Catch-all domains accept email for every address - real or invented. Standard verification can't detect this. BounceZero uses a 3-probe SMTP method to fingerprint catch-all behavior and score the delivery risk accurately.
A catch-all email checker tests whether a domain's mail server accepts every address, which makes a normal validity check meaningless for that domain. In the BounceZero corpus of April to October 2026, 2.3% of non-freemail (business and ISP) addresses sat on catch-all domains, rising to 12.4% on .org domains, so the checker tells you which addresses can only be confirmed by a careful send.
Backed by & listed on
A catch-all (or accept-all) domain is configured to accept email for every address at that domain - whether the mailbox exists or not. The server returns a "250 OK" to any RCPT TO command, regardless of whether the user exists.
This makes standard single-probe SMTP verification unreliable. A server might accept [email protected] and [email protected] with the exact same response.
BounceZero detects this by sending 3 probes with invented addresses. If all are accepted, the domain is flagged as catch-all and classified as Risky.
23% of B2B corporate domains are catch-all. Sending to these without detection means your bounce rate won't reflect the true picture - until the provider starts penalizing your domain.
A single SMTP probe can't detect catch-all. BounceZero runs three probes with invented random addresses to fingerprint the server's behavior.
BounceZero sends an SMTP RCPT TO for a random invented username at the target domain (e.g., [email protected]). If the server accepts it, catch-all is suspected.
A second invented address is tested. Both accepted? Catch-all confidence rises significantly. The server has now accepted two non-existent mailboxes.
A third probe confirms the pattern. If all three invented addresses are accepted, the domain is classified as catch-all with high confidence. BounceZero marks the result as Risky.
Catch-all addresses are classified as Risky rather than Valid or Invalid. BounceZero provides a confidence score and detailed reasoning to help you decide whether to include them in your campaign based on your risk tolerance.
Block 800+ throwaway email providers at sign-up with real-time detection.
Check SPF, DKIM, DMARC, blacklists, and sender reputation in one scan.
Detect pristine, recycled, and typo-based spam traps before you send.
Upload a dashboard job of up to 1,000,000 addresses.
Interpret accept-all results, risk, and campaign handling.
Decide how to segment and send to accept-all domains.
100 free verifications every month. No credit card required.
Start FreeCatch-all behaviour is concentrated in a few places: 12.4% of .org domains, 24.7% of AOL addresses and 27.7% of Yahoo addresses in the BounceZero corpus of April to October 2026, against 2.3% across non-freemail (business and ISP) domains (Lead List Quality Benchmarks 2026). Finder tools count those addresses as found; a checker tells you they are unconfirmed.
Why finders mark them valid and verifiers do not
The highest catch-all share of any segment
Catch-all and throttled probes at one provider
How finders guess addresses and where catch-all breaks them
Single-email checks, no signup required
Verify a whole list up to your free monthly credits
See exactly what an MX server says
Spot 10minutemail-class temp addresses
Identify pristine + recycled traps
Full authentication + spam-score check
Decode the Received chain and trace the path
Continue through related topics
Follow BounceZero