Error guide / 550 SPF check failed

The 550 SPF check failed error

This error means the recipient's mail server checked your domain's SPF record and did not find the IP address of the server that sent the message. As a result the email is rejected before it reaches the inbox. In plain terms, your domain did not authorize that server to send mail on its behalf.

What causes it

Usually the domain owner is at fault: the SPF record is either missing or does not list the service you actually send from (hosting, a newsletter tool, a CRM). Sometimes you moved hosting or mail providers but kept the old SPF record.

How to fix it

1. Check whether your domain has a TXT SPF record (it starts with v=spf1). You can do it right here with the email checker.
2. Add every service you really send mail from: include:... for your host, newsletter platform, Google Workspace and so on.
3. Keep only one SPF record per domain. Two v=spf1 records break the check.
4. End the record with ~all (softfail) or -all (hard fail), never +all, which lets anyone spoof you.
5. In cPanel you edit this in Zone Editor; after saving, allow 15-60 minutes for DNS to update.
6. Send a test message to your own Gmail and open the original to confirm SPF now shows pass.

Related errors

• Листи потрапляють у спам Emails going to spam
• DMARC policy reject (p=reject) DMARC reject: message blocked by policy
• 550 5.7.1 Message rejected The 550 5.7.1 rejected error
• DKIM signature verification failed DKIM fail: signature does not verify