Catch-all emails, explained.
Some company domains accept mail for any address, real or made up. That breaks the usual way of verifying an email, which is why so many verifiers label these addresses “unknown” or “risky”. Here's what catch-all domains are, why they matter, and what to do with the addresses on them.
1. What a catch-all domain is
A catch-all domain (also called an accept-all domain) is one whose mail server is configured to accept email sent to any address at that domain. Mail to [email protected] is accepted. So is mail to [email protected], [email protected] and [email protected], even if only one of those is a real person's mailbox.
What happens to the mail after it's accepted depends on the company. It might go into a shared “catch-all” inbox someone checks now and then, be forwarded to an admin, be filtered away silently, or be rejected later with a bounce message. From the outside you can't see which.
Catch-all is a setting on the company's mail server, not a property of an individual address. Every address at a catch-all domain is affected, including the real ones.
2. Why companies use them
Catch-all isn't a sign of a badly run company. Organizations turn it on for ordinary reasons:
- Not losing mail. A customer who mistypes
suport@still reaches someone. - Departed staff. Mail to people who have left can be collected in one place instead of bouncing.
- Privacy. If every address is accepted, outsiders can't use the server to test which names work there.
- Security filtering. Some email security setups accept everything first, then scan and decide what to deliver, drop or bounce.
The last two reasons are exactly why catch-all domains are hard for anyone doing outreach: the server is deliberately not telling you who exists.
3. Why standard checks can't tell
A standard email verifier works by starting a conversation with the recipient's mail server, the same way a real email would, and stopping just before sending anything. The key moment is the RCPT TO command, where the sender names the recipient and the server answers whether it will accept mail for that address.
| Verifier asks about | Normal domain answers | Catch-all domain answers |
|---|---|---|
[email protected] (real person) | 250 OK, accepted | 250 OK, accepted |
[email protected] (wrong pattern) | 550, no such user | 250 OK, accepted |
[email protected] (made up) | 550, no such user | 250 OK, accepted |
On a normal domain the answers separate real from fake. On a catch-all domain every answer is the same, so the mailbox check has nothing to go on. Verifiers typically detect this by also asking about an address that can't exist, like the random one in the last row. If that is accepted too, the domain is catch-all, and the verifier can only report the original address as “unknown”, “accept-all” or “risky”.
That's an honest answer, but not a useful one. You still don't know whether Jane is jane.doe@ or j.doe@, and a guess sent to the wrong one won't reach her.
4. The risks of sending blind
- Delayed bounces. Some catch-all servers accept the message, then bounce it later once they've checked it internally. Those bounces count against you like any other.
- Silent loss. Others accept and drop the email, or file it in an inbox nobody reads. There's no bounce, but no person sees it either, and your reply rate falls with no obvious cause.
- Reputation damage. Inbox providers watch bounces and engagement. A campaign full of unconfirmed guesses raises one and lowers the other, which hurts every future send from that domain.
- Wasted effort and money. If you pay per email found and many of them can't be confirmed, you're paying for addresses that may not exist.
- Misleading data in your CRM. An unconfirmed guess stored as “the” contact email can be reused for months before anyone notices it never worked.
These risks matter most for new sending domains, which have little reputation to absorb mistakes. See How to warm up a cold email domain.
5. How QuickExtract handles them
Every verified person email QuickExtract returns goes through three passes:
- Format and domain: the address is well formed, and its domain exists and is set up to receive email.
- Mailbox: the mail server confirms this exact mailbox exists and accepts mail.
- Catch-all: when the domain accepts every address, pass two can't decide, so the email gets a dedicated catch-all verification.
An email that fails any pass is dropped. You keep the real addresses on catch-all domains and lose the guesses, instead of receiving a pile of “unknown” results to sort through yourself.
- No valid email, no charge. Credits are only used when a valid email is found. Finding and verifying are included in the same credit: $29 for 2,000 credits, about 1.45¢ each.
- Verify your own lists. Emails from other sources can go through the same three passes with the email verifier, using the same credits.
- Company emails are free. Inboxes like
hello@orcontact@found on company websites cost nothing. They are published by the company, which is a different situation from a guessed person address.
Details are on the pricing page.
6. What to do with risky addresses
If you already have a list where some addresses are marked catch-all, unknown or risky by another tool, don't just send to all of them. Pick one of these, depending on how much each contact matters.
| Option | When it fits |
|---|---|
| Re-verify with a catch-all check | The contact matters and you want a definite answer before sending |
| Find the email fresh | The address was a pattern guess (first.last@); look it up by name and company instead |
| Send to the company inbox | Your message works for anyone at the company, and a published hello@ or sales@ exists |
| Separate, small batches | You decide to send anyway: keep them in their own campaign, from an established domain, at low volume, and watch bounces closely |
| Reach out another way | For high-value contacts, a LinkedIn message or a referral may beat a risky email |
| Drop them | The list is large and these contacts aren't special. Often the cheapest choice. |
Whatever you choose, never mix unconfirmed addresses into your main campaign, and never keep sending to an address that bounced once.
7. Worked example
Say you have 400 sales directors from a Sales Navigator search and want their direct work emails. Some of their companies run mail servers that accept every address.
- With a mailbox-only verifier, the people at catch-all companies come back as “unknown”. You either throw them away, losing real prospects, or send and hope, risking bounces.
- With QuickExtract, you run the email finder on the 400 rows. For each person at a catch-all company, the address goes through the third, catch-all pass. The ones that are confirmed are added and charged one credit each. The ones that can't be confirmed are dropped, and cost nothing. You end up with a single list where every person email has passed all three checks.
For the people where no valid email was found, the company email QuickExtract found on their website (free) is still in the row if one exists, so you can decide whether a company-inbox message makes sense.
To learn the lookup itself, read Find a work email by name.
Catch-all questions.
Is a catch-all email address valid?
It might be. The domain accepts everything, so a standard check can't say. That's why QuickExtract runs a separate catch-all verification and drops addresses that don't pass.
Can I tell if a domain is catch-all myself?
A verifier can, by checking whether the server accepts an address that can't exist. Testing by sending real emails to made-up addresses isn't a good idea, because the bounces count against your sending domain.
Do I pay for catch-all emails that can't be confirmed?
No. Credits are only used when a valid email is found. Addresses that fail any of the three passes, including the catch-all pass, are dropped without a charge.
Are free company emails checked for catch-all?
The three-pass verification is for paid person emails. You can run any list, including company emails, through the email verifier using credits.
Keep the real emails. Drop the guesses.
Every paid email passes format, mailbox and catch-all checks. $29 for 2,000, and you pay only when a valid one is found.