Infrastructure

Envelope Sender

Definition

The envelope sender is the address given in the SMTP MAIL FROM command when a message is transmitted, defined as the reverse-path in RFC 5321. It is where bounces are delivered and the address that SPF checks. It travels with the SMTP envelope, not in the message body, and it can differ entirely from the From your recipient sees.

  • It lives in the SMTP MAIL FROM command, not in the message header the reader sees
  • Bounce messages and non-delivery reports are returned to this address
  • SPF authenticates the envelope sender domain, also written 5321.MailFrom
  • It is frequently different from the visible From, especially through an ESP
At a glance
Also called MAIL FROM · reverse-path · bounce address
Defined in RFC 5321 (SMTP)
Set during The SMTP MAIL FROM command
Used for Bounce routing & SPF
Identifier 5321.MailFrom
Becomes header Return-Path on delivery

What the envelope sender is

When one mail server hands a message to another, it does so inside an SMTP conversation that has its own addressing, separate from the message text. The sending server announces who the mail is from with the command MAIL FROM:<address>, and that address is the envelope sender, formally the reverse-path in RFC 5321. The analogy is a paper letter: the envelope sender is the return address written on the outside of the envelope, while the From in the header is the signature inside the letter.

This address goes by many names. You will see it called MAIL FROM, reverse-path, bounce address, envelope from, or 5321.MailFrom. They all refer to the same thing: the address in the SMTP envelope, not the one in the visible header.

Why it matters: bounces and SPF

The envelope sender does two important jobs:

  • It collects bounces. If the receiving server cannot deliver the message, the non-delivery report is sent back to the envelope sender, not to the visible From. This is why ESPs point it at an address they control, so they can process bounces automatically.
  • It is what SPF checks. SPF validates the domain in the envelope sender (the 5321.MailFrom) against that domain’s published list of authorised IPs. The visible From is a different identifier (5322.From) that SPF never looks at directly.

Because SPF authenticates the envelope-sender domain, a message can pass SPF and still fail DMARC. DMARC requires that the authenticated domain align with the visible From, so if your envelope sender is your ESP’s domain while your From is your own, SPF passes but does not align. Using a custom Return-Path on your own domain fixes that.

Where the envelope sender lives

The sending server opens an SMTP session
It issues MAIL FROM:<bounce@mail.example.com>
The receiver runs SPF on that envelope-sender domain
On delivery, the address becomes the Return-Path header
Any bounce is returned to that address

Envelope sender vs From header

Envelope sender From header
Identifier 5321.MailFrom 5322.From
Set in SMTP MAIL FROM Message header
Seen by reader? No Yes
Checked by SPF DMARC alignment
Receives bounces? Yes No

Common mistakes

Confusing it with the visible From
The envelope sender lives in the SMTP transaction, not the header. They are two separate addresses, and they frequently differ. SPF checks the envelope sender; recipients see the From.
Expecting SPF alone to stop spoofing
SPF authenticates the envelope-sender domain, which a spoofer can set freely while forging a different visible From. Only DMARC alignment ties authentication back to the From address.
Using the ESP default and breaking alignment
If the envelope sender stays on your ESP’s domain, SPF passes but does not align with your From, so DMARC can still fail. Configure a custom Return-Path on your own domain.

Frequently asked questions

Is the envelope sender the same as the From address?
No. The envelope sender is the address in the SMTP MAIL FROM command, used for bounces and SPF; the From is the address in the message header that recipients see. They are often different, especially when you send through an ESP, and the two are checked by different protocols.
What is the difference between the envelope sender and the Return-Path?
They are essentially the same address at two stages. The envelope sender is the live MAIL FROM value during the SMTP transaction; when the message is delivered, the receiving server writes that value into the Return-Path header. So the Return-Path is the envelope sender recorded for posterity.
Why does SPF check the envelope sender and not the From?
SPF was designed to validate the path the mail took, and the envelope sender (MAIL FROM) is the address the sending server commits to during transmission. The visible From is part of the message content, not the transmission, so SPF does not check it. DMARC adds that link through alignment.
Reviewed by Jennifer Jackson, Email Deliverability Analyst · June 2026 ← Back to glossary