Critical ErrorSMTP Error · Permanent (5.x.x)
550 5.7.501

Access denied, spam abuse detected (Microsoft 365)

A 550 5.7.501 from Microsoft 365 says "Access denied, spam abuse detected". Codes 5.7.502 and 5.7.503 say "Access denied, banned sender". In all three, Microsoft banned the sending account because it detected spam.

Updated June 13, 2026

SMTP Exchange / Mail Log
> MAIL FROM:<you@yourdomain.com>> RCPT TO:<recipient@example.com>✕ 550 5.7.501 Access denied, spam abuse detected (Microsoft 365)
All guides

Is your domain affected?

Run a free check — we'll show you exactly what's misconfigured.

550 5.7.501 is a permanent SMTP reply meaning access denied, spam abuse detected (microsoft 365). Microsoft says to make sure the account problems are fixed, reset the account credentials, and then contact Microsoft Support through your normal channel to restore sending.

What 550 5.7.501 means

Microsoft says to make sure the account problems are fixed, reset the account credentials, and then contact Microsoft Support through your normal channel to restore sending.

⚠️
This is a 5.x.x permanent failure — the message will keep bouncing until you fix the cause. Retrying the same message unchanged won't help.

Common causes

📨
#1

The account was compromised

Most common

Someone used it to send spam or phishing.

🔁
#2

Bulk or cold email from a normal mailbox

Common

Large volumes of unsolicited mail from a Microsoft 365 user account.

⚙️
#3

An app with access to the mailbox sent mail

Less common

A connected tool sent more than expected.

How to fix 550 5.7.501

  1. 1

    Secure the account

    Reset the password, revoke sessions, turn on MFA and remove unknown rules and app access.

  2. 2

    Contact Microsoft Support

    Microsoft restores sending only through support after the account is clean.

  3. 3

    Move bulk sending elsewhere

    Use a sending service and separate domains for campaigns, and monitor those domains.

Confirm your domain is set up correctly

Most delivery failures — permanent or temporary — trace back to authentication or reputation. Run a free EmailHealth check to confirm SPF, DKIM, DMARC, blacklist status, and TLS are all healthy for your sending domain. If you send in volume, free daily monitoring will alert you before a small issue becomes a flood of bounces.

Stop this error from coming back

Most delivery problems start when a DNS record changes, a key is removed or a domain lands on a blocklist. EmailHealth checks your sending domains every day and sends one alert, by email, Slack or webhook, with the exact fix.

1 domain free. Sending from many domains (cold email, agencies, MSPs)? Early access covers 10.

Frequently asked questions

Check your domain for free

SPF, DKIM, DMARC, MX, blocklists and TLS in about 2 seconds. No account needed.

Run the check