Large mailbox providers now require authentication, low complaints and easy unsubscribes from high-volume senders.
Key points
- Gmail counts a bulk sender as one that sends close to 5,000 or more messages to personal Gmail accounts in 24 hours, with all subdomains counted under the primary domain [2].
- Bulk senders must publish SPF (Sender Policy Framework), DKIM (DomainKeys Identified Mail) and DMARC (at least p=none), with the From domain aligned to SPF or DKIM [1][3].
- All senders must keep the spam rate below 0.3 percent, and Google recommends staying under 0.1 percent [1][3].
- Marketing and subscribed messages need One-Click Unsubscribe under RFC 8058, and requests should be processed within about 2 days [1][3].
- Microsoft began enforcing SPF, DKIM and DMARC for senders of more than 5,000 messages a day to Outlook.com addresses in May 2025 [4].
- Google says it began ramping up enforcement on non-compliant traffic in November 2025 [2].
What the rules require
Google and Yahoo announced aligned rules in late 2023 that took effect in February 2024. For all senders, Gmail requires SPF (Sender Policy Framework) or DKIM (DomainKeys Identified Mail), valid forward and Reverse DNS (PTR Record) for sending IPs, TLS for transmission, RFC 5322 formatting and a spam rate below 0.3 percent [1]. Bulk senders must also set up both SPF and DKIM, publish a DMARC record, achieve Domain Alignment between the From header and SPF or DKIM, and support One-Click Unsubscribe for marketing and subscribed messages [1]. Yahoo's Sender Hub lists the same core items, including a DMARC policy of at least p=none and honoring unsubscribes within 2 days [3]. Microsoft added comparable authentication rules for Outlook.com, Hotmail.com and Live.com in 2025 [4]. The unsubscribe rule targets marketing and subscribed mail, so transactional messages such as password resets are not expected to carry it, and BIMI logos are optional extras built on the same DMARC setup.
How the 5,000 threshold is counted
Gmail's FAQ defines a bulk sender as anyone sending close to 5,000 or more messages to personal Gmail accounts within 24 hours, and it counts all mail from the same primary domain together [2]. Sending 2,500 messages from a root domain and 2,500 from a subdomain therefore adds up to 5,000. Google also treats bulk sender status as permanent once a domain has reached it. Microsoft uses the same 5,000-a-day figure for Outlook.com [4], while Yahoo does not publish a numeric threshold. Google states that the guidelines and its enforcement apply only to mail sent to personal Gmail accounts, not to Google Workspace accounts [2]. For Cold Email teams spreading volume across a Secondary Sending Domain or several mailboxes, the safest reading is to meet the bulk rules everywhere, since authentication and low complaint rates help Inbox Placement at any volume.
Meeting the requirements
Most of the work is DNS and monitoring. Publish SPF and DKIM for every sending domain, add a DMARC record, confirm alignment, and check results in Google Postmaster Tools, whose Compliance status dashboard reports against these rules. Keep complaint rates low by targeting carefully and offering an easy Opt-Out, and watch any Feedback Loop (FBL) data a provider offers. These mailbox rules sit alongside legal duties, such as the US Physical Address Requirement for commercial email. Senders that fail now see temporary 4xx deferrals or 5xx rejections; Gmail's FAQ says enforcement on non-compliant traffic increased from November 2025 [2]. PineLead sends from your own connected mailbox, so your domain's authentication records apply to every message, and a daily send limit keeps each mailbox's volume steady rather than spiking.
Related terms
Outreach without the busywork.
PineLead finds new B2B prospects every day, qualifies them against your criteria and writes the first email in your voice. You approve — PineLead sends.
Start free with 100 credits →