SMTP Error Codes & Bounce Messages Explained (550, 554, 421…) | InboxVerify

SMTP error codes and bounce messages

What each code means, why it happens and exactly how to fix it. Paste any bounce into the Bounce Explainer for an instant explanation.

How to read an SMTP error

A bounce contains a three-digit reply code and usually an enhanced status code. The first digit tells you whether to retry: 2xx success, 4xx temporary failure (your server retries), 5xx permanent failure. The enhanced code (for example 5.7.26) narrows down the reason: x.1.x address problems, x.2.x mailbox problems, x.4.x routing, x.7.x security and policy.

Bounce ExplainerFree — try it with your own domain or message.
Open Bounce Explainer →

Policy rejections (fixable on your side)

550 5.7.1 — Message refused — delivery not authorizedThe receiving server refused the message because of a policy: your IP or domain reputation, a blacklist listing, failed authentication, or content filtering. The text after the code tells you which. 550 5.7.26 — Unauthenticated email — SPF / DKIM / DMARC failedGmail and others use 5.7.26 when a message fails authentication: it did not pass SPF or DKIM, or it failed DMARC for the From domain. Since 2024 Gmail and Yahoo reject much more unauthenticated mail. 550 5.7.25 — Reverse DNS (PTR) check failedThe receiver could not confirm your sending IP with reverse DNS: the IP has no PTR record, or the PTR name does not resolve back to the same IP. 550 5.7.23 — SPF validation failedThe sending IP is not authorized by the SPF record of the envelope sender domain, and the receiver refused the message. 554 5.7.1 — Transaction failed — rejected by policyA permanent rejection for policy reasons, similar to 550 5.7.1: spam filtering, blocklists, relay denied or a recipient rule. 554 5.7.5 — Permanent error evaluating DMARC policyThe receiver could not evaluate your authentication because a record is broken — for example an SPF PermError (too many lookups or syntax) or a malformed DMARC record. 530 5.7.0 — Authentication requiredThe server you connected to requires you to log in (SMTP AUTH) or to start TLS before sending. 535 5.7.8 — Authentication credentials invalidThe SMTP login failed: the username or password was rejected. 554 5.7.0 — Rejected for policy reasonsA broad security / policy rejection. Read the message text: it often names a blocklist, spam score or authentication problem. 550 5.7.606–649 — Microsoft 365: banned sending IPMicrosoft 365 (Exchange Online) blocked your sending IP because of its reputation. The bounce links to Microsoft's delisting portal at sender.office.com. (Outlook.com / Hotmail blocks use S3140 / S3150-style messages instead.)

Hard bounces (permanent)

Soft bounces (temporary)