. Instead of reselling a database, we build and manage campaigns that produce fresh, exclusive, consent-based leads for your business, so vetting becomes a quality check on your own pipeline rather than damage control on someone else's list. You can see how it works on our lead generation page.
Frequently Asked Questions
Request a free sample of 10 to 25 records and verify them before paying for the full list. Run the emails through a deliverability checker to confirm they accept mail, validate the phone numbers against a line-type lookup, and search a handful of names against public profiles to confirm the person and company exist. If the vendor refuses a sample or the sample is full of role addresses like info@ and bounced numbers, treat the leads as unverified and walk away.
Ask where the leads come from, how and when consent was collected, how old the data is, whether the leads are exclusive or shared, how many other buyers receive them, what your refund or replacement policy is for bad records, and whether the data is TCPA and CAN-SPAM compliant with proof of opt-in. A reputable vendor answers all of these in writing. Vague answers about proprietary sources are a warning sign.
Some data providers sell reasonably clean B2B contact data, and a few real-time providers deliver consent-based leads tied to a specific form fill. However, even reputable sources go stale quickly and rarely match the intent of a lead you generate yourself. The most reliable approach is real-time, exclusive, consent-based leads or your own inbound pipeline rather than bulk static lists, which decay fast and are often resold.
Always test a sample first, demand exclusivity in writing so the same lead is not resold, and deduplicate every file against your existing CRM and against itself before you act on it. Verify emails and phone numbers, watch for patterns like sequential addresses or repeated area codes, and negotiate a replacement policy for any record that bounces, is disconnected, or has no record of consent.
Related Articles
Is Buying Leads Worth It?
An honest look at when purchased leads pay off, when they don't, and what to do instead.
Exclusive vs Shared Leads
Why exclusivity changes everything about close rates, cost, and lead quality.
Done-For-You Lead Generation
How we generate fresh, exclusive, consent-based leads instead of reselling lists.
Want help implementing this for your business?
Book a free 30-minute audit. We'll review your current setup and show you exactly what we'd change.
Book My Free Strategy Call