Home / Field Manual / Email Bouncing With a DMARC Error

Your business email is bouncing with a DMARC error. Here's the fix.

If Gmail sends back "550 5.7.26 Unauthenticated email" or Yahoo and AOL send back "554 5.7.9 failed authentication checks," your own domain is telling them to reject your mail. The fix is usually 2 or 3 DNS records. Nothing on your computer or phone is broken.

7 min read By Lindsay Smith St. Petersburg, FL Last updated October 27, 2026

A 550 or 554 bounce starts with your own domain. Your domain has settings that prove an email came from you, and when an email fails those checks, a third setting tells Gmail, Yahoo and AOL what to do with it.

When that third setting is set to reject, every email that fails the check bounces back to you with a 550 or 554 error. Fix the settings and the bouncing stops, usually within an hour.

The 3 email settings behind a DMARC bounce

Every domain that sends email can publish 3 settings. They live in your domain's DNS, the behind-the-scenes records that tell the internet where your website and email live. If your domain is registered with GoDaddy, that's usually where they are.

What the 550 5.7.26 and 554 5.7.9 errors mean

ErrorWho sends itWhat it means
550 5.7.26 Unauthenticated emailGmailYour email failed your domain's checks, and your domain's DMARC policy says to reject it
554 5.7.9 Failed authentication checksYahoo and AOLThe same problem, reported by a different provider

Both errors point back at the sender's own domain. The person you emailed didn't block you, and their inbox isn't the problem.

Why a DMARC bounce can start when nobody changed anything

I recently fixed this for a local medical practice whose email suddenly started bouncing. Nobody at the office had touched a setting. The cause is one I see often on GoDaddy domains that use Google Workspace for email:

In that setup, the email has been failing SPF and DKIM for a long time. Without a strict DMARC policy, Gmail and AOL deliver it anyway. Once the DMARC record says reject, everything bounces.

GoDaddy now adds a DMARC record with a quarantine policy to domains purchased or transferred to GoDaddy (dmarcian, September 2025). If your DMARC record has a reporting address ending in onsecureserver.net, GoDaddy set it.

Stopping the bouncing usually takes changing 2 records.

How to fix DMARC bounces on a GoDaddy domain using Google Workspace

These steps are for the most common setup I see: the domain is registered at GoDaddy and email runs through Google Workspace. Screenshot every DNS record before you change anything. That's your undo.

  1. Change DMARC to stop the bouncing. Find the TXT record named _dmarc and change p=reject to p=none. Leave the rest of the record alone. This usually takes effect within about an hour.
  2. Add Google to your SPF record. Find the TXT record on @ that starts with v=spf1 and add include:_spf.google.com. If GoDaddy also sends or forwards mail for you, keep include:secureserver.net in the same record. A domain should only ever have 1 SPF record.
  3. Turn on DKIM in Google Workspace. In the Google Admin console, go to Apps, Google Workspace, Gmail, Authenticate email. Generate a key, add it in GoDaddy as a TXT record named google._domainkey, then click Start authentication.
  4. Test it. Send an email to a Gmail address, open it, click the 3 dots, and choose Show original. SPF, DKIM and DMARC should all say PASS.
  5. Tighten DMARC again later. After a week or two of passing tests, change p=none to p=quarantine. Check back in a few days to make sure it wasn't changed again.

For a GoDaddy domain that sends through Google, a working SPF record often looks like this:

v=spf1 a mx include:_spf.google.com include:secureserver.net ~all

Why "mx" in a GoDaddy SPF record doesn't cover Google

Many GoDaddy SPF records include a mx. The mx part approves only the servers that receive your mail. Google sends your outgoing mail from a different set of servers. Without include:_spf.google.com, outgoing Google mail still fails SPF.

Why Gmail and Yahoo check this so closely now

Since February 2024, Google has required anyone sending email to personal Gmail accounts to set up SPF or DKIM (Google Workspace Admin Help, Email sender guidelines). Yahoo announced similar requirements at the same time. Domains that never set these up worked fine for years and are now one DMARC change away from bouncing.

Summary

Sources: Google Workspace Admin Help, "Email sender guidelines." Google Workspace Admin Help, "Set up DKIM." Yahoo Sender Hub, "SMTP error codes." dmarcian, "How to Publish a DMARC Record with GoDaddy," updated September 16, 2025. Spam Resource, "GoDaddy setting DMARC for new domains," September 2025.

Common questions.

What does 550 5.7.26 unauthenticated email mean?

It's the error Gmail sends back when your email fails your own domain's security checks and your domain's DMARC policy says to reject failing mail. The fix is in your domain's DNS settings: usually adding Google to your SPF record, turning on DKIM in Google Workspace, and setting DMARC to p=none while you test.

What does 554 5.7.9 failed authentication checks mean?

It's the same problem reported by Yahoo and AOL. Your email failed SPF and DKIM, and your domain's DMARC record told Yahoo to reject it. The recipient didn't block you. The fix is in your own domain's settings.

Why did my email start bouncing when nobody changed anything?

Your email was probably failing the checks for a long time, and a loose or missing DMARC policy let it through anyway. Once a DMARC record gets added or set to reject, everything that was quietly failing starts bouncing. GoDaddy now adds a DMARC record to domains purchased or transferred to GoDaddy, and its reporting address ends in onsecureserver.net.

Does changing DMARC to p=none make my domain less safe?

For a short time, a little. It lets spoofed email through while you fix SPF and DKIM. Once both pass, move it to p=quarantine so fake emails using your name go to spam.

Do I need to change anything on my phone or computer?

Usually no, if you send from your Google Workspace account in Gmail or the Gmail app. If someone sends as your business address from a personal Gmail or another email app, that setup can still fail the checks after your DNS is fixed.

How long does the fix take?

The DNS changes take a few minutes and usually start working within about an hour. Google says DKIM can take up to 48 hours to start working after you add the record.

Want me to fix it for you?

I fix this for a flat $125. That covers checking your current records, finding what changed, updating your DNS and Google Workspace settings, and testing until your email passes. It doesn't include setting up phones, computers or email apps. If part of the problem is on a device, I'll tell you exactly what to change.

Stay ahead of the curve.

When I publish new research or find something that's working in AI search, I'll send it your way. Only when I have something worth your time. Promise I won't spam you, I'm too busy testing this stuff myself.

You're in. Talk soon.

No spam. Unsubscribe anytime.