How Lead Leaches Into Drinking Water

The electrochemical engine: why metallic lead dissolves at all

Lead corrosion is a redox reaction in miniature, with the pipe wall acting as both electrodes of a tiny battery. At anodic sites the metal gives up electrons and enters solution as the lead(II) ion:

• Anode (oxidation): Pb⁰ → Pb²⁺ + 2e⁻  (E° = −0.13 V)
• Cathode (reduction), oxygenated water: O₂ + 2H₂O + 4e⁻ → 4OH⁻  (E° = +0.40 V)
• Cathode with free chlorine: HOCl + H⁺ + 2e⁻ → Cl⁻ + H₂O  (E° ≈ +1.48 V)

The overall cell voltage is positive (ΔG < 0), so the reaction is thermodynamically spontaneous — bare lead wants to dissolve. The dissolved oxygen or the disinfectant residual is the electron acceptor that keeps the circuit closed. This is the same corrosion chemistry that rusts iron, but lead's product ions are far more soluble and far more toxic. What saves us is not that the reaction stops, but that it buries itself under a mineral crust.

The passivation scale: a mineral armor of lead carbonates

As Pb²⁺ accumulates at the pipe wall it meets dissolved inorganic carbon (DIC) — the carbonate system CO₂ ⇌ H₂CO₃ ⇌ H⁺ + HCO₃⁻ ⇌ 2H⁺ + CO₃²⁻ — and precipitates as sparingly soluble solids that armor the metal:

• Pb²⁺ + CO₃²⁻ → PbCO₃(s)  (cerussite, Ksp ≈ 10⁻¹³·¹)
• 3Pb²⁺ + 2CO₃²⁻ + 2OH⁻ → Pb₃(CO₃)₂(OH)₂(s)  (hydrocerussite, the dominant scale)

Which mineral forms is a solubility and equilibrium story governed by pH and DIC. Below about pH 7.5 cerussite dominates and lead solubility is relatively high; from pH ~8.5 to 9.5 hydrocerussite takes over and equilibrium dissolved lead falls to a minimum of a few ppb. This is why utilities historically pushed pH up — they were engineering the water to sit in the hydrocerussite window. The scale is a diffusion barrier: once it forms, further corrosion is throttled by how fast ions crawl through the crust rather than by the raw thermodynamics of the metal.

The hidden lead(IV) layer — and why chloramine is dangerous

In systems disinfected with free chlorine for years, the oxidizing residual pushes lead past +2 all the way to lead(IV), depositing a dark, extremely insoluble crust of plattnerite:

• Pb²⁺ + HOCl + H₂O → PbO₂(s) + Cl⁻ + 3H⁺  (plattnerite, β-PbO₂)

PbO₂ is one of the best pipe scales nature offers: its solubility is orders of magnitude below the lead carbonates, so pipes armored in it can carry high-chlorine water with almost undetectable lead. The catch is that this armor is only stable while the water stays strongly oxidizing (high redox potential, E_H). When Washington, D.C. switched from free chlorine to chloramine (NH₂Cl) around 2000 to cut disinfection byproducts, the redox potential dropped and the protective PbO₂ began to reductively dissolve:

• PbO₂(s) + 4H⁺ + 2e⁻ → Pb²⁺ + 2H₂O  (E° = +1.46 V; driven backward as E_H falls)

Lead at some D.C. taps soared past 300 ppb. The lesson is stark: the scale is not permanent — it is an equilibrium held in place by the water's oxidation state, and changing the disinfectant can quietly tip it.

The controlling variables: pH, carbonate, chloride, and phosphate

Whether a given water is plumbosolvent (lead-dissolving) or protective comes down to a handful of levers, each acting through equilibrium chemistry:

• pH. More H⁺ shifts every dissolution equilibrium toward soluble Pb²⁺ (Le Chatelier). Dropping from pH 8.5 to 7.0 can multiply equilibrium lead severalfold. Corrosive, low-pH source water is the classic culprit.
• Alkalinity / DIC. Carbonate is a double-edged reagent. Enough is needed to build carbonate scale, but very high DIC forms soluble complexes like PbCO₃⁰(aq) and Pb(CO₃)₂²⁻ that actually increase dissolved lead.
• Chloride-to-sulfate mass ratio (CSMR). Where lead pipe joins copper or is soldered, chloride accelerates galvanic corrosion of the less-noble lead. Switching coagulants from alum (sulfate) to ferric chloride raises CSMR and can spike lead — a documented trigger in several cities.
• Orthophosphate. The engineered fix: dosing 1–3 mg/L PO₄ grows a blanket of ultra-insoluble lead phosphate on the pipe wall.

Orthophosphate: engineering a better scale on purpose

The most reliable corrosion control isn't raising pH — it's feeding the pipe a mineral it can build even better armor from. Added orthophosphate reacts with the corroding surface to precipitate lead phosphates, the pyromorphite family, whose solubility products are staggeringly small:

• 3Pb²⁺ + 2PO₄³⁻ → Pb₃(PO₄)₂(s)  (Ksp ≈ 10⁻⁴³·⁵)
• 5Pb²⁺ + 3PO₄³⁻ + OH⁻ → Pb₅(PO₄)₃OH(s)  (hydroxypyromorphite, Ksp ≈ 10⁻⁷⁶·⁸)

With a Ksp near 10⁻⁷⁷, hydroxypyromorphite holds equilibrium dissolved lead far below 1 ppb across a broad pH range — which is exactly why a phosphate program lets utilities keep low, palatable pH while still meeting the lead limit. It also explains the horror of the Flint switch: the new source ran with no phosphate inhibitor at all, so the old pyromorphite/hydrocerussite scale slowly dissolved with nothing replacing it. Chloride from road-salt-laden river water compounded the attack, and lead climbed into the thousands of ppb. Re-adding phosphate and reconnecting to the old supply began rebuilding scale, but recovery took years — armor grows far more slowly than it dissolves.

The scale of the problem — and how it hurts people

The United States still has an estimated 9 million lead service lines connecting mains to homes, plus untold miles of lead-soldered copper (leaded solder wasn't banned in U.S. plumbing until 1986, and 'lead-free' brass could legally contain up to 8% lead until 2014). The chemistry that matters most to a household is stagnation: overnight, water sits motionless against the pipe wall, the disinfectant residual is consumed, and dissolved lead climbs toward its solubility ceiling. First-draw morning water routinely carries the highest lead of the day, which is why the fix of 'flush for 30 seconds to 2 minutes' works — it replaces equilibrated stagnant water with fresh water that hasn't had time to react.

There is no biological use for lead, and no known safe blood-lead level. A Pb²⁺ ion mimics Ca²⁺ and Zn²⁺, slipping into calcium channels and displacing zinc in enzymes; in children it crosses into the developing brain and permanently lowers IQ and impairs impulse control. Because the toxin travels as a simple dissolved cation released by ordinary corrosion, the ultimate cure is not chemical management but physical removal — full lead service line replacement, which the U.S. now mandates within roughly a decade. Until the last pipe is pulled, the safety of the water depends on keeping that fragile mineral scale intact, one carefully dosed milligram of phosphate at a time.

What controls whether a lead pipe protects itself or poisons the water

Condition	Protective (low lead)	Corrosive (high lead)
pH	≈ 8.5–9.5 (or lower with PO₄)	< 7, or wildly fluctuating
Alkalinity / DIC	moderate, stable carbonate	very low or very high DIC
Disinfectant	free chlorine (holds Pb(IV) PbO₂)	chloramine (reduces PbO₂ → Pb²⁺)
Chloride-to-sulfate ratio	low (CSMR < ~0.5)	high (CSMR > ~0.5, galvanic)
Corrosion inhibitor	orthophosphate present	none (as in Flint 2014)
Scale mineral	hydrocerussite / pyromorphite	none, or dissolving PbO₂