Guide
Gmail, Yahoo and Outlook publish rules for people who send email. Here is what they say, which parts reach a small business, and what to do about them. Checked against the providers’ own pages on 8 November 2026.
By Hamza Rivera, updated
Short answer: Every sender to Gmail needs SPF or DKIM, working reverse DNS and TLS. Senders of close to 5,000 messages a day to Gmail also need DMARC, a matching From domain and one-click unsubscribe on marketing mail. Yahoo asks for SPF, DKIM and DMARC. A small business should do all of it anyway.
Every sender needs SPF or DKIM, working reverse DNS and TLS. Large senders also need DMARC, a matching From domain and one-click unsubscribe on marketing mail. A small business should do all of it anyway, because it costs little and removes the common reasons mail gets filtered.
| Rule | Gmail | Yahoo | What a small business should do |
|---|---|---|---|
| SPF or DKIM | Required for every sender | SPF and DKIM expected | Set up both |
| DMARC record | Required for bulk senders, p=none is enough | A valid policy of at least p=none, and DMARC must pass | Publish one with a report address |
| From domain lines up with SPF or DKIM domain | Required for bulk senders | Required | Check alignment for each sending tool |
| Forward and reverse DNS for sending servers | Required for every sender | Required for sending IPs | Your mail provider normally handles it |
| TLS when sending | Required for every sender | Not stated on the page read | Your mail provider normally handles it |
| One-click unsubscribe for marketing mail | Required for bulk senders, plus a visible link | Expected, honor within 2 days | Add it to any marketing or newsletter mail |
| Spam rate | Keep under 0.10%, never reach 0.30% | Keep under 0.3% | Watch Postmaster Tools |
Google treats a sender as bulk when it sends close to 5,000 messages or more to personal Gmail accounts in a 24 hour period. The count is by primary domain, so subdomains add up. Google also says that once a sender meets that bar it is considered a bulk sender permanently.
Yahoo’s sender hub lists its requirements for bulk senders. The page we read does not give a message count that defines bulk, so we do not repeat the 5,000 figure as if it were Yahoo’s.
For Outlook.com, Microsoft’s requirements apply to domains sending more than 5,000 emails a day. Non-compliant mail from those domains has been routed to Junk since 5 May 2025. Microsoft says rejection will come later, with the date to be announced.
Google says it has been ramping up enforcement since November 2025, with temporary and permanent rejections for non-compliant traffic, applied gradually. A missing DMARC record is one trigger for the 4.7.31 error code.
Including the website contact form, the invoicing tool and the CRM.
p=none with a report address meets the minimum Gmail and Yahoo describe, and starts giving you reports.
It uses the List-Unsubscribe and List-Unsubscribe-Post headers from RFC 8058, with a DKIM signature that covers them. Most newsletter tools do this for you. Transactional mail such as invoices is excluded from the one-click rule by Google.
It shows spam rate, reputation, authentication and delivery errors for mail sent to personal Gmail accounts. It will show gaps if few messages go to Gmail each day.
Gmail requires 1024 bits or longer and recommends 2048.
Send mail people expect, take them off the list when they ask and clean out addresses that bounce.
Some do. Every sender to Gmail needs SPF or DKIM, valid reverse DNS and TLS, and Yahoo expects SPF and DKIM. The stricter bulk rules, such as DMARC and one-click unsubscribe, apply at Gmail to anyone sending close to 5,000 messages a day to personal Gmail accounts. Doing them anyway costs little.
Google’s page gives 1 February 2024 as the start for the sender rules and says enforcement has been ramping up since November 2025.
It can, if it goes to enough Gmail addresses in a day. Even below the line, unsubscribe handling and low complaints are what providers watch.
Yes. Cold email is sent in volume from your domain, so the same rules apply. See our cold email infrastructure checklist.
No promise can be made. Meeting the published rules removes a common reason for rejection or filtering. Providers still decide on each message. Passieon is an independent agency and has no connection with Google, Yahoo or Microsoft.
On Google’s email sender guidelines pages, on the Yahoo Sender Hub and in Microsoft’s Defender for Office 365 blog. They change, so read the current version.
Message us
Ask anything about your site or where your enquiries are going. It goes straight to a person, not a bot. Leave an email and you get a reply.
