What are catch-all domains and why are they tricky?

A catch all domain accepts all incoming email regardless of whether the specific mailbox exists. This makes validation difficult because RCPT TO commands return positive responses even for nonexistent addresses. Catch all domains hide the truth, which means validators can only classify them as unknown or risky.