Sometimes when bounce comes consumer fails to correctly identify message which just has bounced and thus fails to mark it as undelivered.
Perhaps, the problem is in parsing message-ids like this:
Message-ID: =?utf-8?q?=3C6cfa1c2d-7ca0-4b32-8b91-381d5e38b88a-bookings=3Ddu?=