Cold email infrastructure starting at $1/mailbox. Volume discounts down to $0.55.Calculate your cost
ColdRelay
← All SMTP Errors
SMTP Error Reference

550 5.7.1

Gmail: our system detected an illegal attachment

Gmail blocks messages with attached executable file types (.exe, .bat, .vbs, etc.) and certain risky archives. Strip the attachment or change the file type to bypass.

Last updated: May 23, 2026


Overview

What 550 5.7.1 Means

What it means

Gmail rejected your message because it contained an attachment of a type Gmail considers high-risk. Per Gmail's policy, executable files (.exe, .bat, .cmd, .vbs, .scr) and certain archive formats are blocked unconditionally because they're the primary vehicle for malware delivery. The full text typically reads: 'Our system detected an illegal attachment on your message.'

Who you'll see it from

Gmail consumer accounts and Google Workspace domains. The list of blocked file types is consistent across Google's infrastructure.

Why it happens

Your message has an attachment in a blocked file type. Common offenders for legitimate senders: .exe installers, .bat utility scripts, .iso disk images, .zip files containing blocked types, or password-protected archives that Gmail can't scan.

Resolution

How to Fix 550 5.7.1

  1. 1

    Remove the executable attachment

    Cold email essentially never needs an executable attachment. If you're attaching .exe, .bat, .vbs, or similar, host the file at a download URL and link to it instead. Cloud-hosted (S3, Drive, Dropbox) with direct link is the clean approach.

  2. 2

    Avoid archive formats Gmail can't scan

    Gmail can scan .zip and .tar contents. It cannot scan password-protected archives or some encrypted formats. Password-protected attachments are blocked unconditionally. Use unprotected archives or link to cloud-hosted files.

  3. 3

    Check the full list of Gmail's blocked file types

    Gmail publishes the blocked-types list at the link in references. Common surprises: .js, .jse, .vbs, .vbe, .ps1, .ps2 (script files); .lib, .dll (system libraries); .ade, .adp (Access projects). If you're attaching any of these, switch to a link.

  4. 4

    Don't try to bypass with renamed extensions

    Gmail scans file content, not just extension. Renaming .exe to .txt doesn't bypass the scan. Some senders try double-extensions (.txt.exe) — Gmail catches these too. The clean fix is hosting the file remotely.

  5. 5

    Use Drive / Dropbox / S3 + a link

    Host the file on a sharing service and embed the public link in your message. Gmail's filter is more lenient on links to known file-hosting services than on direct attachments. Use a tracking-friendly domain if you need download analytics.

Authority

References

Cold email infrastructure

550 5.7.1 in the Cold Email Context

Attachment rejections are rare in cold email because cold email rarely needs attachments. The typical case is a salesperson attaching a PDF deck or proposal — these are normally accepted (PDF isn't blocked). The case that does fail: any attempt to attach an installer, script, or password-protected archive. The deliverability-safe pattern for cold email is text-only with a link to anything heavier (case study PDF, deck, demo video). ColdRelay infrastructure doesn't change this — it's a content-layer issue handled by your sending platform.

FAQ

Frequently Asked Questions

Is PDF blocked by Gmail?

No. PDF is allowed. Standard document formats (PDF, DOCX, XLSX, PPTX, images) are all accepted. The blocked list is specifically executables and risky scripts.

What about ZIP files?

Unencrypted ZIPs are accepted IF their contents don't contain blocked file types. A ZIP containing an .exe is blocked because Gmail scans archive contents. A ZIP of PDFs is fine.

Why are password-protected archives blocked?

Gmail can't scan the contents, so they can't verify the archive doesn't contain malware. Password-protected archives are a common malware delivery vehicle, so Gmail blocks them by default.

Will sending the file via Drive bypass the block?

Yes for the email itself (no attachment = no rejection). But Drive sharing has its own restrictions on what file types can be hosted and shared with anonymous viewers. Most non-executable files are fine on Drive.

Keep reading

Related SMTP Errors and Guides

Stop Seeing 550 5.7.1 For Cold Email

ColdRelay ships clean, dedicated infrastructure with SPF, DKIM, DMARC, and reverse DNS configured automatically — the same fixes that resolve most 550 5.7.1 bounces. Starting at $50/month.

Start for $50/month →