Gmail Bulk Sender Requirements and What Yahoo Wants Too

Gmail and Yahoo both publish rules for marketing email senders, but the two sets don't match line for line. Here's what each says, where they differ, and what to check on your own domain.

Ömer S. Ekinci
CEO, Oxford Impulse
Published
5 min read

If your marketing emails are landing in spam or being rejected, one thing to check is whether your domain meets the sender rules that Gmail and Yahoo now publish. This post covers the Gmail bulk sender requirements first, then Yahoo’s, using only what each company says on its own pages.

The short answer

Both providers expect marketing senders to authenticate with SPF and DKIM, publish a DMARC record, align the From domain, offer easy unsubscribing and keep spam complaints low. Gmail gives a rough volume trigger and specific technical minimums. Yahoo gives no volume number at all.

Who counts as a bulk sender

Gmail’s guidance talks about bulk senders as those sending roughly 5,000 or more messages a day to personal Gmail accounts, counted by primary domain[1][2]. Note the wording: the two Gmail pages phrase the number a little differently, so treat 5,000 as a rough guide, not a precise line. One more detail matters. Once Gmail treats your domain as a bulk sender, the label doesn’t expire[1]. Dropping below the number in a quiet month doesn’t take you back out.

Yahoo takes another route. It sets no volume threshold. Bulk means a significant volume, and Yahoo says it won’t give a number[4]. If you send regular marketing email to a real list, plan as if you’re in scope.

Tip

Gmail counts by primary domain[1], so think about your total sending under that domain, not just one campaign or one tool.

What Gmail requires

Authentication: SPF, DKIM and DMARC

Bulk senders need SPF, DKIM and a DMARC record[2]. Quick definitions: SPF (Sender Policy Framework) lists which servers may send for your domain. DKIM (DomainKeys Identified Mail) adds a cryptographic signature to each message. DMARC (Domain-based Message Authentication, Reporting and Conformance) tells receivers what to do when those checks fail, and ties them to your visible From address.

Gmail’s minimum DMARC policy is p=none, which means monitor only[2]. You don’t need a stricter policy to meet this rule. Your DKIM keys must be at least 1024 bits[2]. If your email platform generated your key years ago, check its length.

Alignment

Gmail wants the domain in your From address to align with the domain used for SPF or DKIM. One is enough, though passing both is advised[1]. Forwarded mail and mailing-list mail are exempt from this[1].

One-click unsubscribe

Marketing mail needs one-click unsubscribe. Transactional mail, such as order confirmations, doesn’t[1]. Technically, that means a List-Unsubscribe header following RFC 8058 with an HTTPS URL. A mailto address does not qualify for Gmail[1]. You must also honour unsubscribe requests within 48 hours[1].

Spam rate

Stay below 0.1% and never reach 0.3%[1]. Gmail shows your rate daily in Postmaster Tools, its dashboard for senders. Above 0.3%, you lose eligibility for mitigation[1].

Enforcement

Gmail says non-compliant traffic can face temporary and permanent rejections, increasing from November 2025[1]. The page gives no further detail on how that enforcement works, so don’t guess at it. Fix the basics and check your reports.

What Yahoo requires

Yahoo’s best-practices page asks bulk senders for the following[3]:

  • SPF and DKIM in place.
  • A DMARC record at p=none or stronger, and passing.
  • A From domain aligned to SPF or DKIM.
  • Complaints under 0.3%.

That 0.3% figure comes from the best-practices page[3]. Yahoo’s FAQ page is where the volume answer sits, and it gives no number[4].

For marketing mail, Yahoo wants a working List-Unsubscribe header, plus a visible unsubscribe link in the message body[3]. RFC 8058 POST is recommended, and mailto is accepted[3]. Requests should be honoured within two days[3].

Where the two differ

Area Gmail Yahoo
Volume trigger Roughly 5,000+ a day to Gmail accounts None given
DMARC Minimum p=none At least p=none, and passing
DKIM key length At least 1024 bits Not stated on the pages we used
Unsubscribe method RFC 8058 with HTTPS URL, mailto doesn’t qualify RFC 8058 POST recommended, mailto accepted, plus visible link
Unsubscribe deadline 48 hours 2 days
Spam rate Below 0.1%, never 0.3% Complaints under 0.3%

The practical takeaway: Gmail’s unsubscribe rule is the stricter of the two, so building to it is a sensible starting point. A header with an HTTPS one-click URL, plus a visible link in the email, should meet both sets of wording as the pages describe them.

Watch out

Don’t assume silence means permission. Where a page doesn’t mention a rule, such as Yahoo’s DKIM key length, it doesn’t mean there’s no requirement. It means we can’t tell you from these sources.

Your bulk sender checklist

FAQs

What counts as a bulk sender for Gmail?

Gmail’s guidance points to roughly 5,000 or more messages a day to personal Gmail accounts, counted by primary domain[1][2]. The two Gmail pages word the number slightly differently. Treat it as a rough guide, not an exact line.

Does a bulk sender label ever expire?

Not on Gmail. Once your domain is treated as a bulk sender, the label stays, even if your volume later drops[1]. Keep your setup compliant.

How many messages does Yahoo count as bulk?

Yahoo doesn’t say. It describes bulk as a significant volume and states it won’t give a number[4]. If you send regular marketing email, assume the rules apply to you.

Do I need a strict DMARC policy like p=reject?

No. Gmail’s minimum is p=none[2], and Yahoo asks for at least p=none, passing[3]. Neither page requires a stricter policy.

Do order confirmations need one-click unsubscribe?

On Gmail, the requirement applies to marketing mail, not transactional mail[1]. Order confirmations and password resets fall on the transactional side. Your promotional emails still need it.

Is a mailto unsubscribe link enough?

Not for Gmail, where mailto does not qualify and you need an HTTPS URL under RFC 8058[1]. Yahoo accepts mailto, though it recommends RFC 8058 POST and wants a visible link too[3]. Using the HTTPS method is the safer route for both.

Where can I see my Gmail spam rate?

In Postmaster Tools, which shows the rate daily[1]. Gmail asks you to stay below 0.1% and never reach 0.3%[1]. Above 0.3% you lose eligibility for mitigation.

What happens if I don’t comply?

Gmail says non-compliant traffic can face temporary and permanent rejections, increasing from November 2025[1]. It doesn’t explain how enforcement works beyond that. Fix your authentication and unsubscribe setup now rather than waiting to find out.

Where to go from here

Start with your DNS records and one test marketing email: check that SPF, DKIM and DMARC pass, that the From domain aligns, and that the unsubscribe header works. Then make a habit of glancing at Postmaster Tools. If you’d like help with the email side of your marketing, see our email marketing service at https://oxfordimpulse.com/e-mail-marketing/ . This isn’t legal advice, so read the provider pages below for the exact wording.

Sources

Share this article

Written by

Ömer S. Ekinci

CEO, Oxford Impulse Google Partner

Ömer S. Ekinci is the director of Oxford Impulse, a London-based Google Partner agency. He works hands-on in Google Ads, Meta Ads and Google Merchant Center accounts for e-commerce, healthcare and B2B brands across the UK, Europe and the US.

Free audit

Want a second pair of eyes?

Get a free audit and a clear list of what to fix first.

Get a free audit
0% read 5 min left

Gmail Bulk Sender Requirements and What Yahoo Wants Too

Get a free audit