Gmail, Yahoo and Microsoft bulk-sender rules: do they apply?

The short version

• Bulk means close to 5,000 or more messages a day to personal Gmail addresses (Google), or more than 5,000 a day to Outlook.com (Microsoft). Yahoo doesn’t publish a number.
• Once a bulk sender, always one at Gmail, according to Google’s FAQ.
• Bulk senders need: SPF and DKIM, a DMARC record (p=none is enough) and a From domain that lines up with SPF or DKIM. Gmail and Yahoo also require one-click unsubscribe on marketing mail; Microsoft requires an unsubscribe that’s easy to find and use.
• Everyone needs: SPF or DKIM, valid forward and reverse DNS on sending servers, secure (TLS) connections and a low spam-complaint rate.
• Most small businesses aren’t bulk senders, but their newsletter tool’s setup still has to meet the “everyone” rules.

Who counts as a bulk sender?

Three details catch people out.

• It’s counted per domain. Google says messages from the same primary domain count together. Your office mailboxes, newsletter tool and invoicing system all add up.
• It’s counted per mailbox provider. The Gmail threshold counts only mail to personal Gmail accounts, not to businesses using Google Workspace.
• It’s permanent at Gmail. A single big send, such as a holiday promotion to an old list, makes you a bulk sender for good.

What does each group have to do?

Every sender, whatever the volume

Gmail’s sender guidelines and Yahoo’s best practices set the same baseline:

1. Set up SPF or DKIM for your domain. See the SPF record for Microsoft 365 or Google Workspace.
2. Make sure sending servers have valid forward and reverse DNS. Microsoft 365, Google Workspace and reputable sending services handle this for you.
3. Send over TLS, which mainstream providers also do for you.
4. Keep spam complaints low. Gmail’s guidelines say to stay below 0.3% and aim for under 0.1%; Yahoo’s page also uses 0.3%.
5. Don’t pretend to be Gmail in your From address.

Bulk senders, on top of that

1. Both SPF and DKIM.
2. A DMARC record. Gmail and Yahoo accept p=none. Microsoft accepts p=none but recommends p=reject. See moving DMARC from none to reject.
3. Alignment. The domain in your From address must match the domain that passed SPF or DKIM.
4. An easy unsubscribe. Gmail and Yahoo require one-click unsubscribe on marketing and subscribed mail, using the List-Unsubscribe and List-Unsubscribe-Post headers from RFC 8058, plus a visible unsubscribe link in the message. Microsoft’s Outlook.com policy requires an unsubscribe that’s clearly documented and easy to find and use, without naming the one-click headers. Setting up one-click covers all three.
5. Honor unsubscribes quickly. Google recommends within 48 hours; Yahoo says within 2 days.

Your newsletter tool adds the unsubscribe headers. Your job is to finish its domain authentication so its DKIM signs as your domain.

What happens if I don’t comply?

• Gmail: Google’s FAQ says enforcement has been ramping up since November 2025. Messages that don’t comply can be delayed, sent to spam, or rejected temporarily or permanently, with an error code that names the reason.
• Outlook.com: since May 5, 2025, Microsoft’s policy says non-compliant mail from high-volume domains goes to junk, and may be rejected with error 550; 5.7.515 if the problem continues.
• Yahoo: its page lists the requirements and warns that missing them affects delivery.

Why should a small sender care?

Three reasons. Your newsletter tool may count your mail toward the thresholds even if your mailbox doesn’t. A single large send can make you a bulk sender permanently at Gmail. And the bulk-sender setup is simply good practice: it’s what protects your domain from being spoofed. Our article on SPF, DKIM and DMARC explained covers the background.

What are the common mistakes?

• Assuming “we’re small, so it doesn’t apply.” The baseline applies to everyone.
• Leaving the newsletter tool on its default sending domain. Mail goes out “via” the tool’s domain, doesn’t line up with yours, and DMARC can’t pass for it.
• Buying or importing old lists. Complaints climb fast. Our help page on sending a newsletter covers list basics.
• Hiding the unsubscribe link. People hit “Report spam” instead, which counts against you.
• Sending a big promotion from your everyday mailbox. Use a newsletter service built for it.

What if mail is already being rejected?

1. Read the bounce. Gmail’s rejection codes name the failing requirement. Our help page on bounced email explains the codes.
2. Check SPF, DKIM and DMARC with our email deliverability checker.
3. Check your Gmail standing in Postmaster Tools and your IP reputation; see checking blocklists and reputation.
4. Pause large sends until the cause is fixed. Sending more makes complaint rates worse.

How much does it cost, and how long does it take?

Meeting the “every sender” rules costs nothing beyond your existing email and DNS. The bulk rules mostly come down to finishing setup in your newsletter tool and adding DMARC, which can be done in a day, with DMARC tightening over the following weeks.

How does E-3 handle this?

Bulk mail landing in spam is one of the email problems clients bring us. In one case in our records, it traced back to a domain with no DKIM key and no DMARC record, and adding both fixed it. When a client sends newsletters or campaigns, the sending tool’s own domain authentication is one of the first things we look at, alongside their mailbox provider’s SPF, DKIM and DMARC.

Related questions

• How do I move DMARC from none to reject safely?
• How do I add newsletter and CRM tools without breaking SPF?
• How do I send a newsletter or email blast to my list?
• Why are my business emails going to spam?
• Back to the complete guide to business email that lands

Sources

1. Email sender guidelines (Gmail Help)
2. Email sender guidelines FAQ (Google Workspace Admin Help)
3. Sender best practices (Yahoo Sender Hub)
4. Policies, practices and guidelines for senders to Outlook.com (Microsoft)
5. RFC 8058: Signaling One-Click Functionality for List Email Headers (IETF)