If you send more than a handful of emails a day, you've probably heard secondhand that "Gmail and Yahoo changed the rules." They did — and as of November 2025, both providers are actively enforcing those rules, rejecting non-compliant mail rather than just filtering it. Here's what the requirements actually are, who they apply to, and where list hygiene fits into staying compliant.

What Changed, and When

Starting in 2024, Google and Yahoo introduced a shared set of requirements for anyone sending high volumes of mail to their users. The requirements were rolled out gradually, and enforcement tightened over time — by November 2025, both providers were actively rejecting messages that failed authentication checks or came from senders with excessive spam complaint rates, rather than simply routing them to spam.

Who This Applies To

The requirements are aimed specifically at bulk senders — generally defined as anyone sending more than 5,000 messages per day to Gmail or Yahoo addresses. If you're sending at lower volume, the requirements aren't strictly enforced against you yet, but the underlying practices (authentication, low complaint rates, easy unsubscribes) are worth adopting regardless, since they're simply good sending hygiene.

The Requirements

Authentication: SPF, DKIM, and DMARC

Bulk senders must have valid SPF and DKIM records, and must publish a DMARC policy for their sending domain. This isn't new advice — authentication has been a best practice for years — but it's now a hard requirement for bulk mail to be accepted at all, not just a factor that helps deliverability at the margins.

A Spam Complaint Rate Below the Threshold

Google and Yahoo's guidelines set a spam complaint rate threshold of 0.3% for bulk senders, and both providers recommend staying well below that — under 0.1% — rather than treating 0.3% as a safe target. Complaint rate is calculated based on how often recipients mark your mail as spam, and it's tracked closely enough that crossing the threshold has real, fast consequences for inbox placement.

One-Click Unsubscribe

Bulk senders must support one-click unsubscribe (via the List-Unsubscribe and List-Unsubscribe-Post email headers), and honor unsubscribe requests within two days. Making it hard to opt out doesn't just annoy recipients — it directly drives up spam complaints, since marking an email as spam is often faster for a recipient than hunting for an unsubscribe link.

What Happens If You Don't Comply

Non-compliant bulk senders face a range of consequences, from messages being routed to spam to outright rejection at the server level. Because enforcement is active rather than advisory, the cost of non-compliance is no longer just "worse deliverability" — it can mean mail doesn't get accepted at all.

How List Hygiene Fits Into Staying Compliant

Authentication and unsubscribe headers are configuration you set up once. Spam complaint rate is different — it's driven by who you're actually emailing and how relevant your mail is to them. This is where list quality has a direct, measurable effect on compliance:

  • Recipients who no longer recognize your brand (because they signed up long ago and disengaged) are more likely to mark mail as spam than to unsubscribe.
  • Invalid and disposable addresses don't drive complaints directly, but the bounces they cause damage the same reputation signals inbox providers use alongside complaint rate.
  • Verifying new signups and re-checking existing lists keeps your recipient base to people who actually opted in and are still reachable — the population least likely to complain.

None of this replaces authentication or proper unsubscribe handling — those are separate, mandatory pieces. But a clean, verified list reduces the two biggest levers you actually control: how many people never wanted your mail in the first place, and how many addresses are stale enough to be flagged as suspicious sending behavior.

A Practical Checklist

  1. Confirm SPF, DKIM, and a published DMARC policy are in place for your sending domain.
  2. Add one-click unsubscribe headers and confirm requests are honored within two days.
  3. Monitor your spam complaint rate directly if your ESP exposes it, and treat anything approaching 0.1% as a warning sign, not just 0.3%.
  4. Verify new signups before they enter your sending list.
  5. Re-verify your existing list periodically, and segment out long-inactive recipients who are more likely to complain than engage.

For the fundamentals behind inbox placement generally, see what determines whether your email reaches the inbox, and for how these requirements connect to the broader 2025 deliverability shift, see email deliverability in 2025. Zuhal verifies your list before you send — connect a platform via the Integrations page or check addresses in real time with the REST API.

Check your list’s compliance risk — 100 free credits →

Ready to clean your email list?

Verify up to 100 emails free — no credit card required. Bulk lists, real-time API, instant results.

Get 100 Free Credits →