Skip to content

Google, Yahoo and Outlook bulk sender rules, explained

By Ash, Founder, HosteazePublished 2 min read

Gmail, Yahoo and Outlook.com require anyone sending around 5,000 or more emails a day to them to pass SPF, DKIM and DMARC, offer one-click unsubscribe and keep spam complaints below 0.3%. Every sender, whatever the volume, needs at least SPF or DKIM, valid reverse DNS and a low spam rate.

A tall stack of envelopes and letters seen side on, the scale bulk senders work at
Credit: cocoparisienne via Pixabay

In February 2024 Google and Yahoo started enforcing new rules for anyone sending email to their users, and Microsoft followed for Outlook.com in May 2025. The headlines were about "bulk senders", but some of the rules apply to every business, including one sending a handful of invoices a week.

Which rules apply to every sender?

Whatever your volume, Gmail and Yahoo require you to:

Gmail bounces unauthenticated email with a 550 5.7.26 error.

What extra rules apply to bulk senders?

RequirementGmailYahooOutlook.com
Who counts5,000+ a day to Gmail accounts"Bulk senders" (no exact figure given)5,000+ a day to Outlook consumer addresses
SPF and DKIMBothBothBoth must pass
DMARCRequired, p=none is acceptableRequired, at least p=noneRequired, at least p=none
From address aligned with SPF or DKIMYesYesYes
One-click unsubscribeMarketing and subscribed mailMarketing and subscribed mailRecommended
Act on unsubscribesWithin 48 hoursWithin 2 daysRecommended

DMARC at p=none is enough to meet the rule, but it doesn't stop anyone pretending to be you. See DMARC p=none vs quarantine vs reject for when to tighten it.

What does one-click unsubscribe mean?

Two things. Your marketing emails must carry a hidden List-Unsubscribe header that lets Gmail or Yahoo show their own unsubscribe button, and the click must work without the reader logging in or filling in a form. You also still need a visible unsubscribe link in the email itself.

Newsletter tools such as Mailchimp and Brevo add the header for you. If you send marketing email from your own mailbox or a homemade system, you probably don't have it.

What happens if I don't meet the rules?

Non-compliant email is sent to spam or rejected outright, and the providers have tightened enforcement over time. Outlook.com rejects failing mail from high-volume domains with a 550 5.7.515 error.

For a small UK or EU business, the practical checklist is short: SPF, DKIM and a DMARC record, newsletters sent through a proper tool, and emails only to people who agreed to get them, which PECR and GDPR require anyway. The setup steps are in how to set up SPF, DKIM and DMARC.

Frequently asked questions

Do the rules apply if I send fewer than 5,000 emails a day?

Some do. Gmail and Yahoo require every sender to have SPF or DKIM, valid forward and reverse DNS and a spam rate below 0.3%. The DMARC and one-click unsubscribe rules are for bulk senders.

Does the 5,000 count include emails to all providers?

No. Gmail counts messages sent to personal Gmail accounts, and Outlook counts mail to its own consumer addresses.

Do my newsletter tool's settings cover this?

Partly. Most newsletter tools add one-click unsubscribe and can sign with DKIM for your domain, but you still have to add their DNS records and publish your own DMARC record.

Sources

  1. Google, Email sender guidelines
  2. Google, Email sender guidelines FAQ
  3. Yahoo, Sender best practices
  4. Microsoft, Outlook requirements for high-volume senders
  5. RFC 8058, One-click unsubscribe
A brass padlock with two keys beside it on a white backgroundTutorialHow to set up DMARC for Microsoft 365Add an SPF record with include:spf.protection.outlook.com, then create the two DKIM CNAME records Microsoft gives you and switch on DKIM signing in the Defender portal. Once both pass, add a TXT record at _dmarc with v=DMARC1; p=none; rua=mailto: and a reporting address, and tighten the policy later.Email and domains · 15 October 2026An old iron key in a rustic wooden door lockTutorialHow to set up DMARC for Google WorkspaceFirst make sure SPF includes _spf.google.com and DKIM is switched on in the Google Admin console. Wait 48 hours, then add a TXT record at _dmarc on your domain with the value v=DMARC1; p=none; rua=mailto: followed by a reporting address. Read the reports for a few weeks before moving to quarantine.Email and domains · 15 October 2026Red octagonal stop sign against a blue sky, like a mail server refusing a messageQuestionWhat does a 550 email bounce error mean?A 550 error means the receiving mail server permanently refused your email, so it won't try again. The extra code after it gives the reason. 5.1.1 means the address doesn't exist, 5.7.1 means it was blocked as spam or by a policy, and 5.7.26 means your domain's SPF or DKIM authentication failed.Email and domains · 14 October 2026Two stacked cardboard boxes, ready for a move, like your email moving to a new providerTutorialHow to change MX records without losing emailLog in to wherever your domain's DNS is managed, delete the old MX records, and add the new ones your email provider gives you with the exact priority numbers. Lower the TTL a day before if you can. New email reaches the new provider within minutes to hours, so keep the old mailboxes open for a few days.Email and domains · 14 October 2026Wooden arrow-shaped signpost against a blue sky, pointing the wayTutorialHow to point a domain to a websiteYou have two options. Change your domain's nameservers to the ones your host gives you, which hands over all your DNS. Or keep your DNS where it is and add an A record for the root domain plus a CNAME for www. Either way, copy your email records first so your inbox keeps working.Email and domains · 14 October 2026

Want email on your own domain?

Hosteaze hosting plans let you set up mailboxes on your own domain. See what each plan includes.

See hosting plans