Email providers to avoid: the warning signs to check first

Searching for "email providers to avoid" typically yields blunt lists of names. I avoid absolute blacklists because a platform that is unsuitable for one person's workflow might serve someone else well. A more practical approach is identifying the structural warning signs to watch out for. Below is an objective review of these red flags, showing which of the 230 providers in my database trigger them based on live audits.

Looking for trusted alternatives straight away? Browse the top-rated email providers, the most secure encrypted services or my tested Gmail alternatives.

1. Hefty renewal price hikes

Teaser rates for the initial billing cycle are widespread, particularly amongst traditional web hosts. However, the subsequent renewal fee is what you will be paying over the long term, so check it carefully before entering payment details.

I have documented steep introductory-to-renewal price jumps with:

• Hostinger Email
• Fasthosts
• 123 Reg
• Bluehost Professional Email
• GoDaddy Professional Email
• SiteGround
• Hostpoint
• LCN
• Names.co.uk
• tsoHost
• UK2
• Spacemail by Spaceship
• Network Solutions
• HostGator
• InMotion Hosting
• GreenGeeks
• pair Networks
• Host Europe
• domainfactory
• Simply.com
• Dinahosting
• home.pl
• FastComet
• NameHero

Each host's listing breaks down standard recurring pricing alongside initial discounts.

2. Email tied exclusively to web hosting packages

Certain providers refuse to sell standalone inboxes, packaging email exclusively within shared web hosting plans. If you manage an active website there, this may be convenient; but if you only need reliable email, you end up paying for server resources you do not use. Furthermore, migrating your website in the future forces a migration of your entire email setup at the same time.

Providers that bundle email strictly into hosting plans include:

• SiteGround
• netcup
• ALL-INKL.COM
• 34SP.com
• GreenGeeks
• Pickaweb
• webgo
• manitu
• Loopia
• Simply.com
• Zone.ee
• FastComet

3. Business models reliant on ad targeting

Adverts do not automatically make a provider unviable, and many offer paid subscriptions to remove them. Nonetheless, an ad-funded business generates more revenue the more behavioural data it amasses on you. That commercial incentive is worth weighing up before routing sensitive communications through their servers.

Across the 230 services I track, 34 are directly subsidised by advertising or owned by advertising conglomerates: Google Workspace, Gmail, Microsoft 365 Business, Outlook.com, Yahoo Mail, AOL Mail, GMX, mail.com, DuckDuckGo Email Protection, mail.de, WEB.DE, Yandex Mail, La Poste Mail, Libero Mail, Email.cz (Seznam), t-online Mail, freenet Mail, WP Poczta, Onet Poczta, Interia Poczta, Rediffmail, Tiscali Mail, Mail Orange, Mail.ru, Inbox.lv, ABV.bg, Freemail, SAPO Mail, Virgilio Mail, Centrum.cz, Ukr.net, Daum Mail (Kakao), Sina Mail and Yahoo! Japan Mail.

Read my companion piece on how free email providers monetise user accounts for a thorough breakdown of this dynamic.

4. Lock-in through proprietary apps only

The majority of email hosts support standard protocols (IMAP/SMTP/POP3), allowing you to check mail via familiar clients such as Apple Mail, Microsoft Outlook or Mozilla Thunderbird. A few platforms lock off standard protocol access, forcing you to use their proprietary web interface or mobile apps.

While this restriction is sometimes implemented for architectural reasons, such as zero-knowledge end-to-end encryption, it restricts your choice of workflow and means exporting your data later requires proprietary tools. Services relying solely on dedicated apps include:

• Tuta & Tuta Business
• HEY
• Atomic Mail
• PreVeil
• Rediffmail
• Lavabit

5. Absence of multi-factor authentication (2FA)

Two-step verification is a baseline security standard that prevents unauthorised access even when account passwords are compromised. In modern web infrastructure, every provider should support it as standard. My testing confirms that Riseup does not currently offer two-factor authentication.

The 5-point pre-sign-up checklist

• Verify long-term renewal rates: Check the ongoing annual or monthly fee once introductory promotional discounts expire.
• Audit jurisdiction and server location: The country where the company is registered and where its physical servers reside governs which legal frameworks apply to your data.
• Confirm data export pathways: Ensure the provider supplies an automated export tool or supports standard IMAP access so you can migrate without friction if needed.
• Inspect cancellation and refund terms: Reputable providers provide straightforward, self-service online cancellation rather than requiring phone calls or support tickets.
• Check custom domain flexibility: Using an address like you@yourname.co.uk ensures you maintain domain ownership and can switch hosts without disrupting your digital life.

Every service listed on this site features these verified metrics, alongside timestamps showing when each fact was last tested. If you run into technical terms you do not recognise, visit my jargon-free email glossary.