Critical ErrorSMTP Error · Permanent (5.x.x)
554 5.7.1

Message refused / blocked by policy

A 554 5.7.1 rejection means the receiving server refused your message for policy reasons — usually reputation, authentication, or content rather than a bad address.

Updated June 13, 2026

SMTP Exchange / Mail Log
> MAIL FROM:<you@yourdomain.com>> RCPT TO:<recipient@example.com>✕ 554 5.7.1 Message refused / blocked by policy
All guides

Is your domain affected?

Run a free check — we'll show you exactly what's misconfigured.

554 5.7.1 is a permanent SMTP reply meaning message refused / blocked by policy. The server connected and then refused delivery. 5.7.1 is the "delivery not authorized / message refused" enhanced status — the receiver decided not to accept this mail from you.

What 554 5.7.1 means

The server connected and then refused delivery. 5.7.1 is the "delivery not authorized / message refused" enhanced status — the receiver decided not to accept this mail from you.

⚠️
This is a 5.x.x permanent failure — the message will keep bouncing until you fix the cause. Retrying the same message unchanged won't help.

Common causes

📨
#1

Your sending IP or domain is on a blacklist

Most common

A poor IP/domain reputation is the leading cause of a flat 554 5.7.1 refusal at Gmail, Outlook, and corporate filters.

🔁
#2

SPF, DKIM, or DMARC is failing

Common

Authentication failures cause many receivers to refuse mail outright, especially after the 2024 bulk-sender rules.

⚙️
#3

Content tripped a spam or security filter

Less common

Risky links, spoofed-looking headers, or malware signatures can produce a policy refusal.

How to fix 554 5.7.1

  1. 1

    Check your blacklist status

    Run a free EmailHealth check to see whether your domain or sending IPs are on SpamCop, Barracuda or other blocklists — then follow the relevant delisting guide.

  2. 2

    Confirm SPF, DKIM, and DMARC all pass

    Authentication failures are an easy and common cause. Verify all three are aligned for your sending domain.

  3. 3

    Read the full bounce text

    Receivers often append a URL or reason after 554 5.7.1. Follow it — it frequently names the exact block (e.g. a specific blacklist or a postmaster page).

Confirm your domain is set up correctly

Most delivery failures — permanent or temporary — trace back to authentication or reputation. Run a free EmailHealth check to confirm SPF, DKIM, DMARC, blacklist status, and TLS are all healthy for your sending domain. If you send in volume, free daily monitoring will alert you before a small issue becomes a flood of bounces.

Stop this error from coming back

Most delivery problems start when a DNS record changes, a key is removed or a domain lands on a blocklist. EmailHealth checks your sending domains every day and sends one alert, by email, Slack or webhook, with the exact fix.

1 domain free. Sending from many domains (cold email, agencies, MSPs)? Early access covers 10.

Frequently asked questions

Check your domain for free

SPF, DKIM, DMARC, MX, blocklists and TLS in about 2 seconds. No account needed.

Run the check