Critical ErrorSMTP Error · Permanent (5.x.x)
553 5.7.1

Sender address rejected / not owned

A 553 5.7.1 means the server rejected your From / envelope sender address — you're not authorized to send as that address, or the relay won't accept it from you.

Updated June 13, 2026

SMTP Exchange / Mail Log
> MAIL FROM:<you@yourdomain.com>> RCPT TO:<recipient@example.com>✕ 553 5.7.1 Sender address rejected / not owned
All guides

Is your domain affected?

Run a free check — we'll show you exactly what's misconfigured.

553 5.7.1 is a permanent SMTP reply meaning sender address rejected / not owned. 5.7.1 with a 553 points at the sender, not the recipient: the address you're sending as is not permitted (often a relay or "sender not owned" rejection).

What 553 5.7.1 means

5.7.1 with a 553 points at the sender, not the recipient: the address you're sending as is not permitted (often a relay or "sender not owned" rejection).

⚠️
This is a 5.x.x permanent failure — the message will keep bouncing until you fix the cause. Retrying the same message unchanged won't help.

Common causes

📨
#1

You're sending as an address you're not authorized to use

Most common

The SMTP server only lets you send from addresses you own/authenticate as, and your From address isn't one of them.

🔁
#2

Relay access denied for that sender

Common

The server won't relay mail with your envelope-from to external recipients without authentication.

⚙️
#3

SPF/DMARC at the receiver rejects the spoofed-looking From

Common

Some receivers return 553 5.7.1 when your From domain's DMARC policy rejects unauthenticated mail.

How to fix 553 5.7.1

  1. 1

    Send only from addresses you're authorized to use

    Make sure your From and envelope sender match an account/domain you're authenticated for on the sending server.

  2. 2

    Authenticate before sending (no open relay)

    If you're relaying through a server, log in with valid SMTP credentials so it permits your sender address.

  3. 3

    Align your domain's SPF and DMARC

    If receivers reject your From domain, confirm SPF/DKIM/DMARC pass and align — run a free EmailHealth check.

Confirm your domain is set up correctly

Most delivery failures — permanent or temporary — trace back to authentication or reputation. Run a free EmailHealth check to confirm SPF, DKIM, DMARC, blacklist status, and TLS are all healthy for your sending domain. If you send in volume, free daily monitoring will alert you before a small issue becomes a flood of bounces.

Stop this error from coming back

Most delivery problems start when a DNS record changes, a key is removed or a domain lands on a blocklist. EmailHealth checks your sending domains every day and sends one alert, by email, Slack or webhook, with the exact fix.

1 domain free. Sending from many domains (cold email, agencies, MSPs)? Early access covers 10.

Frequently asked questions

Check your domain for free

SPF, DKIM, DMARC, MX, blocklists and TLS in about 2 seconds. No account needed.

Run the check