Gmail and Yahoo bulk sender requirements explained

Google's email sender guidelines apply to mail sent to personal Gmail accounts. They have two tiers. Every sender, starting February 1, 2024, must meet a basic set of requirements. Senders who send close to 5,000 or more messages a day to personal Gmail accounts are bulk senders and must meet more.

Some details from Google's FAQ that catch businesses out:

• The 5,000 count includes all mail from the same primary domain, so marketing from news.yourcompany.ca and invoices from yourcompany.ca are added together.
• Once you're classified as a bulk sender, the status is permanent.
• The guidelines don't apply to mail sent to Google Workspace business accounts, but they do apply to mail sent from Workspace to personal Gmail.
• From November 2025, Google says it is ramping up enforcement, with temporary and permanent rejections for non-compliant messages.

If you send through a reputable platform, it handles PTR and TLS. What it can't do for you is publish DNS records on your domain. Most compliance gaps we see are custom DKIM never set up on the marketing tool, or no DMARC record at all. Our DMARC rollout guide covers the sequence.

Bulk senders' marketing and subscribed messages must support one-click unsubscribe and include a clearly visible unsubscribe link in the body. One-click is done with two message headers defined in RFC 8058:

• List-Unsubscribe: <https://yourcompany.ca/unsubscribe/...>
• List-Unsubscribe-Post: List-Unsubscribe=One-Click

1. 01

   Check your platform supports it

   Most mainstream email marketing platforms add these headers automatically for campaign mail. Confirm it's on, and check transactional tools if they send anything promotional.

2. 02

   Honour requests quickly

   Yahoo asks senders to honour unsubscribes within 2 days; Google's FAQ lists failure to honour requests within 48 hours as non-compliance.

3. 03

   Keep the visible link too

   The body link can lead to a preference page, but it must be easy to find.

Google asks all senders to keep the spam rate reported in Google Postmaster Tools below 0.3%, and bulk senders to stay below 0.10% and never reach 0.30% or higher. The spam rate is the share of delivered messages that users mark as spam. Register your sending domains in Postmaster Tools to see it; without it you are guessing.

The practical ways to stay low are permission-based lists, a clear sender name, sending what people signed up for, and removing people who haven't opened anything in months.

• Every platform that sends as your domain needs DKIM with your domain, or SPF alignment through a custom return-path, before DMARC can pass for it.
• Consider sending marketing from a subdomain so its reputation and complaint rate don't affect invoices and everyday mail. The 5,000 count still combines them for classification, but deliverability problems stay contained.
• Agencies sending for you are sending as you. Ask them to show you passing authentication results, not just a promise.

Meeting Gmail's rules doesn't make a campaign legal in Canada. Canada's Anti-Spam Legislation (CASL), administered by the CRTC, has three core requirements for commercial electronic messages: obtain consent (express or implied), identify yourself, and include an unsubscribe mechanism. It applies to messages sent to recipients in Canada, including from other countries. The CRTC's CASL FAQ and fightspam.gc.ca are the official references.

CASL has its own rules for how long consent lasts and how fast unsubscribe requests must be processed. Confirm specifics with counsel; this page describes requirements and isn't legal advice.

Sources: Google 'Email sender guidelines' and 'Email sender guidelines FAQ'; Yahoo Sender Best Practices; RFC 8058; RFC 7489; CRTC 'Frequently Asked Questions about Canada's Anti-Spam Legislation'. Talk to your counsel about how CASL applies to your lists.

• Count daily messages to personal Gmail across your whole primary domain.
• SPF and DKIM pass, with your domain, on every sending platform.
• DMARC record published (p=none minimum; aim for enforcement).
• Sending domains registered in Google Postmaster Tools; spam rate under 0.10%.
• One-click unsubscribe headers present on marketing mail; visible unsubscribe link in the body; requests honoured within 2 days.
• CASL consent records kept and identification in every commercial message.