Definition
The Google and Yahoo bulk sender requirements are a set of mandatory email sending standards announced in October 2023 and enforced from February 2024. They apply to anyone sending over 5,000 emails per day to Gmail or Yahoo addresses. The requirements cover three primary areas: email authentication, spam rate management, and one-click unsubscribe.
These requirements represent the most significant email deliverability policy change in years. Senders who fail to meet the requirements risk having their email rejected, filtered to spam, or blocked entirely. The requirements apply to all senders reaching Gmail or Yahoo recipients, regardless of the sender's ESP or infrastructure.
Three Core Requirements
| Requirement | Standard | Enforcement |
|---|---|---|
| Authenticate emails | SPF, DKIM, and DMARC (p=none minimum) | Required for all senders |
| Keep spam rate below 0.3% | Complaint rate < 0.3% (ideally < 0.1%) | Enforced by Gmail/Yahoo |
| One-click unsubscribe | List-Unsubscribe + List-Unsubscribe-Post headers | Required for bulk senders |
Additional Requirements
- Format messages according to the Internet Message Format standard (RFC 5322)
- Do not spoof Gmail or Yahoo From: headers
- Use TLS for email transmission
- Keep spam complaint rates consistently low, not just below 0.3%
Best Practices
- Implement SPF, DKIM, and DMARC with a policy of at least p=none
- Aim for a spam complaint rate below 0.1% (well under the 0.3% limit)
- Implement one-click unsubscribe headers in all campaigns
- Monitor your postmaster tools (Google Postmaster Tools, Yahoo Sender Hub) regularly
- Review your sending practices against the full requirements quarterly
- Work with your ESP to ensure your infrastructure meets all requirements
Related Glossary Terms
BIMI
BIMI (Brand Indicators for Message Identification) is an email standard that allows brands to display their logo next to their emails in supported email clients. It requires DMARC enforcement at quarantine or reject policy.
DKIM (DomainKeys Identified Mail)
DKIM (DomainKeys Identified Mail) is an email authentication method that uses digital signatures to verify that an email was not tampered with during transit and comes from a authorised domain.
DMARC (Domain-based Message Authentication)
DMARC (Domain-based Message Authentication, Reporting and Conformance) is an email authentication protocol that builds on SPF and DKIM to prevent domain spoofing and provide reporting on authentication failures.
Email Authentication Failure
Email authentication failures occur when SPF, DKIM, or DMARC checks fail, causing messages to be rejected, spammed, or quarantined by receiving mailbox providers.
Email DNS Records
DNS records required for email delivery: SPF, DKIM, DMARC, MX, PTR records. SPF lookup limits (10), TTL settings, propagation timing, and testing with dig and nslookup.
Email Domain Reputation
Email domain reputation is a score calculated by mailbox providers based on sending volume, engagement rates, complaint history, and authentication compliance from a specific sending domain.
Frequently Asked Questions
Some requirements apply to all senders — authentication (SPF, DKIM, DMARC) and TLS transmission are expected of every sender, regardless of volume. The one-click unsubscribe requirement and the formal 0.3% spam rate threshold specifically target bulk senders (over 5,000/day).
Non-compliant senders may experience email rejection, spam filtering, and blocklisting by Gmail and Yahoo. Google has stated it will gradually increase enforcement, starting with temporary rejections that inform senders of the specific failure so they can correct it.