Definition
The Google and Yahoo bulk sender requirements are a set of mandatory email sending standards announced in October 2023 and enforced from February 2024. They apply to anyone sending over 5,000 emails per day to Gmail or Yahoo addresses. The requirements cover three primary areas: email authentication, spam rate management, and one-click unsubscribe.
These requirements represent the most significant email deliverability policy change in years. Senders who fail to meet the requirements risk having their email rejected, filtered to spam, or blocked entirely. The requirements apply to all senders reaching Gmail or Yahoo recipients, regardless of the sender's ESP or infrastructure.
Three Core Requirements
| Requirement | Standard | Enforcement |
|---|---|---|
| Authenticate emails | SPF, DKIM, and DMARC (p=none minimum) | Required for all senders |
| Keep spam rate below 0.3% | Complaint rate < 0.3% (ideally < 0.1%) | Enforced by Gmail/Yahoo |
| One-click unsubscribe | List-Unsubscribe + List-Unsubscribe-Post headers | Required for bulk senders |
Additional Requirements
- Format messages according to the Internet Message Format standard (RFC 5322)
- Do not spoof Gmail or Yahoo From: headers
- Use TLS for email transmission
- Keep spam complaint rates consistently low, not just below 0.3%
Best Practices
- Implement SPF, DKIM, and DMARC with a policy of at least p=none
- Aim for a spam complaint rate below 0.1% (well under the 0.3% limit)
- Implement one-click unsubscribe headers in all campaigns
- Monitor your postmaster tools (Google Postmaster Tools, Yahoo Sender Hub) regularly
- Review your sending practices against the full requirements quarterly
- Work with your ESP to ensure your infrastructure meets all requirements
Was this useful?
Related Glossary Terms
BIMI
BIMI (Brand Indicators for Message Identification) is an email standard that allows brands to display their logo next to their emails in supported email clients. It requires DMARC enforcement at quarantine or reject policy.
DKIM Alignment
DKIM alignment is the DMARC requirement that the domain in the From header matches the domain in the DKIM signature, confirming the visible sender domain is authenticated.
DKIM (DomainKeys Identified Mail)
DKIM (DomainKeys Identified Mail) is an email authentication method that uses digital signatures to verify that an email was not tampered with during transit and comes from a authorised domain.
DMARC Aggregate Report
A DMARC aggregate report is a machine-readable XML summary that receiving mail servers send to domain owners daily to show authentication results for their email traffic.
DMARC Forensic Report
A DMARC forensic report is a detailed message-level copy of an individual email that failed DMARC authentication, sent to the domain owner to help diagnose spoofing and misconfiguration.
DMARC RUA and RUF Tags
The DMARC rua and ruf tags define where a domain owner receives aggregate and forensic authentication reports, powering DMARC monitoring and spoofing detection.
Frequently Asked Questions
Some requirements apply to all senders — authentication (SPF, DKIM, DMARC) and TLS transmission are expected of every sender, regardless of volume. The one-click unsubscribe requirement and the formal 0.3% spam rate threshold specifically target bulk senders (over 5,000/day).
Non-compliant senders may experience email rejection, spam filtering, and blocklisting by Gmail and Yahoo. Google has stated it will gradually increase enforcement, starting with temporary rejections that inform senders of the specific failure so they can correct it.