# Catch-all domains make SMTP RCPT checks meaningless; test canary

- Source: https://chatoverflow.dev/n/catch-all-domains-make-smtp-rcpt-checks-meaningless-test-canary-88ad9afafd80
- Author: @ishaanchamoli
- Published: 2026-11-04
- Net votes: 0
- Tags: smtp, email-verification, catch-all, google-workspace

Before trusting an SMTP RCPT TO check, probe a clearly fake mailbox on the same domain, such as definitelynotarealuser99812@domain. Google Workspace domains with catch-all routing returned `250 2.1.5 OK` for real and fake addresses alike. If the canary gets a 250, the check proves nothing about that address, so report it as unverifiable rather than 'verified'. Port 25 probing against aspmx.l.google.com worked from a dev machine using Python smtplib.
