Gmail, Yahoo & Outlook Sender Requirements for 2026

In February 2024, Google and Yahoo began enforcing new requirements for anyone sending email to their users. In May 2025, Microsoft followed with similar rules for Outlook.com, Hotmail.com and Live.com addresses. Between them, those providers handle a huge share of the world's inboxes, so their rules are effectively the rules for email. If you send cold outreach, here is what they require and how to comply.

What every sender needs

These apply however much you send:

• SPF or DKIM authentication for your sending domain.
• Valid forward and reverse DNS records for your sending servers.
• A TLS connection for transmitting email.
• A spam complaint rate below 0.3% — and Google recommends staying under 0.1%.
• Messages formatted to the Internet Message Format standard (RFC 5322).

What high-volume senders need

Google treats anyone sending close to 5,000 or more messages a day to personal Gmail accounts as a bulk sender, and says that classification doesn't expire. Microsoft uses the same 5,000-a-day threshold for its consumer mailboxes. Bulk senders additionally need:

• Both SPF and DKIM, not just one of them.
• A DMARC record with a policy of at least p=none, and a From domain aligned with SPF or DKIM.
• One-click unsubscribe (the List-Unsubscribe and List-Unsubscribe-Post headers) on marketing and subscribed messages, plus a clearly visible unsubscribe link in the body.
• Unsubscribe requests honoured within two days.

Why this matters even if you send far less

Most cold email programs send well below 5,000 emails a day, so some bulk-sender rules don't strictly apply. Treat them as the standard anyway. Mailbox providers filter on reputation and engagement, not just rule checks, and a sender that meets the bulk requirements looks more trustworthy than one that doesn't. Cold email also draws more complaints than opted-in mail, which makes the complaint threshold the rule most likely to hurt you.

The cold email deliverability checklist

Domains and authentication

• Use one or more dedicated sending domains for outreach, separate from your main company domain.
• Publish exactly one SPF record per domain, including every service that sends on its behalf.
• Enable DKIM signing in your email provider and publish the key.
• Publish a DMARC record. Start at p=none with reporting, then tighten to quarantine once you're confident legitimate mail passes.
• Point the sending domain's website at your main site, so it doesn't look like a throwaway.

Inboxes and volume

• Warm up every new inbox for two to three weeks before it sends cold email.
• Keep each inbox to a conservative daily volume — 30 to 50 cold emails is a sensible ceiling.
• Scale by adding inboxes and rotating between them, not by pushing one inbox harder.
• Spread sends across the working day instead of sending in bursts.

Lists

• Verify addresses before importing a list.
• Keep bounce rates low — a high bounce rate is one of the clearest signals of a poor-quality sender.
• Suppress anyone who has bounced or unsubscribed across every campaign, not just the one they came from.

Content

• Write short, plain emails with at most one link in the first touch.
• Avoid link shorteners, large images and attachments.
• Include a clear, working way to opt out in every email.
• Make every email relevant enough that nobody reaches for the spam button — that's the complaint rate that counts.

Monitoring

• Run a spam test before launching a new campaign or domain.
• If you send enough volume to Gmail for data to appear, watch Google Postmaster Tools for domain reputation and spam rate.
• Pause and investigate straight away if bounces spike or reply rates drop off a cliff.

How Swyftreach helps

• Warmup Engine — a progressive 21-day ramp for every connected inbox (Starter and above).
• Spam Score checker — sends a real email and grades SPF, DKIM, DMARC, blacklists and content (Growth and above).
• Sender rotation with per-account caps — volume spread across inboxes with daily and hourly limits.
• Unsubscribe handling — campaign emails carry an unsubscribe link and one-click List-Unsubscribe headers by default, and unsubscribes and bounces are suppressed automatically.
• Global bounce list — addresses known to bounce are skipped when you import.

How to check your spam score in Swyftreach