Updated March 13, 2026

TL;DR: Open rates are no longer reliable. Apple's Mail Privacy Protection (MPP) pre-loads tracking pixels before recipients ever read your email, and security firewalls click links automatically, inflating your numbers across the board. Click tracking gives you a verified signal of real human intent, but using shared tracking domains puts your deliverability at risk. The fix is a Custom Tracking Domain (CTD). Set one up, enable link tracking in your campaigns, and connect click events to automated follow-up workflows. That is how you convert engagement data into booked meetings and defensible pipeline reporting.

Modern outreach runs on engagement signals, not volume alone. But measuring that engagement accurately requires a specific technical setup. This guide explains how email click tracking works, why clicks reveal intent more reliably than opens, and the exact technical setup required to track links without landing in spam.

Why open rates are no longer a reliable sales signal

Open rates used to anchor every campaign review. That changed on September 20, 2021, when Apple rolled out Mail Privacy Protection (MPP) for iOS 15, iPadOS 15, and macOS Monterey.

The mechanism is straightforward. When a recipient has MPP enabled, Apple pre-loads via proxy servers before the person ever touches the message. Your tracking pixel fires, your platform records an open, and the recipient has done nothing. According to analysis of two billion emails across approximately 80,000 deployments, open rates nearly doubled after MPP launched.

The scale of the problem is hard to ignore. Over 57% of email opens are attributed to Apple Mail, and 49.29% of opens in January 2025 were recorded by Apple clients alone. A metric distorted across half your sends cannot drive reliable decisions.

Bot opens compound the problem. Security firewalls follow every link in incoming emails to check for malicious content, which can trigger both open pixels and click events before the message reaches the inbox. The result is a dataset that mixes genuine human intent with automated noise.

The takeaway is that opens remain useful for troubleshooting low deliverability, but they cannot anchor your sales reporting because clicks give you verified human intent.

How email link tracking works technically

Every click your platform records starts with a process called link rewriting. When you enable link tracking in a campaign, the platform replaces each URL in your email with a tracking URL that routes through its servers.

Here is the step-by-step process:

1. Link replacement: When link tracking is enabled, the platform replaces your original URLs with rewritten versions that route through its tracking server.
2. Recipient clicks: The recipient clicks what looks like a normal link. Their browser loads the rewritten URL instead of the final destination.
3. Server logs the event: The tracking server records the click, timestamp, and IP address, along with browser and location data in some implementations.
4. Redirect to destination: The server simultaneously forwards the recipient to the original URL. The experience is near-instant and invisible to the user.

Open tracking works differently. A 1x1 invisible pixel is embedded in the email, and when the email client loads remote images, the pixel fires and records an open. This is exactly what Apple's proxy servers trigger automatically, meaning MPP fires pixels without reading the actual message.

The practical difference: a pixel load is passive and easily replicated by automated systems. A click requires a conscious action from a real browser, which is far harder to fabricate at scale.

You can also review why opens may not be tracked in your platform settings to understand additional edge cases that affect your open data accuracy.

Click tracking vs. open tracking: Comparing intent signals

The distinction between these two metrics maps directly to where a prospect sits in your pipeline.

An open signals curiosity at best. With MPP and bot interference, it often signals nothing at all. A click requires a deliberate action: the recipient read your email, processed your message, and chose to engage with specific content. That decision is what makes click rate signals conversion readiness in a way that opens simply cannot.

Clicks vary more across industries than open rates do because click behavior is harder for privacy tools to replicate. In B2B outreach, B2B clicks carry high intent because decision-makers do not casually click through content that is not relevant to an active problem.

Click rate measures CTA effectiveness in a way opens never can. That is the signal worth surfacing in your pipeline reviews and CFO-facing dashboards.

Does link tracking hurt deliverability?

Link tracking will hurt your deliverability, but only if you use shared tracking domains. This is the single most important technical decision in your tracking setup.

How shared tracking domains create risk

When you enable link tracking without configuring a custom domain, your tracking URLs route through the platform's shared domain. If multiple senders share one domain and one of them sends spam, shared domain reputation degrades for every sender on it, including you.

Mailbox providers flag the inconsistency directly. When your sending domain and tracking domain do not match, tracking links appear malicious to email security systems, which triggers spam classification even when your own sending practices are clean.

The fix: Custom Tracking Domains (CTD)

A Custom Tracking Domain is a subdomain you own (for example, track.yourdomain.com) that you connect to the platform's tracking infrastructure via a CNAME DNS record. From that point, every tracking URL in your emails carries your domain, not the platform's shared one.

We cover this directly in our Custom Tracking Domain documentation: "A custom tracking domain acts as a proxy, isolating your sender reputation from others. In short, always opt for a custom tracking domain."

The setup involves three steps:

1. Create a subdomain at your DNS registrar (for example, track.yourdomain.com).
2. Add a CNAME record pointing to our tracking infrastructure.
3. Enter the subdomain in Instantly's settings and verify the connection.

A note on Secure Email Gateways (SEGs)

Some corporate email environments use Secure Email Gateways that re-wrap every link on delivery. Our SEG detection guide covers how to identify when this is affecting your click data and what adjustments to make. SEG-rewritten links can generate false click events that distort your reporting and trigger unintended follow-up workflows.

"I like the campaign analytics feature of Instantly. It feels like a three-dimensional tool that provides information on how many emails are sent and the replies received. It even tracks how many emails are opened, putting everything in one place." - Saral S. on G2

How to use click data to identify warm leads

Click data drives two outcomes: immediate sales action and long-term campaign optimization. Treating it as a passive reporting number misses the first opportunity on every campaign you run.

The intent model

A prospect who clicks a case study link is materially different from one who ignored your email. They have invested time and attention in a specific piece of content, which warrants a different follow-up than a standard sequence step.

Our campaign-level tracking options let you monitor both open and link click events within the same platform, so you can segment and act on these signals without switching tools.

Building a click-triggered workflow

Here is a practical workflow for a "high-intent click" scenario:

1. Trigger: Prospect clicks a specific link (for example, a pricing page or case study) in your sequence.
2. Tag: Lead is tagged "High Intent" in your campaign dashboard.
3. Branch: Lead moves to a new subsequence with a more direct message, or a manual call task is created for the assigned rep.
4. Notify: A Zapier or Make.com integration fires a Slack alert to the rep with the lead's name, company, and the link they clicked.
5. CRM update: HubSpot or Salesforce contact record is updated with the engagement event and a follow-up task.

Our Zapier and Make.com integration guide covers the full webhook setup, including how to route leads based on engagement events to CRM deal stages or round-robin calendar booking. If you run a simpler stack, skip the Zapier layer and use our native CRM sync to create the follow-up task directly in Salesforce or HubSpot.

"I appreciate that Instantly is our go-to sales tool for outreach, list building, lead management, and sales activities... I also like how we don't miss emails anymore as we can track our sequences in one place, which helps with optimizing spam, bounce rates, and open rates, thus enhancing our sequences." - Sohaib I. on G2

Top email tracking software for sales teams

The right tracking tool depends on your team's scale, CRM stack, and whether you can configure a Custom Tracking Domain without an engineering ticket. Here is how the main options compare.

Instantly is what we built for teams that need to scale across multiple domains without per-seat costs. Our flat-fee Growth plan ($47/month, or $30/month on annual billing) includes unlimited email accounts, built-in warmup, link tracking, and Custom Tracking Domain support. Our cold email deliverability guide walks through ho

Our warmup network and sending algorithms protect inbox placement as you scale.

HubSpot Sales Hub is a strong choice if your team already runs on HubSpot CRM and you need native click data inside contact timelines. The trade-off is cost: per-seat pricing climbs quickly for teams of five or more reps, and Custom Tracking Domain configuration is only available on higher-tier plans.

Mixmax works well for Gmail power users who want in-thread tracking and scheduling, though it is not built for high-volume cold outreach across multiple sending domains, and custom domain support is restricted to Enterprise plans.

Saleshandy covers basic link tracking and sequence automation with unlimited account connections, but per-seat pricing still makes it harder to scale cost-effectively across large multi-domain setups.

"The transition from Apollo to Instantly was driven by the superior features offered here, underscoring the enhanced capabilities that meet my needs more effectively." - Hritik R. on G2

How to choose the best email tracking software

Run each option against these four criteria before you commit.

1. Custom Tracking Domain support
This is non-negotiable. If the platform does not support CTD, your tracking links share a domain with thousands of other senders, including bad actors. Confirm CTD is available on the plan you are evaluating, not just on enterprise tiers.

2. CRM integration depth
Click events are only actionable if they reach your CRM. Check whether the integration pushes individual link click events or only aggregate campaign stats. You want contact-level data in Salesforce or HubSpot so reps see the engagement context before they call.

3. Pricing model
Per-seat pricing creates friction as your team grows or as you add sending domains for different campaigns. Flat-fee models with unlimited accounts, like ours, scale without compounding software costs. Confirm what counts as a "seat" and whether additional inboxes trigger extra charges.

4. GDPR and CCPA compliance
Click tracking captures IP addresses and behavioral data. GDPR covers B2B cold outreach across all marketing activities, and cold email legal constraints apply even when you claim legitimate interest as your lawful basis. Your platform should support one-click unsubscribe, data minimization, and clear opt-out logging. Our GDPR email marketing guide covers legitimate interest, data minimization, and opt-out requirements in B2B outreach specifically.

According to GDPR documentation on legitimate interest, "the processing of personal data for direct marketing purposes may be regarded as a legitimate interest," but only when transparency and unsubscribe rights are clearly provided in every email.

Advanced engagement metrics to monitor

Once your click tracking is running cleanly, expand your reporting beyond basic click rates.

Time-to-click measures how long after delivery a recipient clicks a link. A click within seconds of delivery often indicates a security bot scanning links automatically rather than a human reading your email. Flagging and excluding these events from intent-based workflows keeps your pipeline data accurate.

Click-to-open rate (CTOR) measures unique clicks divided by unique opens. Even with inflated open numbers, a rising CTOR tells you that the recipients who do interact are finding your content compelling enough to act on. CTOR measures content effectiveness because it reflects how well your subject line and email body work together to drive engagement.

Bot click detection deserves its own process. Bot activity signs in data include clicking every link in an email and multiple clicks from the same IP within seconds. Barracuda firewalls scan links through multiple layers of web pages to check for malicious content, generating click events that have nothing to do with prospect intent. Excluding these events from your pipeline triggers is essential for accurate reporting.

Our SEG detection guide and delivery optimization tool help you identify and manage these edge cases, including sending as text-only when tracking links add deliverability friction in high-security corporate environments.

"Good deliverability, easy spin tax, can add in lots of personalization clean and simple UI, one click email responses using tags, smooth Zapier integration, and powerful tracking with subsequences." - Joshua Blacklidge on Trustpilot

How Instantly helps

We built Instantly to combine deliverability infrastructure — backed by a warmup network of 4.2m+ accounts, and click analytics in one platform, so you skip the work of stitching together a warmup tool, a tracking tool, and a sequencer.

Our link tracking feature in campaign settings gives you per-link click data at the contact level. Pair it with a Custom Tracking Domain, and every click event carries your domain's reputation, not a shared one. Our rotating IP and sending algorithm documentation explains how we distribute sends to protect inbox placement at scale.

For teams running across multiple sending domains, we show you how to scale volume without concentrating deliverability risk on a single domain in our secondary sending domains guide. Our guide to fingerprinting and deliverability explains how mailbox providers detect repeated patterns in high-volume campaigns and walks you through which email elements to review as you scale.

Our future of cold email video explains how engagement signals like clicks and replies are becoming the primary driver of outreach strategy in 2026, and what that shift means for teams still optimizing for opens.

Ready to track engagement without risking your domain reputation? Try Instantly free, set up your Custom Tracking Domain in the first session, and start routing high-intent clicks directly to your reps' calendars.

Frequently asked questions about email tracking

How accurate is email click tracking compared to open tracking?
Click tracking is significantly more accurate than open tracking because open rates nearly doubled after Apple MPP launched in September 2021, inflating figures across the board. Clicks require deliberate browser action, so automated systems produce far fewer false positives, though bot clicks from security firewalls still require detection and filtering.

Can I track clicks on all types of links in my emails?
You can track clicks on standard hyperlinks in both HTML and plain-text emails, as tracking works by rewriting links in either format. Our campaign tracking options let you toggle link tracking on or off at the campaign level to control which elements are tracked.

What is the difference between click tracking and open tracking?
Open tracking uses a 1x1 pixel image that fires when an email client loads remote images (passive, and easily triggered by privacy proxies), while click tracking rewrites your links to route through a tracking server before redirecting the user to the destination. Open tracking is passive and easily faked by Apple MPP and corporate firewalls, whereas click tracking captures a deliberate action from a live browser session.

What is a Custom Tracking Domain and do I need one?
A Custom Tracking Domain is a subdomain you own (for example, track.yourdomain.com) configured via a CNAME DNS record to point to your email platform's tracking infrastructure. You need one because shared domains expose your reputation to every other sender on that domain, while a CTD isolates your reputation and aligns your sending and tracking domains to reduce spam classification risk.

How do I spot bot clicks in my campaign data?
Look for bot click patterns to watch such as clicks on every link in the email simultaneously, multiple clicks from the same IP within seconds, or clicks recorded before an open event is triggered. Bot click signs like these are consistent with automated security scanning behavior rather than genuine prospect engagement.

Key terms glossary

Custom Tracking Domain (CTD): A subdomain you own and configure via CNAME to handle your email tracking redirects, isolating your sender reputation from shared platform domains.

CNAME record: A DNS record type that maps one domain name to another, used to point your tracking subdomain to your email platform's tracking infrastructure.

Redirect: The process where a clicked tracking link routes through the tracking server to log engagement data, then immediately forwards the user to the original destination URL.

Tracking pixel: A 1x1 image embedded in an email that fires a server request when the email client loads remote images, recording an open event. Privacy proxies like Apple MPP trigger these automatically.

Bot click: An automated click event generated by a security scanner, firewall, or spam detection service rather than a human recipient. Signs include clicking every link in rapid succession and clicks recorded before the email is marked as opened.

False positive: An engagement event recorded by automated systems rather than genuine human interaction. Apple MPP and corporate security firewalls are the two most common sources of false positives in cold email campaign reporting.

Click-to-open rate (CTOR): Unique clicks divided by unique opens. Measures how well your email body converts recipients who open into recipients who click, and is a stronger indicator of content quality than either metric alone.

Apple Mail Privacy Protection (MPP): Apple's feature, launched September 2021, that pre-loads email content through proxy servers, causing tracking pixels to fire even when recipients have not read the email.