Risky is not invalid — it is a real mailbox with a caution flag. Here is how to handle it.
A risky verdict means the receiving server gave us reason to believe the mailbox exists, but with a signal that sending might not go smoothly. It is deliberately separate from undeliverable: deleting every risky address throws away real subscribers, and blasting all of them at once risks bounces.
Do not blanket-delete them. Send to risky segments in smaller, spaced batches, watch the bounce rate, and let engagement decide: an address that opens is proven; one that hard-bounces removes itself. If your sender reputation is fragile, hold risky addresses until your deliverable segment has warmed your domain.
Fairness note: when a greylisted check resolves without a definitive mailbox confirmation, we do not pretend to more certainty than we have — and checks that never got a real answer are refunded as unknown.