Google and Yahoo Bulk Sender Requirements: A Practical Checklist
The short answer (what's causing it)
Gmail and Yahoo require senders — especially those sending around 5,000+ messages a day to their users, per Google's published guidance — to authenticate properly and make unsubscribing easy. Missing items lead to deferrals (421 4.7.x) or rejections (550 5.7.26).
Step-by-step fix
- SPF and DKIM pass for your sending domain.
- DMARC record published (minimum
p=none) and aligned with SPF or DKIM. - Valid forward and reverse DNS (PTR) for sending IPs; TLS for transmission.
- Marketing mail carries
List-UnsubscribeandList-Unsubscribe-Post: List-Unsubscribe=One-Clickheaders; unsubscribes honoured within 2 days. - Keep the spam rate reported in Google Postmaster Tools low (Google cites staying below 0.3%).
- Re-scan with the free tool after each change.
Record examples (replace example.co.uk with your domain)
_dmarc.example.co.uk. TXT "v=DMARC1; p=none; rua=mailto:[email protected]"
List-Unsubscribe: <https://example.co.uk/unsub?u=123>, <mailto:[email protected]>
List-Unsubscribe-Post: List-Unsubscribe=One-Click
Examples are illustrative templates, not values for your domain. Test changes at
p=none/ staging first.
Check yours free in seconds
Run the free 20-check SuperTool on your domain: no signup, no install, public DNS only. Relevant checks: SPF, DKIM, DMARC, Bulk mail, RBL.
Scan my domain free (20-check SuperTool) → £5 Website Launch Special Quick-Fix Pack →One-off download via PayPal guest checkout, no subscription. Packs contain DNS/config templates and scripts you run yourself.
Frequently Asked Questions
Do the rules apply if I send under 5,000 a day?
SPF or DKIM, PTR and low spam rates apply to all senders; the full set is mandatory for bulk senders.
Does transactional mail need one-click unsubscribe?
Google's guidance applies it to marketing/subscribed messages, not receipts or password resets.
Related FaultyPacket guides & tools
- Free 20-check SuperTool
- Zero-downtime DMARC p=reject, SPF & MTA-STS rollout
- DMARC RUA first-party reporting vs external SaaS
- Shopify, WooCommerce & WordPress email guide
Authorised use: only scan domains you own or are authorised to inspect. Results are point-in-time public DNS observations.