What does “421 4.7.28 Gmail has detected an unusual rate of email” mean?
Gmail saw far more mail than usual from your address, domain or server, and slowed it down.
Last read from the sources at the foot of this page.
Gmail has detected an unusual rate of email
What does it mean?
Gmail limits email that arrives at an unusual rate, or an unusual rate of unsolicited email. The wording says what it measured: your IP address, your DKIM domain or your SPF domain.
What exactly does the source say?
421 4.7.28 Gmail has detected an unusual rate of email. To protect our users from spam, email has been temporarily rate limited. To review our bulk email senders guidelines, go to Email sender guidelines.
Gmail's page writes domain-name and ip-address where your bounce shows your own domain and the sending address.
421 4.7.28 Gmail has detected an unusual rate of email originating from your IP address ip-address. To protect our users from spam, email sent from your IP address has been temporarily rate limited. To review our bulk email senders guidelines, go to Email sender guidelines.421 4.7.28 Gmail has detected an unusual rate of unsolicited email originating from your DKIM domain domain-name. To protect our users from spam, email sent from your domain has been temporarily rate limited. To review our bulk email senders guidelines, go to Email sender guidelines.421 4.7.28 Gmail has detected an unusual rate of unsolicited email originating from your SPF domain domain-name. To protect our users from spam, email sent from your domain has been temporarily rate limited. To review our bulk email senders guidelines, go to Email sender guidelines.550 5.7.28 There is an unusual rate of unsolicited email originating from your IP address. To protect our users from spam, email sent from your IP address has been blocked. To review our bulk email senders guidelines, go to Email sender guidelines.Why would a small firm see it?
A mailbox whose password was stolen and is now sending spam, or a large newsletter sent all at once from ordinary mailboxes.
How do I fix it?
- Look at the Sent folder of the mailbox that got the bounce.Mail you did not write means the account is being used: change its password and turn on two-step sign-in.
- Send newsletters and large mailings through a service built for them, set up with your domain.
- Send only to people who asked for your mail.
Where does this come from?
- Google Workspace: Gmail SMTP errors and codesknowledge.workspace.google.comRead 14 October 2026
See what is open before anyone else does.
We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.
- We read your firm from outside.
- You see what is open, with the proof for the lead finding.
- If it is worth it, you order.
What happens if you go ahead. More at getleaktrace.com/see-it-first/.
Read the transcript
- 72 hours. One domain. Nothing to install.
- Discover. Every way in, found from outside.
- Validate. Every finding, proven. Dated and checkable by anyone.
- Close. Forged email: one click per step, where we reach your DNS host and you approve it.
- You get the fix for the rest, step by step, and we re-check until it is closed.
- Monitor. On monitoring: email settings, look-alikes and new host names re-checked every hour. Alerts within the hour.
- Every paid assessment is human-verified before release.
- The AI defense layer for businesses. getleaktrace.com/see-it-first/