What is a catch-all email address?
By the PickusMail teamUpdated 25 October 20266 min read
Short answer
A catch-all domain accepts email for every address at that domain, whether or not the mailbox exists, instead of rejecting unknown addresses. Because the server says yes to everything, no verifier can confirm one specific address with certainty, so catch-all addresses are reported as risky rather than valid.
How a catch-all domain behaves
When an email is sent, the sending server asks the recipient's mail server whether it will accept a message for a particular address. A normal server answers “yes” for mailboxes that exist and rejects the rest with an error such as 550 5.1.1 user unknown.
A catch-all (also called accept-all) server answers “yes” to every address at the domain. Mail for real.person@company.com and asdf123@company.com is accepted in exactly the same way. What happens afterwards is decided inside the company: the message may land in the right inbox, go to a shared mailbox, or be deleted without anyone seeing it.
Why companies use catch-all
- So mail sent to a misspelt name or a former employee is not lost.
- To hide which addresses exist from people trying to harvest them.
- Because some email security gateways sit in front of the real server and accept everything first, then filter it.
Why verification cannot confirm one address
Email verification works by asking the mail server about an address and stopping before any message is sent. On a catch-all domain the server gives the same positive answer for every address, so the check cannot tell a real mailbox from a made-up one. A good verifier detects this by also asking about an address that cannot exist. If that one is accepted too, the domain is catch-all.
That is why PickusMail reports these addresses as risky with the reason “This domain accepts any address, so delivery cannot be confirmed”, rather than calling them valid.
How common are catch-all domains?
Catch-all is rare among free providers such as Gmail and Outlook.com, which reject unknown addresses. It is far more common on company domains, especially those behind enterprise security gateways. So business-to-business lists usually contain a noticeable share of catch-all addresses, while consumer lists contain few.
What to do with catch-all addresses
| Where the address came from | Recommendation |
|---|---|
| Your own customers or sign-ups | Send, but keep them in their own segment and watch bounces. |
| An event, form or partner you trust | Send carefully, starting with a small batch. |
| A list you bought, rented or scraped | Do not send. You cannot know which mailboxes exist, and these lists often contain spam traps. |
In PickusMail's bulk email, risky addresses (including catch-all) are left out of a send unless you choose to include them for that campaign, so you decide case by case.
Check a domain yourself
You can check any address for free with the email checker. If the domain is catch-all, the result says so. To check a whole list at once, see bulk email verification.
Questions people ask
Is a catch-all email address valid?
It might be. The domain accepts mail for any address, so the mailbox may exist or the message may be silently discarded. That is why catch-all addresses are marked risky instead of valid.
Can any tool verify a catch-all email with 100% certainty?
No. Without sending a real message and watching what happens, nobody can confirm one mailbox on a catch-all domain. Tools that claim otherwise are guessing, usually from patterns or past data.
Should I send to catch-all addresses?
Send to them only when you know the contact, for example a customer or someone who signed up, and keep them in a separate segment so you can watch their bounce rate. Leave out catch-all addresses from lists you did not collect yourself.
Does PickusMail charge for catch-all results?
Yes, a catch-all result costs one credit, because the check was completed and the answer is useful. Only unknown results, where a check could not finish, are free.
Check your list before you send
PickusMail verifies every address with a real SMTP check and tells you why, in plain words. Unknown results are never charged. Start with 100 free credits.