October 26, 2026 · LegalBriefsUSA
Google Bulk Sender Requirements 2026: The 5,000-a-Day Line, the 9 Rules Gmail Enforces, and What Applies to B2B Outbound
In 2026, Google treats any domain that sends close to 5,000 or more messages to personal Gmail accounts in a 24-hour period as a bulk sender — and that label sticks permanently once you cross it. Bulk senders must authenticate with SPF and DKIM, publish DMARC, align the From domain, keep spam reports under 0.3%, and offer one-click unsubscribe on marketing mail. Since November 2025, Gmail has been rejecting non-compliant messages outright.
Most ranking pages on this topic are written by email software vendors as if every sender ran a newsletter. A B2B outbound program sends low volume per domain, and most of it goes to business addresses. This guide sits in our cold email deliverability hub. It sorts the requirements into what applies to every sender, what kicks in only at 5,000 a day, and what actually binds a cold email program. Every external figure is linked and dated at the end.
Key takeaways
- The bulk threshold is close to 5,000 messages to personal Gmail accounts in 24 hours, counted across the primary domain and every one of its subdomains.
- Bulk status is permanent. Once a domain hits the line, it stays a bulk sender even if volume later falls.
- Six rules apply to every sender to personal Gmail at any volume: SPF or DKIM, valid forward and reverse DNS, TLS, RFC 5322 formatting, no Gmail From impersonation, and a spam rate kept under 0.3%.
- Bulk senders must add both SPF and DKIM, DMARC at p=none or stronger, From domain alignment, and one-click unsubscribe with a 48-hour honoring window.
- Google says these requirements apply only to mail sent to personal Gmail accounts, not to Google Workspace recipients.
- A cold domain that sends 75 messages a day would need roughly 67 times that volume to personal Gmail before it becomes a bulk sender. The real risk is the subdomain rule, not the cold domains themselves.
Who counts as a bulk sender under Google’s rules?
A sender that sends close to 5,000 or more messages to personal Gmail accounts within 24 hours. Google counts every message from the same primary domain toward that figure, so subdomain mail is added together. Google’s own example: 2,500 messages from solarmora.com plus 2,500 from promotions.solarmora.com count as 5,000 from solarmora.com.
Three details matter more than the bare number.
- Only personal Gmail recipients count. Mail to Google Workspace addresses, Outlook, Yahoo, or anything else sits outside the 5,000.
- The domain is the unit — not the inbox or the IP. Ten inboxes on one domain still count as one sender. Ten subdomains of one brand still count as one sender.
- The status never expires. Google’s FAQ says senders who reach the threshold once “are permanently considered bulk senders,” and changing sending practices will not remove it.
What does Google require from every sender, at any volume?
Six things, in force since 1 February 2024, for anyone sending to personal Gmail accounts. They are the floor: a cold email domain at 50 messages a day is held to them exactly as a retailer is.
- SPF or DKIM authentication on each sending domain.
- Valid forward and reverse DNS (PTR) records for the sending domains or IPs.
- A TLS connection for transmitting mail. Google added this to the requirements in December 2023.
- A user-reported spam rate in Postmaster Tools below 0.3%, with Google’s own target below 0.1%.
- Message formatting that follows RFC 5322, the Internet Message Format standard.
- No impersonation of Gmail From headers. Google says Gmail uses a DMARC quarantine enforcement policy, so spoofed gmail.com mail fails.
If you send through Google Workspace or Microsoft 365, items 2 and 3 are normally handled by the provider. Items 1, 4, and 5 are on you, and item 4 is the one cold programs fail. Our guide to the Gmail 0.3 percent spam rate shows why: at 75 inboxed messages a day, a single complaint is already 1.33%.
What do bulk senders have to add?
Four things sit on top of that floor: both SPF and DKIM rather than either one, a published DMARC record with at least p=none, From domain alignment, and one-click unsubscribe on marketing and subscribed messages. Google’s enforcement table lists nine requirement issues in all and splits them into two consequences.
| Requirement issue | Applies to | What Gmail does |
|---|---|---|
| From header domain not aligned with SPF or DKIM domain | Bulk senders | Temporary or permanent rejection, or spam folder |
| Not authenticated with SPF and DKIM | Bulk senders (all senders need one) | Temporary or permanent rejection, or spam folder |
| No valid forward and reverse DNS | All senders | Temporary or permanent rejection, or spam folder |
| Not sent over TLS | All senders | Temporary or permanent rejection, or spam folder |
| Not formatted to RFC 5322 | All senders | Temporary or permanent rejection, or spam folder |
| User-reported spam rate above 0.3% | All senders; mitigation rule is for bulk | Delivery support and mitigation unavailable |
| No DMARC record (p=none minimum) | Bulk senders | Delivery support and mitigation unavailable |
| No one-click unsubscribe on marketing or promotional mail | Bulk senders | Delivery support and mitigation unavailable |
| Unsubscribes not honored within 48 hours | Bulk senders | Delivery support and mitigation unavailable |
Drawn from Google’s Email sender guidelines and Email sender guidelines FAQ, checked 25 October 2026. Google’s rejection codes for these failures are 4.7.23 through 4.7.32 (temporary) and 5.7.25 through 5.7.30 (blocks).
The first five rows can bounce mail at the SMTP stage. The last four do not bounce mail on their own; they strip your ability to ask Google for help when placement falls.
On alignment, Google requires that for direct mail the organizational domain in the From header match either the SPF or the DKIM domain. Only one has to match, but Google recommends aligning both and says full alignment will likely become a requirement. Our SPF, DKIM and DMARC setup for cold email walks through records that align on both.
What changed in November 2025?
Enforcement got harder. Google’s FAQ says that starting November 2025, Gmail began “ramping up its enforcement on non-compliant traffic,” with temporary and permanent rejections for messages that fail the requirements. Before that, most failures meant spam-folder placement; now they can mean the message never arrives at all.
The rollout ran in stages. Requirements took effect in February 2024, when Google also stopped offering mitigation to non-compliant senders. Bulk senders above a 0.3% spam rate lost mitigation from June 2024 and regain it only after 7 consecutive days below the line. Senders that already had an unsubscribe link had until 1 June 2024 to add one-click unsubscribe. New domains that had not sent more than 5,000 a day to personal Gmail since 1 January 2024 were put on an accelerated timetable.
For a cold program, the change is visibility: a bounce code now names the requirement that failed, where spam placement said nothing.
Do the bulk sender rules apply to B2B cold email?
Mostly not, for two reasons Google states itself. The requirements and enforcement apply only to messages sent to personal Gmail accounts, not to Google Workspace recipients. And a typical cold email domain sends nowhere near 5,000 messages a day to anyone at all.
Run the numbers on a standard setup. Our planning figure in how many domains and inboxes cold email needs is about 25 sends per inbox per day and three inboxes per domain.
| Sending setup | Daily sends per primary domain | Share of 5,000 if every recipient were personal Gmail | Bulk sender? |
|---|---|---|---|
| One cold domain, 3 inboxes at 25 a day | 75 | 1.5% | No |
| 10 separate cold domains, 30 inboxes | 75 each (750 total) | 1.5% each | No, each domain counts on its own |
| 10 cold subdomains of one brand domain, 30 inboxes | 750, all counted to the brand | 15% | No, but it adds to the brand’s other mail |
| Brand domain sends a 4,500 newsletter plus the 750 above | 5,250 | 105% if all to Gmail | Yes, permanently, if personal Gmail recipients reach about 5,000 |
Our arithmetic follows Google’s definition: close to 5,000 messages to personal Gmail accounts in 24 hours, counted across a primary domain and its subdomains. Real B2B lists are mostly business addresses, so actual Gmail counts would be lower. Checked 25 October 2026.
The last row is the one that bites. Cold email sitting on subdomains of the brand domain pools its volume with the marketing team’s sends, and a single large campaign can make the brand domain a bulk sender permanently.
None of this means cold domains can ignore the rules. Every personal Gmail address in a list is held to the six all-sender requirements, and publishing DMARC with aligned SPF and DKIM costs nothing on a domain you already control.
Does cold email need one-click unsubscribe?
Under Google’s rules, only if the sender is a bulk sender and the message is marketing or subscribed mail. Google requires one-click unsubscribe through the List-Unsubscribe headers defined in RFC 8058, using a single HTTPS URL; a mailto link or a body link does not meet it. Transactional mail such as password resets is excluded.
Google adds a line that matters for outbound: the recipient, not the sender, decides what kind of message they received. A cold pitch reads as promotional to most people. So while a 75-a-day cold domain is not bound by the header requirement, adding a List-Unsubscribe header — or at least a plain opt-out line — gives recipients a way out that is not the spam button. That trade, a few unsubscribes to avoid complaints, protects the 0.3% spam rate that still applies at every volume.
How do Yahoo and Microsoft compare?
Yahoo’s rules track Google’s closely but never define a numeric bulk threshold. Microsoft set its own rule for domains sending more than 5,000 a day to Outlook.com accounts, effective 5 May 2025, and it is about authentication only.
| Rule | Gmail | Yahoo | Microsoft Outlook.com |
|---|---|---|---|
| Bulk threshold | Close to 5,000 a day to personal Gmail, permanent | Not defined | More than 5,000 a day to Outlook.com accounts |
| Authentication, all senders | SPF or DKIM | SPF or DKIM | Not specified below 5,000 |
| Authentication, bulk | SPF and DKIM, DMARC p=none minimum, aligned | SPF and DKIM, DMARC p=none minimum, must pass | SPF, DKIM and DMARC p=none minimum (p=reject recommended), aligned |
| Spam rate | Below 0.3%, target 0.1% | Below 0.3% | None published |
| One-click unsubscribe | Required on marketing and subscribed mail | Functioning List-Unsubscribe header | Clear, easy unsubscribe; no header rule stated |
| Honor unsubscribes | Within 48 hours | Within 2 days | Not specified |
| On failure | Rejection or spam folder; mitigation unavailable | Not specified | Junk folder, then rejection with 550 5.7.515 |
From Google’s Email sender guidelines and FAQ, Yahoo Sender Best Practices, and Microsoft’s Outlook.com postmaster policies, all checked 25 October 2026. Where a provider does not publish a figure, the cell says so.
A domain set up to pass Google’s bulk list passes all three. Our guide on which DMARC policy to use for cold email explains why p=none is right on sending domains and p=reject on the brand.
How LeadButton handles this
We send cold email from separate registered domains — never from subdomains of a client’s brand — so outbound volume cannot push the brand into permanent bulk status. Every sending domain gets SPF, DKIM, and an aligned DMARC record before its first message, which clears Google’s bulk checklist even though the domains run at a few dozen sends per inbox per day. We strip personal Gmail, Yahoo, and Outlook.com addresses from B2B lists, include a plain opt-out in every sequence, and stop a sequence on any reply. Launch is $1,500 a month for managed email outreach, Growth is $3,500 a month for email plus LinkedIn, and Scale is quoted for larger programs. The tiers are on the LeadButton pricing page.
If you are not sure whether your brand domain is already a bulk sender, book a call with LeadButton and we will check its records and sending pattern together.
Frequently asked questions
How many emails a day makes you a bulk sender for Gmail?
Close to 5,000 or more messages to personal Gmail accounts in a 24-hour period, counted across a primary domain and all of its subdomains. Once that line is reached, bulk status is permanent.
Do Google’s bulk sender rules apply to Google Workspace recipients?
No. Google’s FAQ says sender requirements and enforcement apply only to messages sent to personal Gmail accounts. Workspace users sending to personal Gmail must still meet them.
What DMARC policy does Google require for bulk senders?
A published DMARC record with at least p=none, plus a From domain aligned with either the SPF or the DKIM domain. Google recommends aligning both.
What happens if a bulk sender fails the requirements?
Authentication, DNS, TLS, and formatting failures can bring temporary or permanent rejections or spam placement. Spam rate, DMARC, and unsubscribe failures make delivery support and mitigation unavailable.
Can you stop being a bulk sender by sending less?
No. Google says senders who reach the threshold once are permanently considered bulk senders, and changing sending practices will not remove the status.
Sources
- Google, Email sender guidelines, checked 25 October 2026. Source for the all-sender and 5,000 a day checklists, the 1 February 2024 start date, the December 2023 TLS addition, the alignment rule and the one-click unsubscribe requirement.
- Google, Email sender guidelines FAQ, checked 25 October 2026. Source for the bulk sender definition, subdomain counting, permanent status, the enforcement table and rejection codes, the 48 hour unsubscribe window, RFC 8058 one-click unsubscribe, the transactional exclusion, the June 2024 and November 2025 enforcement steps, and the statement that requirements apply only to personal Gmail accounts.
- Yahoo, Sender Best Practices, checked 25 October 2026. Source for Yahoo’s all-sender and bulk requirements, the 0.3% threshold, the List-Unsubscribe header and the 2 day window.
- Microsoft Outlook.com, Policies, Practices, and Guidelines, checked 25 October 2026. Source for the more than 5,000 a day rule effective 5 May 2025, the SPF, DKIM and DMARC requirements, junk folder handling and the 550 5.7.515 rejection.
Leave a Reply