A catch-all configuration delivers messages sent to undefined addresses on a domain into a selected mailbox.
How does catch-all email work?
For example, even if wrongaddress@company.com does not exist, the message may still be delivered when catch-all is enabled.
Advantages
- Can recover messages sent to mistyped addresses.
- Can capture mail sent to old or forgotten addresses.
Disadvantages
Catch-all mailboxes can receive large amounts of spam because attackers can send messages to randomly generated usernames on the domain.
Security risks
Higher unwanted email volume can increase exposure to phishing, malicious attachments and other unsolicited content.
Should businesses use catch-all email?
For many organizations it is safer to accept mail only for known addresses. If catch-all is required, strong filtering and security controls should be in place.
Conclusion
Catch-all email can be useful in special situations, but it should be used carefully in business environments.