How to fix NDR error code "550 5.1.8 Access denied, bad outbound sender"

for Microsoft Office 365 or Exchange Online

The 550 5.1.8 Access denied, bad outbound sender NDR (Non-Delivery Report) error in Microsoft Office 365 or Exchange indicates that the recipient’s mail server rejected your email due to issues with the sender’s email address, domain, or server configuration. This is typically a hard bounce caused by authentication failures, poor sender reputation, or restrictive recipient server policies.

The full Non-Delivery Report (NDR) error message is as follows:

Your message couldn't be delivered because you weren't recognized as a valid sender. The most common reason for this is that your email address is suspected of sending spam and it's no longer allowed to send email. Contact your email admin for assistance. Remote Server returned 550 5.1.8 Access denied, bad outbound sender.

This NDR is generated if a user tries to send an email message after their account exceeds the sending limits in Exchange Online.

How do I fix this?

If you're a user, determine whether your account is compromised and then notify your administrator.

If you're an email administrator, follow these steps:

  1. Secure a compromised email account in Exchange Online.

  2. Unblock the user account on the Restricted entities page in the Microsoft 365 Defender portal. After you unblock the user account, all restrictions are usually removed within one hour so that the user can send email.

For more information, see Remove blocked users from the Restricted entities page. To help prevent future account compromises, follow the recommendations in Top 10 ways to secure your business data.