The Gmail and Yahoo bulk sender requirements are rules that began in February 2024. Every sender must authenticate mail and keep spam complaints low. Anyone sending about 5,000 or more messages a day to Gmail addresses must also use SPF, DKIM and DMARC, offer one-click unsubscribe on marketing mail and honor unsubscribes within two days.
What applies to all senders?
- Authenticate with SPF or DKIM. Google recommends setting up both.
- Have valid forward and reverse DNS records (PTR) for your sending IPs.
- Send over a TLS connection.
- Keep the spam rate reported in Google Postmaster Tools below 0.30%.
- Format messages according to the Internet Message Format standard (RFC 5322).
- Do not impersonate Gmail From headers.
What applies to bulk senders?
Google defines a bulk sender as one that sends close to 5,000 or more messages in one day to personal Gmail accounts. Once a domain is classed as a bulk sender, it stays one. Extra requirements:
- Set up SPF, DKIM and DMARC. The DMARC policy can be p=none, but the record must exist.
- Align the From domain with the SPF or DKIM domain, so DMARC passes.
- Support one-click unsubscribe for marketing and subscribed messages, using the List-Unsubscribe and List-Unsubscribe-Post headers, and put a visible unsubscribe link in the body. See how to implement it.
- Process unsubscribe requests within two days.
- Aim for a spam rate under 0.10% and never reach 0.30%.
Yahoo announced equivalent requirements for the same period. Microsoft later announced similar rules for Outlook.com consumer addresses for high-volume senders. Check each provider's current sender guidelines, because details are updated.
Do the rules apply to you if you send less than 5,000 a day?
The baseline items do: authentication, valid DNS, TLS and low complaints. The bulk-only items, especially DMARC and one-click unsubscribe, are best treated as standard practice at any volume. They also help inbox placement for small senders, and you can cross the 5,000 line faster than you expect after a single big campaign.
How do you check that you comply?
- Send a message and check SPF, DKIM and DMARC results in the original headers. Use the steps in SPF, DKIM and DMARC explained.
- Verify your domain in Google Postmaster Tools and review spam rate and authentication.
- Confirm your sending platform supports the one-click header, and test it.
- Run a deliverability test after changes.
What happens if you do not comply?
Providers may send non-compliant mail to spam or reject it, and Google has said it enforces the rules progressively. The practical risk is a falling inbox rate that looks like a mysterious reputation problem. For a full fix list, use how to improve email deliverability and the overview in email deliverability.
Frequently asked questions
What counts as a bulk sender for Gmail?
Google counts a sender that sends close to 5,000 or more messages in a day to personal Gmail accounts, measured by primary domain, and once classified, it stays bulk.
Is p=none enough for DMARC?
For the Gmail and Yahoo requirement, a DMARC record with at least p=none and alignment is enough. Stronger policies improve protection against spoofing.
Does one-click unsubscribe apply to transactional email?
The requirement targets marketing and subscribed messages. Transactional mail such as password resets is not expected to include it.
Where do I see my Gmail spam rate?
In Google Postmaster Tools, after you verify domain ownership. It only shows data when your volume is high enough.