Gmail and Yahoo's bulk-sender rules in 2026: the current checklist
Gmail and Yahoo's 2024 bulk-sender requirements reshaped what's table stakes for anyone sending meaningful email volume, and the rules have held steady since, they're not a one-time hurdle you clear and forget. The threshold that triggers enforcement: roughly 5,000 messages a day to a single provider, though the safest approach is meeting these requirements regardless of your current volume, since growth can cross that line without a deliberate decision to.
The checklist
- Valid SPF and DKIM on your sending domain, aligned with the domain in your From address
- A published DMARC policy, at minimum p=none for monitoring, moving toward enforcement over time (see the separate post on the p=none to p=reject migration path)
- Spam complaint rate kept under 0.3% as measured in Google Postmaster Tools, sustained, not just on your best day
- One-click unsubscribe (the List-Unsubscribe header, RFC 8058 compliant) on any message a recipient could reasonably mark as unwanted, which in practice means most bulk and marketing mail, and arguably some transactional categories too if they're not strictly expected
- Messages formatted to actual internet standards, valid MIME formatting isn't optional at this point
Where transactional email fits
Pure, expected transactional mail (a password reset the user just requested) is lower-risk under these rules than bulk marketing, but SPF, DKIM, and DMARC alignment apply regardless of message type. The complaint-rate threshold matters here too: a transactional email a recipient didn't expect, or one that reads as promotional despite being labeled transactional, can generate complaints the same way marketing mail does.
What a provider handling this for you actually saves
Generating and monitoring SPF, DKIM, and DMARC records correctly, and catching a slow complaint-rate creep before it crosses 0.3%, is exactly the kind of ongoing maintenance that's easy to set up once and then forget to monitor. A typo in a TXT record or a slowly rising complaint rate that nobody's watching is how deliverability quietly degrades over months, not something that shows up as an obvious outage.