Gmail, Yahoo and Outlook Bulk Sender Rules: What Changed and How to Comply

If your newsletters or promotions suddenly land in spam, or bounce with a message about authentication, the cause is usually not your content. Gmail, Yahoo and Microsoft Outlook now hold every bulk sender to the same short list of rules, and mail that breaks them is filtered or rejected before anyone reads it.

TL;DR

• Anyone sending around 5,000 or more emails a day to Gmail or Outlook addresses counts as a bulk sender. Yahoo applies the same rules without publishing a number.
• Bulk senders must pass SPF, DKIM and DMARC, with the From address aligned to the domain that signs the mail.
• Marketing email needs a one-click unsubscribe, and unsubscribes must stop within two days.
• Keep spam complaints below 0.3%, and aim for under 0.1%.
• Senders below the threshold still need SPF or DKIM, valid DNS and a low complaint rate. Following the bulk rules anyway is the safest choice.

What are the Gmail and Yahoo bulk sender requirements?

Google and Yahoo announced joint rules that took effect in February 2024, and Google has stepped up enforcement since, moving from warnings and temporary errors to rejecting more non-compliant mail outright. For bulk senders the rules are:

1. Authenticate with SPF and DKIM. SPF lists the servers allowed to send for your domain. DKIM adds a signature that proves the message was not changed on the way.
2. Publish a DMARC record. A policy of p=none is the minimum. The domain in your From address must match the domain that passes SPF or DKIM (this is called alignment).
3. Offer one-click unsubscribe. Marketing messages need the List-Unsubscribe and List-Unsubscribe-Post headers, which put an Unsubscribe button next to your name in the inbox, plus a visible link in the email itself.
4. Honour unsubscribes within two days.
5. Keep the spam rate low. Complaints reported in Google Postmaster Tools must stay under 0.3%.
6. Use valid DNS and TLS. Sending servers need forward and reverse DNS records, and mail should travel over an encrypted connection.

What does Microsoft Outlook require from bulk senders?

Since May 2025, Outlook.com, Hotmail and Live.com expect the same basics from domains that send more than 5,000 messages a day: SPF, DKIM and DMARC (at least p=none) that align with the From domain. Mail that fails goes to Junk first and is rejected after that. Microsoft also asks for a working unsubscribe link, a valid From and Reply-To address, and clean lists with few bounces.

Who counts as a bulk sender?

Google and Microsoft count roughly 5,000 messages a day to their own users from one sending domain. The number covers all mail from that domain, so a busy month of order emails plus a newsletter can tip a growing business over the line. Once Google classes you as a bulk sender, you stay one.

If you are well below the threshold, the minimum rules still apply: SPF or DKIM, valid DNS and a spam rate under 0.3%. In practice, the providers reward everyone who follows the full list, so set it up once and stop worrying about where the line sits.

How do I check if my domain is compliant?

Start with three checks:

• Send a test email to a Gmail address, open it, choose Show original, and look for PASS next to SPF, DKIM and DMARC.
• Look up your DNS records at your domain provider. You need one SPF record (never two), a DKIM record from your email platform and a DMARC record at _dmarc.yourdomain.com.
• Register your domain in Google Postmaster Tools to see your spam rate and authentication results over time.

How do I set up SPF, DKIM and DMARC?

You add each one as a DNS record at the company that manages your domain, such as your registrar, Cloudflare or your web host.

1. SPF: one TXT record that lists your email providers. If you already have one, merge the new provider into it.
2. DKIM: your email platform gives you the records to add. Many platforms use CNAME records so they can rotate keys for you.
3. DMARC: a TXT record at _dmarc. Start with p=none and a reporting address, read the reports for a few weeks, then move to quarantine once every legitimate sender passes.

A good habit is to send marketing email from a subdomain such as mail.yourbusiness.com. Your everyday business email then keeps its own reputation, separate from your campaigns.

Do I need a one-click unsubscribe link?

Yes, for marketing and promotional email. The one-click header lets people leave your list from the inbox without opening the message, and the providers treat a missing header as a sign of a careless sender. Transactional mail such as receipts and password resets does not need it.

The unsubscribe must also work. Someone who unsubscribes and keeps getting email is far more likely to press Report spam, which is exactly the number the providers watch.

How do I keep my spam complaint rate low?

• Email people who asked to hear from you. Bought or scraped lists are the fastest route to complaints.
• Remove addresses that bounce, and people who have not opened anything in months.
• Make your sender name recognisable so people know who you are before they open.
• Send at a steady rhythm. A sudden blast to an old list looks like spam to filters and readers alike.
• Keep the unsubscribe link easy to find. People who cannot find it use the spam button instead.

How QuiQSol handles the bulk sender rules for you

Quiq Marketing builds most of this checklist into how campaigns go out:

• Your own sending domain. Account Settings, Domains walks you through each DNS record and checks it for you, including DKIM and an optional BIMI logo. See Set up Quiq Marketing.
• One-click unsubscribe on every campaign. Every campaign carries the List-Unsubscribe headers and a footer link, and a contact who unsubscribes is never emailed by a campaign again.
• A deliverability health score. The dashboard scores your setup out of 100 from your domain, DKIM, sender address, audience and your bounce, complaint and unsubscribe rates, and lists what to fix.
• Your postal address in the footer, which email law requires in every marketing email.

For one-to-one sales email, Quiq Cold Outreach checks SPF, DKIM and DMARC for your domain, warms up each mailbox and pauses a mailbox on its own if too many emails bounce.

Related reading: why marketing emails go to spam.