15-25% of M365 business domains have catch-all enabled. You cannot tell from the MX record alone.
Microsoft 365 is a hosting platform - whether a given company's M365 domain is catch-all depends entirely on how their admin configured Exchange Online. All M365 domains share the same *.mail.protection.outlook.com MX records, so you can't tell from DNS alone. BounceZero probes each domain individually to detect catch-all before classifying addresses.
Backed by & listed on
In B2B email marketing, the majority of addresses you're sending to are corporate - hosted on Microsoft 365 or Google Workspace. Consumer providers like Gmail and Yahoo are not catch-all. But corporate domains absolutely can be, and M365's Exchange Online makes it trivially easy for admins to configure catch-all.
The practical effect: your verification tool may return "verified" for a corporate address that doesn't actually exist as a real person's mailbox - it's being caught by the catch-all inbox and silently accepted. Your email lands in an unmanned mailbox, and you never know.
The result: instead of "verified" (wrong) or "unknown" (useless), you get an accurate risk classification for every M365 address.
M365 is a platform - each domain is configured independently. ~15-25% of M365 business domains have catch-all enabled in Exchange Online. You cannot tell from the MX record alone.
By probing each domain with a known-invalid address. If Exchange Online returns 250 OK, the domain is catch-all. BounceZero then applies ML scoring instead of marking the address as verified.
Less commonly than SMBs. Large enterprises with dedicated IT teams usually configure explicit mailboxes. SMBs and professional services firms are more likely to have catch-all enabled. BounceZero checks each domain regardless.
$3 per 1,000 verifications. 100 free credits on signup - no credit card required. Catch-all detection included on every domain.
BounceZero detects catch-all per domain and scores with ML. 100 free credits to start.
Per-provider answers - SMTP behaviour, detection methods, and how BounceZero handles each
Depends - consumer no, Yandex 360 custom domains often yes
Depends - consumer no, custom domains frequently yes
~20% of Workspace domains have catch-all configured
What catch-all means, industry prevalence, risk scoring, send vs suppress guide
No - returns 550 for unknown addresses
No - but blocks verifier IPs (Microsoft PTR policy)
Continue through related topics
Follow BounceZero