The one-sentence version#
Since February 2024, Gmail and Yahoo require senders of 5,000+ daily messages to authenticate with SPF, DKIM, and DMARC, support one-click unsubscribe, and keep spam complaint rates under 0.3%.
Why you should care#
Non-compliant mail is rejected or filtered at the two largest consumer mailbox providers. Enforcement has tightened each year since.
The mental model#
Think of bulk sender requirements as a contract between you and the mailbox providers receiving your mail. You publish or configure something they can check; they check it on every message; the result feeds their decision about where your message lands. Everything below is about making that check pass consistently.
Your first setup, step by step#
- Publish SPF and DKIM, and a DMARC record at minimum p=none with aligned From domain.
- Add List-Unsubscribe headers and honor requests within two days.
- Use a valid forward and reverse DNS (PTR) for sending IPs.
- Monitor spam rate in Postmaster Tools and keep it under 0.1%.
- Send from a subdomain with its own reputation for marketing.
Words you will see#
- Mailbox provider: Gmail, Microsoft, Yahoo, Apple, and the corporate gateways that decide where mail lands.
- Authentication: proof that a message is from who it says it is (SPF, DKIM, DMARC).
- Reputation: the provider's running score of your domain and IP.
- Placement: whether a message reaches the inbox, spam, or is rejected.
Common mistakes#
- Thinking the rules only apply above 5,000; Gmail applies most of them to all senders.
- Using a gmail.com From address for bulk mail, which fails DMARC alignment.
Frequently asked questions#
What happens if I do not comply with Gmail bulk sender rules?
Temporary failures (4xx) escalating to rejections, and reduced inbox placement. Gmail announced enforcement in stages through 2024 and beyond.