Is Lusha Tracking Your Email? How to Block It

A stranger emails you from an ordinary Gmail or company address. No newsletter template, no unsubscribe banner, just a short note that mentions your job title. It feels personal. If the sender found you through Lusha, though, that note probably came from a Lusha Engage sequence, and Lusha email tracking is recording each time you open it. The rep gets a counter next to your name, the time of your first and last open, and a filter that sorts you into an engagement tier. You never see any of it.

Key Takeaways

• Lusha Engage sends sales sequences from the rep's connected Gmail or Outlook mailbox, and Lusha's docs say Engage is available on all Lusha plans.
• Lusha's documentation states that every tracking pixel request counts as one open, and shows the rep an open counter with first and last open timestamps for each recipient.
• Reps can filter recipients by opens: once, two to four times, or five or more times, which Lusha labels Highly Engaged.
• Lusha's public docs do not name the pixel's host, do not describe click tracking, and do not describe a setting that turns open tracking off.
• Gmail's own setting to ask before displaying external images stops the pixel from loading at all, which is the one block that works without knowing the tracker's address.

What Is Lusha Engage?

Lusha Engage is the email outreach module built into Lusha, the B2B contact data platform. Lusha's guide to what Lusha Engage is describes the pitch plainly: "Connect your Gmail or Outlook account and start sending personalised, scheduled emails to your prospects at scale."

The workflow is short. A rep finds you in Lusha's database, reveals your email address, and drops you into a sequence of timed messages and follow ups. The same page sets a cap of 1,000 emails per user per day and 10 active sequences per user. Lusha's Engage feature overview lists "Performance tracking - monitor open rates, reply rates, and bounce rates per sequence" among its features. It also states: "Engage is available on all Lusha plans."

That last line matters for recipients. Open tracking is not reserved for some enterprise tier. Anyone with a Lusha account who connects a mailbox gets it.

How Does Lusha Email Tracking Work?

Lusha email tracking works with a tracking pixel, a tiny remote image inside the message that your mail client requests when you open it. Lusha's page on monitoring sequences is explicit about the rule: "Every tracking-pixel request counts as one open." Each time the image loads, the counter goes up by one.

The email itself does not come from Lusha's servers. Lusha's Gmail integration guide says reps can connect "a Google Workspace or personal Gmail account," and warns that connecting "grants Lusha permission to send emails on your behalf and to read your calendar events." So the message lands in your inbox from the rep's real address, sent through Google or Microsoft, with the pixel tucked inside.

Several things are missing from the public record, and they are worth stating precisely:

• The pixel's hostname is not documented. We found no Lusha doc, privacy notice or reputable technical write up that names the domain serving the Engage pixel, so we are not going to guess one.
• Click tracking is not described. We searched Lusha's full documentation export for click and link tracking in Engage and found none. That does not prove links are untouched, only that Lusha does not document rewriting them.
• No off switch is described. The Engage settings documentation mentions a toggle for the unsubscribe link, but nothing for turning open tracking off. Whether a rep can disable it is unverified.

One more detail: the docs count requests, not people. Lusha's Website Visitors product says bot traffic is filtered out, but the Engage pages describe no such filtering for email opens. A security scanner or image proxy fetching the pixel could, on that wording, register as you reading the email.

What Does the Sender See When You Open It?

The rep sees a per recipient open history. According to the same Lusha sequences guide, the Emails tab shows delivery status for each message, and "For any email marked Opened, an open counter appears next to the status showing how many times that recipient opened it."

• Timestamps. Hovering over the counter shows "Opened at" for a single open, or "First open" and "Last open" once you have opened it twice or more.
• Engagement tiers. The Opened filter splits recipients into "Opened once", "2-4 times" and "5+ times (Highly Engaged)". Lusha suggests reps use this "to quickly isolate your most engaged prospects and prioritize follow-up."
• Sequence metrics. Open rate, reply rate and bounce rate roll up for each sequence.

Put together, a rep could see that you first opened a pitch on Monday morning, came back to it Thursday evening, and have now opened it six times. That is a read receipt in all but name, and you never agreed to send it. We explain how this compares with Gmail's own opt in receipts in how Gmail read receipts work.

Why Email Users Should Care

Most people judge a cold email by how it looks. A designed newsletter from a no reply address reads as marketing, and people half expect it to be tracked. A plain text note from a named person at a real company reads as a human writing to a human. Lusha Engage breaks that instinct. The message is sent from the rep's own mailbox, so it carries that person's name and domain, yet it carries the same kind of pixel as a bulk campaign. The "it's from a person" test no longer tells you anything about tracking.

Lusha is not alone here. We have covered the same pattern in ZoomInfo sales emails, which record a fresh event every time you reopen, and in Outreach, which logs repeat opens with timestamps. What Lusha's documentation adds is a ready made label. Rereading a pitch five times while you decide whether to answer it does not look like hesitation on the rep's screen. It looks like "Highly Engaged", and that tag exists to prioritize follow up.

Gmail does soften part of this. Google's Gmail images help page says "Senders can’t use image loading to get information about your computer or location." The same page concedes the part that matters for Lusha: "Sometimes, senders may know whether you've opened an email that has an image." Gmail hides where you are. It does not hide that you opened the email, or when.

Lusha Already Had Your Address Before It Emailed You

The pixel is the second layer. The first is the contact record that let the rep find you. Lusha's privacy notice, last updated September 2026, says its B2B database draws on several sources. One is its Community Program, whose members "may share Data of their professional business network with us, such as information found in their CRM database, email headers, email subjects, calendar meeting information". The notice says those members must opt in. The people whose details appear in those headers are not asked.

Regulators have taken an interest. On July 27, 2026, GRC Report reported that Italy's data protection authority, the Garante, had imposed a €2 million fine on Lusha, rejected its reliance on legitimate interest, and ordered it to stop processing and delete the data of people in Italy. The decision is not final. The Garante's own page for Decision No. 542 now says it "has been temporarily removed" in compliance with an interim order made by the Court of Rome on September 8, 2026, and that the proceedings challenging it remain pending.

If you would rather not be in the database at all, Lusha's Privacy Center has a "Control your Lusha profile" section for access and removal requests. The privacy notice says opted out contacts are added to a suppression list.

How Can You Tell a Cold Email Came Through Lusha?

Often you cannot, at least not from the outside. Because Engage sends through the rep's connected Google or Microsoft account, the routing headers in Gmail's "Show original" view should point to Google or Microsoft, and the SPF and DKIM results should belong to the rep's company domain. Lusha's own DNS records describe its corporate mail, not Engage sends. On October 26, 2026, the SPF record for lusha.com read v=spf1 include:_spf.lusha_com._d.easydmarc.pro ~all, and lusha.co read v=spf1 mx include:_spf.google.com include:mailgun.org ~all. Neither will show up in a sequence email from someone at another company.

What you can find is the pixel. Open the message in Gmail on desktop, click the three dot menu, choose "Show original", and search the HTML for an image tag with a width and height of 1, or any image hosted on a domain that is neither the sender's nor a familiar image service. Our walkthrough on detecting tracking pixels in Gmail shows exactly what to look for. Finding a pixel tells you the email is tracked. It will not prove the tool is Lusha, since the host is undocumented.

How Do You Block Lusha Email Tracking in Gmail?

The method that works without knowing Lusha's tracking address is to stop images from loading automatically. Google's image settings guide gives the steps for desktop Gmail:

1. Click the gear icon, then See all settings.
2. In the Images section, select Ask before displaying external images.
3. Scroll to the bottom of the page and save your changes.
4. When a cold email arrives, read it without choosing to display images. The pixel never loads, so the counter stays at zero.
5. If you do load images on a pitch, avoid reopening it repeatedly. Each reopen is another pixel request and another step toward the Highly Engaged tier.

The tradeoff is that every legitimate image waits for a click too. Browser extensions take the narrower route of blocking known trackers while leaving other images alone. Ugly Email and PixelBlock flag or block tracking pixels inside Gmail, and Trocker does similar work across browsers. Gblock blocks images from more than 200 named trackers in its built in list plus a remote list that updates automatically, and it strips tracked links. It is a paid extension with a 30 day free trial.

Here is the honest limit. All of these tools depend largely on recognizing known tracking addresses, and as of October 26, 2026, Gblock's built in list has no Lusha specific rule, because the Engage pixel host is not public. When Gblock sees an unrecognized tiny image load, it reports that address for review so it can be added to the shared list. An open that happens before a rule exists still gets counted. Until then, the Gmail image setting is the dependable block for Lusha, and an extension covers the hundreds of other trackers in your inbox. Our guide on how to block email tracking in Gmail compares every option side by side, and the same playbook applies to Apollo.io sequences.

What Should Teams Using Lusha Engage Check?

Compliance teams should treat Engage open tracking as tracking that may need consent, not as neutral analytics. France's CNIL, in its recommendation on tracking pixels in emails, lists "Analysis of the email opening rate to measure and optimise the performance of campaigns" among the purposes that require the recipient's consent. A per recipient counter used to rank prospects for follow up fits that description closely.

Because Lusha's docs describe no off switch, ask Lusha directly whether open tracking can be disabled for recipients in jurisdictions that require consent, and document the answer. We covered the CNIL's timeline and enforcement posture in our breakdown of the CNIL pixel deadline.

Sources: Lusha docs: overview and optimize your sequences, Lusha docs: what is Lusha Engage, Lusha docs: Gmail integration setup, Garante per la protezione dei dati personali: Decision No. 542 notice, CNIL: recommendation on tracking pixels in emails.