An intern at a client we advised forgot to strip [DRAFT] from the subject line before scheduling a production send. 500,000 subscribers received "[DRAFT] This Week's Exclusive Offers." Angry client. Longer retrospective than the send took.
The fix would have taken five minutes of one-time configuration. Subject/Preheader Validation in Email Studio Admin blocks sends if flagged keywords appear in subject or preheader.
How it works
Email Studio > Admin > Settings > Subject/Preheader Validation.
Configure a list of forbidden strings. When a send is attempted:
- SFMC scans the subject and preheader
- If any flagged string appears, send is blocked with a warning
- User must remove the string before the send can proceed
Flagged strings can be literal matches ([DRAFT]) or patterns. Most clients use literal matches for simplicity.
Strings to block
Categories every account should block:
Placeholder brackets
These are the brackets marketers use during composition. Catch them before production.
Team prefixes
Some teams prefix test sends with an identifier to help route Test Sends in a shared inbox:
Whatever your team's convention is, block it in production validation.
Broken personalization patterns
Harder to validate but doable:
These indicate broken personalization rather than forgotten placeholders. Block them equally.
Setup in five minutes
- Admin > Settings > Subject/Preheader Validation
- Add each forbidden string as a new entry
- Enable validation (some accounts have it disabled by default)
- Test by attempting a send with [DRAFT] in subject - should be blocked
Once enabled, the gate is permanent. No remembering to check - SFMC enforces on every send.
What gets blocked
- Subject line scans for matches
- Preheader text scans for matches
- If either contains any flagged string, the send is blocked with a clear error message
- User removes the string and resubmits
Doesn't block from editing the strings - the block happens at send time only. Marketers can draft with [DRAFT] freely; they just can't send.
Case sensitivity and partial matching
Check the specific behavior:
- Exact match vs case-insensitive
- Whole-word vs substring
- Special character handling
For most strings we block, the defaults work. For patterns requiring specific semantics, test the behavior in a sandbox before relying on it in production.
Team-specific additions
Blocks that emerged from past incidents on specific accounts:
- [FORWARD] - from a team that tagged internal forwards during review
- v1, v2, _final, _FINAL - filename-style versioning that crept into subjects
- FIXME, TODO, XXX - development placeholders that should never appear
Add blocks as you encounter them. Validation list grows over time.
Mistake 1: Not enabling on all BUs
Multi-BU accounts require the list configured per BU. Configuring on only the primary BU leaves other BUs exposed.
Fix: audit Subject/Preheader Validation setup across every BU during account kickoff.
Mistake 2: Over-aggressive blocks
Block [important] literally because an intern once typed it. Now any email with "Important Changes" in subject fails validation because of substring matching.
Fix: block specific patterns, not generic words. [DRAFT] is specific; important is not.
Mistake 3: Assuming validation catches personalization default failures
Validation blocks literal strings in subject. It does NOT detect "personalization renders to empty string at send time."
For %%FirstName%% without a Default Value producing "Hi , ..." in the real send - validation won't catch it. Always preview with a data-missing subscriber (covered in the Subject Line post).
Complementary checks
Subject/Preheader Validation is one of several "block bad sends" mechanisms. Others:
- Send Validation - check audience row count (Verification Activity)
- Content Detective - scan email body for spam-filter triggers
- Approval Workflow - human review gate
Each catches different failure modes. Subject/Preheader Validation catches placeholder leftovers specifically - the others catch other bugs.
Client conversation
When setting up a new account, propose Subject/Preheader Validation in the kickoff meeting:
"We'll configure Subject/Preheader Validation to block common placeholders like [DRAFT], [TEST], [APPROVAL]. Takes five minutes, prevents the embarrassing 'we forgot to remove [DRAFT]' incident. Anything specific your team uses that should be on the list?"
Almost every client has at least one team-specific string. Capture them at kickoff.
Takeaway
Subject/Preheader Validation is free, takes five minutes, and prevents one of the most embarrassing production incidents. Every SFMC account should have it enabled. Block placeholder brackets, team prefixes, and broken personalization patterns. Add to the list when new patterns surface. No downside; significant upside.
Setting up governance on new SFMC client accounts? Our Salesforce team configures Subject/Preheader Validation and production guardrails on kickoff for production engagements. Get in touch ->
See our full platform services for the stack we cover.