all guides

// how to fix

Zoho Mail "554 5.1.8 Email Outgoing Blocked": how to unblock it

Zoho Mail stopped sending with "554 5.1.8 Email Outgoing Blocked". Learn why Zoho blocks outgoing mail, how to secure the account and get it unblocked.

What it means

This error comes from Zoho Mail itself, not from the recipient. Zoho has stopped your account (or your whole organization) from sending email. The message usually looks like this:

Unable to send message;Reason:554 5.1.8 Email Outgoing Blocked.

You may still be able to receive and read email. Sometimes the web interface also shows a banner such as "Outgoing blocked: Unusual activity detected". Retrying does nothing: the block stays until it is lifted.

Why it happens

Zoho blocks outgoing mail to protect its servers' reputation. Its usage policy explains that accounts are restricted when the system detects unusual activity. Typical triggers reported by users:

  • Suspicious logins: sign-ins from new countries, a VPN, or many failed passwords. This can mean the account is compromised.
  • Spam-like sending: many emails to new or unknown recipients, bulk or promotional mail sent from a normal mailbox, or many messages with the same content.
  • Many bounces: sending to old or invented addresses that return errors.
  • A script or website sending through Zoho SMTP (a contact form, a CRM, a WordPress plugin) that suddenly sends far more than usual.
  • Plan limits: going over the daily sending limits of your plan, or account issues such as storage or billing.

How to check

  1. Look for the banner. Sign in to Zoho Mail on the web. If your outgoing mail is restricted, a banner usually explains the reason and links to the unblock process.
  2. Check recent activity. In your Zoho account security settings, review active sessions and recent sign-ins. Unknown locations mean you should treat the account as hacked.
  3. Check the Sent folder and any app that uses your Zoho SMTP credentials for emails you did not send.
  4. Check your domain. Once you can send again, send a test email to the unique address on the Delivmail home page (/) to confirm SPF, DKIM and DMARC pass for your domain. Set up SPF, DKIM and DMARC for Zoho Mail if anything fails.

How to fix it

1. Secure the account first

  • Change the password to a new, unique one.
  • Turn on two-factor authentication.
  • Sign out all other sessions and revoke app-specific passwords you do not recognize.
  • Scan the computers and phones that use this mailbox.

If the account was used to send spam, read what to do when a hacked account sends spam.

2. Unblock it

  • Personal or single user: follow the instructions in the banner. Zoho may ask you to change your password or confirm your identity before unblocking.
  • Organization account: according to Zoho's usage policy, an administrator can unblock users from the Users section of the Zoho Mail Admin Console.
  • Blocked for suspicious or harmful activity: the administrator may not be able to unblock it. Contact Zoho support (support@zohomail.com, as given in Zoho's usage policy) and explain what happened and what you changed.

3. Fix the cause so it does not come back

  • Do not send newsletters or bulk mail from a normal Zoho mailbox. Use a dedicated email marketing service or Zoho Campaigns, which are made for that.
  • Clean your contact list. Remove addresses that bounce. Never buy lists.
  • Protect website forms. If a site sends through your Zoho SMTP account, add a CAPTCHA and rate limit, and use a separate mailbox for it.
  • Respect sending limits. Check the limits of your plan in Zoho's documentation; they can change.
  • Avoid frequent VPN country changes on the account if they triggered the block.

Check that it is fixed

Send an email to the Delivmail test address on the home page: if it arrives, sending works again, and the report confirms that authentication passes. Then resend the message that failed. If the error returns right away, the block is still active or was re-triggered: contact Zoho support with the time of the error. Keep in mind that being able to send does not guarantee inbox placement; a clean report and a clean list matter too.

Check that it is fixed

DNS changes can take from a few minutes to a few hours. Then send a new test email or scan your domain again.

Related guides