{"id":3636,"date":"2025-11-09T08:11:18","date_gmt":"2025-11-09T08:11:18","guid":{"rendered":"https:\/\/emailwarmup.com\/blog\/?p=3636"},"modified":"2026-03-05T09:40:53","modified_gmt":"2026-03-05T09:40:53","slug":"554-5-7-5-permanent-error-dmarc","status":"publish","type":"post","link":"https:\/\/emailwarmup.com\/blog\/email-errors\/554-5-7-5-permanent-error-dmarc\/","title":{"rendered":"How To Fix 554 5.7.5 Permanent Error Evaluating DMARC Policy"},"content":{"rendered":"\n
\"How-To-Fix-554-5.7.5-Permanent-Error\"<\/figure>\n\n\n\n

The 554 5.7.5 error blocks your emails permanently because receiving servers can’t evaluate your DMARC policy, or they enforce DMARC, and your message fails alignment. The SMTP rejection indicates that your DMARC record has a syntax or configuration issue that requires immediate attention.<\/p>\n\n\n\n

What causes the 554 5.7.5 error<\/h2>\n\n\n\n

Your DMARC setup has failed one or more of the required checks. Here’s what breaks:<\/p>\n\n\n\n

Cause<\/td>What went wrong<\/td><\/tr>
Invalid DNS syntax<\/td>Extra characters, missing semicolons, or wrong formatting in your DMARC record<\/td><\/tr>
Multiple SPF records<\/td>Conflicting SPF records, missing include statements for your ESP, or exceeding 10 DNS lookups<\/td><\/tr>
DKIM failure<\/td>Selector not published, missing key, or domain mismatch in the d= tag<\/td><\/tr>
Alignment mismatch<\/td>Your From domain doesn’t align with SPF or DKIM (under relaxed or strict rules)<\/td><\/tr>
Invalid reporting URIs<\/td>Malformed rua or ruf tags that fail external reporting verification<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

Fix the error in 5 steps<\/h2>\n\n\n\n

Follow these steps carefully to make the fix:<\/p>\n\n\n\n

Step 1: Check your DMARC record<\/h3>\n\n\n\n

Run a DMARC lookup tool to validate your record syntax. Your record must<\/em> start with v=DMARC1 and include a policy tag (p=none, p=quarantine, or p=reject). Remove any extra periods, spaces, or characters at the end.<\/p>\n\n\n\n

Step 2: Fix your SPF record<\/h3>\n\n\n\n

Change your SPF record<\/a> ending from ?all to ~all (soft fail) or -all (hard fail). A neutral ?all policy won’t produce an SPF pass for DMARC to use (forcing you to rely entirely on DKIM). Also, verify you’ve included all authorized sending sources and stay under 10 DNS lookups to avoid permerror.<\/p>\n\n\n\n

Step 3: Configure DKIM properly<\/h3>\n\n\n\n

Set up DKIM<\/a> if you haven’t already (you’ll need it when SPF won’t pass or align). Check that your d= domain in the DKIM signature aligns with your From domain:<\/p>\n\n\n\n

    \n
  1. Relaxed alignment \u2014 organizational domain match <\/li>\n\n\n\n
  2. Strict alignment \u2014 exact domain match required<\/li>\n\n\n\n
  3. Publish your DKIM selector and verify the key is active<\/li>\n<\/ol>\n\n\n\n

    Step 4: Verify alignment<\/h3>\n\n\n\n

    DMARC passes only when either<\/em> SPF or DKIM passes and<\/em> aligns with your From domain. Test your setup:<\/p>\n\n\n\n