Skip to content
Gmail and Google Workspace · permanent error

550 5.7.1: unicode character in a header

Gmail rejected the message because a header that must stay plain ASCII contains a Unicode character.

Gmail
Provider
Permanent (5xx)
Class
Sources checked
Author

At a glance

Code
550 5.7.1
Temporary or permanent
PermanentRefused for good: the message comes back to the sender, and resending it gets the same answer.
Who has to act
The sender. The fix is on the sending side: your domain, your server or your list.
What the server says
550 5.7.1 The message contains a unicode character in a disallowed header.

What it means

Headers were designed for ASCII. Non-ASCII text, such as accented names or emoji in a subject, has to be encoded as RFC 2047 encoded words unless both servers support internationalized mail (SMTPUTF8, RFC 6531 and 6532). Some headers may not carry raw Unicode at all, and this message had a Unicode character in one of them. Google links the reply to its article on blocked messages and file types. The usual cause is sending software that writes non-ASCII text into headers without encoding it.

Common causes

  • A display name or subject with accented letters or emoji written into the header without encoding.
  • A custom header carrying raw non-ASCII data.
  • Software that assumes SMTPUTF8 support it never negotiated.

How to fix it

  1. 01Find the header with the raw character by inspecting the message source.
  2. 02Have the sending software encode non-ASCII header text as RFC 2047 encoded words, which mail libraries do on their own.
  3. 03Remove non-ASCII characters from custom headers, or encode their values.
  4. 04Resend once the header is fixed.

Sources

What this page rests on, checked on 20 Oct 2026. The explanation is ours; the reply text is the server's.

  1. 550 5.7.1Encoded word in a header where it is not allowed.Gmail rejected the message because a header contains RFC 2047 encoded-word text in a place where that encoding is not allowed.GmailPermanent
  2. 550Mailbox unavailable.The receiving server permanently refused the message for this recipient: the mailbox does not exist, cannot be reached, or the server rejected the message by policy.StandardPermanent
  3. 5.7.1Delivery not authorised.The receiving server refuses the message because this sender is not allowed to send to this recipient, as a result of filtering by host or by recipient.StandardPermanent

5.7.1 at other providers

  1. 550 5.7.1Not authorized to send to this recipient.You do not have permission to send to this recipient, typically a group restricted to certain senders or a recipient protected by a mail flow rule.MicrosoftPermanent
  2. 550 5.7.1Public folder does not accept external mail.An external sender wrote to a mail-enabled public folder in Microsoft 365, which by default accepts mail only from authenticated senders.MicrosoftPermanent
  3. 550 5.7.1Sending IP blocked by Proofpoint Dynamic Reputation.Proofpoint’s IP reputation system has your sending IP on its block list because it has seen spam or viruses from it, so Proofpoint customers refuse your mail.ProofpointPermanent
  4. 550 5.7.1SPF check failed.The recipient’s Cisco Secure Email gateway checked SPF, found your server not authorised for the sender domain, and its policy rejects that result.Cisco Secure EmailPermanent
  5. 550 5.7.1Rejected under your domain’s DMARC policy.Your message failed DMARC, your domain’s DMARC record asks receivers to reject such mail, and the recipient’s Cisco gateway did so.Cisco Secure EmailPermanent
  6. 550 5.7.1DMARC verification failed permanently.The Cisco gateway hit a permanent failure while verifying DMARC for your message, and the recipient’s policy rejects such mail. Cisco does not say what produces that failure.Cisco Secure EmailPermanent

Further reading

All 108 Gmail codesEvery code in the wikiPaste your own bounce

Beat · paid monitoring

A heartbeat for your email.

Beat runs every check on this site on a schedule: 41 checks, 33 blacklists and real inbox placement. The moment something breaks, it tells you what broke, why it matters, and the exact fix.

example.comWatching
  • SPFpass
  • DKIMpass
  • DMARCp=none
  • Blacklists0 of 33

Illustrative. Your domain, every few hours.

Also from us:Pulse: your own sending infrastructureConsulting: $65/hr, no retainer