Key takeaway
Open rates are padded by machines. According to public reports, Apple’s Mail Privacy Protection alone pre-loads tracking pixels for a large share of your list, so an “open” often means only that a server fetched the image. The honest scoreboard for a PDF lead magnet is clicks per delivered email plus a bot-filtered click-to-open rate.
Why the open metric wobbles
Since 2021 Apple Mail has fetched email images before anyone taps the message and Gmail does something similar with proxy caching, according to public reports. On a list where a single mail provider covers most subscribers, your reported open rate can leap 20 points overnight with no new readers.
Now add corporate security scanners, which open every link inside an email to test it. They click and log the click, but the human never shows up. Two teams can send the same PDF, report wildly different numbers and both be wrong.
The formula worth trusting
Start with the plain click-to-open rate:
CTOR = unique clicks / unique opens x 100
That figure still helps. When opens are padded though, the denominator lies. So run a second calculation that ignores opens completely:
Clicks per delivered = unique clicks / emails delivered x 100
Unique matters here: one person tapping a link five times is still one click.
This second number is hard to fake. A scanner might click once. A human who wants your PDF clicks and then downloads it.
What a healthy number looks like
For standard broadcast email, a CTOR between 8 and 15 percent is common. PDF lead magnets usually run lower because the ask is heavier. Expect 2 to 6 percent on a cold list and warm subscribers who opted in for that exact document often land between 10 and 18 percent.
Treat those as ranges rather than rules. Your list age and your offer both move the line. Track your own 90-day median and compare against that.
Bots leave fingerprints
Read the timing. Scanners click within one or two seconds of delivery, while real people wait minutes or hours. If a big block of clicks lands in the first 60 seconds, suspect automation.
Look at click spread. A bot often taps every link in the email, but a person usually taps one. Check whether the same IP hits dozens of records.
Watch the PDF itself. If your file host reports a download but zero read time, the “reader” may be a crawler. Real readers linger on the page.
- Open under 2 seconds of send: machine
- Every link clicked at once: scanner
- Same IP across many contacts: bot farm
- Download with no page view: crawler
Where the raw data hides
Most email platforms bury the timing field. Hunt for a click report with a timestamp column. Export it to a spreadsheet and subtract the send time from each click, then sort the results so the pattern appears fast.
Pair that export with your file host logs. A PDF download that matches a click timestamp is strong proof of a human, while a download with no matching click is worth a second look.
One campaign, two stories
A B2B software team sent a pricing guide PDF to 4,200 delivered addresses. The dashboard showed a 71 percent open rate and leadership was thrilled.
Then they counted clicks: just 96 unique ones, giving a real CTOR of 3.2 percent. After removing the clicks that arrived under two seconds, they were left with 61 genuine taps, a true engagement rate of 1.5 percent.
The gap between 71 and 1.5 is the whole lesson.
Your move this week
Pull your last three PDF sends and calculate clicks per delivered for each one. Find the median rather than the average, because one viral send can bend an average badly.
Then segment the bots. Filter clicks by timing, setting your cutoff at 10 seconds or longer to count as human. Rebuild the CTOR with that filter applied.
Next, test the offer itself. Change the headline on the landing page or move the send day. These small moves shift real engagement far more than polish on the PDF file.
What to hold onto
Clicks per delivered plus a clean timing filter gives you a number you can defend in a meeting.
Start with your worst-performing send, which usually hides the loudest bot noise. Clean that one first and the rest of your dashboard gets sharper.
Focus on clicks from real people.
Read the full guide: Email Bot Clicks vs Real Opens: How to Read Your PDF Analytics