Google & Yahoo Sender Requirements: The Checklist Every Sender Needs

In early 2024, Google and Yahoo rolled out the biggest change to email deliverability in years: a set of mandatory requirements for anyone sending email at volume. Miss them and your messages don't just get filtered to spam — they get rejected outright. If you send newsletters, marketing, or transactional email to consumer inboxes, these rules apply to you.

Who has to comply

The strictest rules target bulk senders — broadly, anyone sending more than ~5,000 messages per day to Gmail or Yahoo addresses. But the core requirements (authentication, low spam complaints, honest sending) are best practice for every sender, and smaller senders are held to them too. Treat the full list as the baseline.

The requirements, in plain English

• Authenticate your email. Valid SPF, DKIM, and DMARC are now mandatory, not optional. If you're not sure yours are correct, start with our SPF, DKIM & DMARC guide.
• Publish a DMARC policy. Even a minimal p=none record satisfies the requirement, but it must exist.
• Align your domains. The domain in your "From" address should align with your SPF/DKIM domains.
• Offer one-click unsubscribe. Bulk senders must include a working list-unsubscribe header so recipients can opt out in one click.
• Keep spam complaints low. Stay under a 0.3% complaint rate (and ideally below 0.1%). Cross it and delivery degrades fast.
• Send wanted mail to valid addresses. Clean your lists and only email people who asked to hear from you.

What happens if you ignore them

This isn't theoretical. Non-compliant mail to Gmail and Yahoo gets bounced with errors, temporarily deferred, or routed straight to spam. Because the enforcement ramped up gradually, a lot of senders saw their numbers slowly erode without ever connecting it to these rules. If your delivery has slipped since 2024, this is the first place to look — along with the other reasons email lands in spam.

Confirm you're compliant in 30 seconds

The authentication side of compliance is easy to verify: run your domain through the free email checker to confirm SPF, DKIM, and DMARC all pass and that you're not blacklisted. The catch is that compliance isn't a one-time event — a broken record can drop you out of compliance overnight. Zeqo Mail monitors all of it daily, so you stay on the right side of Google's and Yahoo's rules without thinking about it.