SVHApplied AIProgram
EN
← Back to the list

Gmail and Yahoo Sender Requirements: A Checkup for Small Email Programs

Published

Three things matter: proof of identity, easy exit, few complaints

Starting in February 2024, Google and Yahoo asked senders who deliver large volumes of mail to their users to meet new requirements. They come down to three things: authentication that shows the mail really comes from you (SPF, DKIM, and DMARC), a simple way for recipients to stop receiving it, and a low rate of spam complaints. If you send a newsletter or promotions, you can use the same list to audit your own program.

Google describes a bulk sender as one that sends roughly 5,000 or more messages a day to personal Gmail accounts. Many small businesses stay below that, but Google recommends authentication for everyone. Thresholds and details are published in each provider's help pages and can change, so check the current wording before you set anything up.

What the three authentication methods do

  • SPF lists, in your DNS, the servers allowed to send mail for your domain.
  • DKIM adds a digital signature that shows the message was not altered and that the domain owner signed it.
  • DMARC tells receiving servers what to do when SPF or DKIM results do not match the domain shown in the From line.

Bulk senders are expected to have all three. DMARC can start in monitoring mode (p=none), which asks receivers to take no action. Begin by collecting reports, confirm that every legitimate sender passes, and tighten the policy in stages.

Most of the setup happens in the DNS settings of whoever manages your domain and in your email service's settings. Many services display the DKIM values you need to paste.

One-click unsubscribe

Promotional messages should let a recipient stop them with a single action. In practice that means unsubscribe information in the message headers, such as List-Unsubscribe, plus a clear unsubscribe link in the body. Requests are expected to be honored within two days.

Most email services build this in. If you run your own sending system, confirm the headers are present. Avoid flows that make people log in or explain why they are leaving.

The spam-rate guideline

Google offers a free tool, Postmaster Tools, that shows the share of your mail reported as spam. The published guidance is to stay below 0.10 percent and never reach 0.30 percent. At 0.10 percent, that is about one complaint per thousand messages.

The causes are usually familiar:

  • Writing to people who never agreed to hear from you
  • Mailing an old list after a long silence
  • Sending content or frequency that differs from what people signed up for
  • Hiding the unsubscribe link

These are less about email technology than about how a list is built and managed.

An audit you can run this week

  1. Confirm that SPF and DKIM are set for the domain you send from.
  2. Check for a DMARC record and add a monitoring-only one if missing.
  3. Send a test to yourself and read the headers to see whether authentication passed.
  4. Click your own unsubscribe link and confirm it works in one step.
  5. After each send, record unsubscribes and complaints.

Rules about consent and required content in marketing email differ by country. If you are unsure which apply to you, ask a professional.

Passing authentication does not by itself ensure delivery. Mailbox providers also look at how recipients react to your messages, such as opens, deletions, and spam reports. In the end, the quality of your list and the value of each message decide how well your mail arrives. Technical setup is the floor, not the ceiling, and it costs little to put in place.

For a small business, promising frequency and content at sign-up also helps keep complaints down. If the form says "two emails a month with product news and tips," what arrives matches what the subscriber expected, and fewer people feel the need to press the spam button.

What to do next

  1. Write down the domain and the service you use to send.
  2. Check SPF, DKIM, and DMARC status by following your email service's instructions.
  3. Send yourself a test and verify authentication and unsubscribe behavior.
  4. For any list you have not mailed in six months, send one confirmation message and remove people who do not respond.
  5. Keep a table of unsubscribes and complaints for each send.