Page contents
SMTP error 521 overview:
SMTP error 521 indicates the receiving server doesn’t accept messages, or more commonly, that your sending domain or IP address has been blocklisted. This permanent failure means your email won’t be delivered until the underlying issue is resolved.

Want fewer 521 blocks?
Authentication gaps can hurt sender reputation over time, which increases the risk of blocklisting. Sendmarc helps you keep SPF, DKIM, and DMARC aligned across your domains, so you can reduce avoidable reputation damage.
A 521 error typically means “Server does not accept mail” or indicates that your domain/IP address has been blocked.
This is a permanent failure code (5xx), so your email server won’t automatically retry. You need to verify the server configuration or address the blocklisting before emails can be delivered.
| Error message | Meaning |
|---|---|
| 521 5.7.1 – Service unavailable | Your IP is blocklisted |
SMTP error 521 can mean the destination server isn’t configured to accept messages. If this is isolated to a specific server, it might be a recipient-side issue.
If the recipient confirms the address/domain isn’t set up to receive email, permanently remove it from all sending lists to prevent repeated bounces and protect your sending reputation.
Confirm whether your sending domain or IP has been blocklisted.
Use Sendmarc’s blocklist checker tool to see whether your domain or IP is listed, and which blocklists it appears on.
First, confirm whether the listed IP or domain is currently sending email. If it is, look back at what changed recently, for example, a new campaign, a sudden jump in list size, or a new third-party platform/tool sending on your behalf.
Then work through the most likely drivers:
Delisting isn’t one-size-fits-all – each blocklist handles removals differently. Some will ask you to complete a form, others accept an email submission, and a few will drop the listing automatically once your sending remains clean for a set period.
Once you’ve requested removal (or the listing times out), re-run a blocklist check to confirm you’re delisted.
After delisting, maintain good standing:
Proper authentication helps prevent blocklisting and improves delivery.
SPF (Sender Policy Framework) tells receiving servers which IPs can send on behalf of your domain.
Example SPF record:
| Host | Type | Value |
|---|---|---|
@ | TXT | v=spf1 ip4:192.168.0.1 include:mail.example.com -all |
DKIM (DomainKeys Identified Mail) adds a cryptographic signature to verify message authenticity.
Example DKIM record:
| Host | Type | Value |
|---|---|---|
selector._domainkey.yourdomain.com | TXT | v=DKIM1; k=rsa; p=[public key] |
DMARC (Domain-based Message Authentication, Reporting, and Conformance) tells receiving servers how to handle unauthenticated email and provides reporting.
Example DMARC record:
| Host | Type | Value |
|---|---|---|
_dmarc.yourdomain.com | TXT | v=DMARC1; p=reject; rua=mailto:dmarc-reports@yourdomain.com; fo=1; |
Getting SPF, DKIM, and DMARC right isn’t a once-off task. Records change, new sending services get added, and small DNS mistakes can quietly break authentication – often before anyone notices. Sendmarc gives you an ongoing view of your authentication posture so you can catch issues early and reduce the risk of trust and delivery problems.
Sendmarc helps you:
Delisting time varies by blocklist. Some delistings take effect within 24 hours once you’ve fixed the cause and submitted a request, while others can take a few days.
No, you can’t prevent 521 errors entirely. You can reduce them by keeping authentication aligned, maintaining list hygiene, sending consistently, honoring unsubscribes quickly, and monitoring reputation. But some 521 blocks can still happen due to the recipient’s server configuration.
No, not immediately. Pause sending to those recipients and ask them to confirm whether their mailboxes can receive messages. If they can, check whether your sending IP or domain is blocklisted, fix the underlying issue, and confirm delisting before you resume sending.