What is Catch-All Email?
A catch-all email account receives all messages sent to invalid or nonexistent addresses at a domain, preventing bounce-backs but attracting spam.
A catch-all email is a mailbox configured on a mail server to accept every message addressed to a domain, regardless of whether the recipient mailbox exists. When a sender mistypes an address or uses a random guess, the message lands in this single inbox instead of being rejected with a bounce. This setup is common in small organizations that want to avoid losing inquiries sent to misspelled addresses.
Catch-all accounts work by setting the mail exchange (MX) server to deliver any email for the domain to a designated mailbox, bypassing local-part verification. The server checks the domain first, then forwards the message to the catch-all address if the specific user is not found. This behavior is controlled by the mail server software (e.g., Postfix, Exim, Microsoft Exchange) and can be enabled or disabled per domain.
While catch-all mailboxes reduce the chance of missing legitimate messages, they are a prime target for spammers. Address harvesters and dictionary attacks send bulk emails to common names (e.g., info, admin, sales) and random strings. The catch-all accepts them all, filling the inbox with junk. For this reason, most modern email administrators disable catch-all accounts and rely instead on proper address validation, SPF, and DMARC to handle unknown recipients gracefully.
Key facts
- Accepts all email for a domain, even to nonexistent mailboxes.
- Reduces bounce-backs but dramatically increases spam volume.
- Often exploited by dictionary attacks and address harvesting.
- Configurable in most mail server software (Postfix, Exim, Exchange).
- Best practice is to disable catch-all and return a 550 rejection for unknown users.
How it works in practice
Related terms
References
More in Email
BIMI
BIMI (Brand Indicators for Message Identification) is a DMARC-aligned standard that lets email senders publish a verified logo for display in supporting mail clients.
Bounce Message
A bounce message, or non-delivery report (NDR), is an automated email sent to the originator when delivery cannot be completed, including a status code and failure reason.
DKIM
DKIM is an email authentication method that lets a domain claim responsibility for a message by attaching a cryptographic signature validated against a DNS public key.
DMARC
DMARC is an email authentication policy protocol that builds on SPF and DKIM to tell receiving mail servers how to handle messages that fail authentication checks.
DNSBL
A DNSBL is a real-time IP reputation database published via DNS, used by mail servers at SMTP time to reject or flag senders known for spam or abuse.
Greylisting
Greylisting is a spam-filtering technique that temporarily rejects email from unknown senders, forcing legitimate mail servers to retry delivery while filtering out spammers that do not retry.
IMAP
IMAP is an email protocol that lets clients access and manage messages stored on a mail server, keeping the server as the authoritative copy and synchronizing folder state across multiple devices.
Mailbox Quota
A mailbox quota is a storage limit placed on a user's email account. Once the total size of stored messages exceeds this limit, the server may reject new incoming emails or warn the user.
MDA
An MDA (Mail Delivery Agent) is a software component that transfers an email from a Mail Transfer Agent (MTA) into a recipient's local mailbox, typically on a mail server or a user's machine.
MTA
An MTA (Mail Transfer Agent) is server software that routes email between domains using the SMTP protocol, acting as the core delivery engine for internet email.