MarkRelayGet MarkRelay

Gmail, Yahoo and Outlook bulk sender requirements: SPF, DKIM, DMARC and one-click unsubscribe

The rules the three largest consumer mailbox providers set for senders, from their own documentation, side by side, with what each failure looks like.

Published by
MarkRelay Research
Updated
Sources
4 primary sources, linked below

Summary

Since February 2024, Gmail and Yahoo require every sender to authenticate with SPF or DKIM, keep valid forward and reverse DNS for sending IPs, and keep spam complaints under 0.3%. Senders of about 5,000 or more messages a day must also pass SPF and DKIM, publish a DMARC policy (p=none is enough) aligned with the From domain, and offer one-click unsubscribe, which Yahoo says must be honored within 2 days. Outlook.com applies the same authentication bar to domains that send it 5,000 or more messages and rejects failing mail with 550 5.7.515. MarkRelay sends through Cloudflare Email Sending, which writes the SPF and DKIM records for your domain and keeps DMARC alignment, and its broadcasts carry an unsubscribe link and a suppression list.

Key findings

  1. 1Every sender to Gmail and Yahoo: SPF or DKIM, valid forward and reverse DNS for sending IPs, spam rate below 0.3%, messages formatted to RFC 5322.
  2. 2Bulk senders (about 5,000+ a day): SPF and DKIM, a DMARC record (p=none is enough), From domain aligned with SPF or DKIM, one-click unsubscribe plus a visible link.
  3. 3Yahoo asks bulk senders to honor unsubscribes within 2 days and recommends the RFC 8058 POST method for one-click unsubscribe.
  4. 4Outlook.com: domains sending 5,000+ messages must pass SPF and DKIM and DMARC with alignment; failing mail is rejected with "550 5.7.515 Access denied, sending domain … does not meet the required authentication level."
  5. 5Gmail also recommends keeping spam rates below 0.1%; 0.3% is the line not to cross.
  6. 6Gmail rejects mail over a sender's rate limit with SMTP error 4.7.28, and says it does not accept allowlist requests from email providers.

Questions this report answers

Asked by real people, quoted as they wrote them.

“Gmail sends my mail to spam despite perfect SPF/DKIM/DMARC. Postmaster Tools shows 0% spam. Escalation rejected. What now?”

r/sysadmin, 121 comments

Authentication is the entry ticket, not a guarantee of the inbox. Gmail's requirements also cover valid forward and reverse DNS for sending IPs, TLS, RFC 5322 formatting, and for bulk mail one-click unsubscribe; its guidance asks senders to stay under 0.1% spam and never reach 0.3%.

“SPF, DKIM, DMARC configs are needed for email seucirty or just deliverability ?”

r/sysadmin, 57 comments

Both, and now they are required: Gmail and Yahoo require SPF or DKIM from every sender and all three with alignment from bulk senders; Outlook.com rejects high-volume mail that fails them.

“What's the real-world difference between DMARC p=quarantine and p=reject?”

r/sysadmin, 31 comments

For the mailbox providers' sender rules it makes no difference: Gmail, Yahoo and Outlook.com accept p=none, as long as a DMARC record exists and messages pass with alignment. The policy only tells receivers what to do with mail that fails.

“Why is confirmation email landing in spam?”

r/webdev, 39 comments

Start with the checks every sender must pass: SPF or DKIM for the sending domain, valid forward and reverse DNS for the sending IP, and TLS. Then check the service the app sends through: Microsoft's guidance is that a third-party sender must use your domain in the envelope sender, sign with your DKIM key and be included in your SPF record.

“How to send emails to the user's inbox instead of promotions tab?”

r/Emailmarketing, 26 comments

Gmail's sender guidelines do not cover which tab a message lands in. They cover what decides whether it is delivered at all: authentication, a spam rate under 0.3%, and one-click unsubscribe for marketing mail. Gmail also says it does not accept allowlist requests.

“emails going to spam”

Google and Bing search suggestion

Check the message headers for SPF, DKIM and DMARC results, then the spam rate in Gmail Postmaster Tools; Gmail and Yahoo both set 0.3% as the limit.

Requirements side by side

All senders: SPF or DKIM

Gmail
Yes
Yahoo
Yes
Outlook.com
Not stated

All senders: forward and reverse DNS for sending IPs

Gmail
Yes
Yahoo
Yes
Outlook.com
Not stated

All senders: spam rate below 0.3%

Gmail
Yes
Yahoo
Yes
Outlook.com
Not stated

Bulk threshold

Gmail
5,000+ a day to Gmail accounts
Yahoo
Bulk senders
Outlook.com
5,000+ messages from one From domain

Bulk: SPF and DKIM both

Gmail
Yes
Yahoo
Yes
Outlook.com
Yes

Bulk: DMARC record, p=none accepted

Gmail
Yes
Yahoo
Yes
Outlook.com
Yes

Bulk: From aligned with SPF or DKIM

Gmail
Yes
Yahoo
Yes
Outlook.com
Yes

Bulk: one-click unsubscribe

Gmail
Yes
Yahoo
Yes, honored within 2 days
Outlook.com
Not stated

In force since

Gmail
February 1, 2024
Yahoo
February 2024
Outlook.com
Not stated

What failing mail gets

Gmail
Not stated
Yahoo
Not stated
Outlook.com
Rejected: 550 5.7.515

Not stated means the provider's own page does not say. Source: Gmail sender guidelines, Yahoo sender best practices, Outlook.com 550 5.7.515.

How MarkRelay meets the bulk sender rules

SPF and DKIM for your domain

MarkRelay
Cloudflare Email Sending writes the records when the domain is onboarded

DMARC alignment

MarkRelay
Cloudflare Email Service keeps alignment; publish a DMARC record (p=none is enough)

Unsubscribe in broadcasts

MarkRelay
One-click unsubscribe and a visible link

Not mailing unsubscribed or bounced addresses

MarkRelay
Suppression list built in

Spam rate below 0.3%

MarkRelay
Yours to watch in Gmail Postmaster Tools

Source: Cloudflare Email Service troubleshooting.

What each failure looks like

Outlook.com is the most explicit: high-volume mail from a domain that fails is rejected with 550 5.7.515 and the note that the domain "does not meet the required authentication level". Microsoft's fix list: check SPF, DKIM and DMARC results in the headers, make sure the DKIM signature uses your From domain, and make sure any third-party sender uses your domain in the envelope sender, signs with your DKIM key and is in your SPF record.

Gmail and Yahoo describe requirements rather than error codes; mail that misses them is more likely to be filtered or rate-limited.

Third-party senders are the usual gap

Microsoft's checklist for 550 5.7.515 singles out third-party senders: if a service sends mail as your domain, it must use your domain in the envelope sender, sign with your DKIM key and be included in your SPF record. Gmail's and Yahoo's alignment rule asks for the same thing: the From domain must match the SPF or the DKIM domain.

Where MarkRelay fits

A good fit when

  • Sending from your own domain through Cloudflare Email Sending, which writes the SPF and DKIM records and keeps DMARC alignment.
  • Broadcasts with an unsubscribe link and a suppression list, so unsubscribed and bounced addresses are not mailed again.

Look elsewhere when

  • Monitoring your Gmail Postmaster Tools spam rate: that stays with you.
  • Dedicated IPs or an IP warm-up service: MarkRelay sends through Cloudflare's infrastructure.

Common questions

Do I need DMARC to send to Gmail?

If you send about 5,000 or more messages a day to Gmail accounts, yes: a DMARC record, at least p=none, with the From domain aligned with SPF or DKIM. Smaller senders need SPF or DKIM.

What does 550 5.7.515 mean?

Outlook.com rejected the message because the sending domain does not meet its authentication level for high-volume senders: SPF and DKIM must pass and DMARC must pass with alignment.

Sources and method

  1. Gmail sender guidelines (support.google.com/a/answer/81126)
  2. Yahoo sender best practices (senders.yahooinc.com/best-practices/)
  3. Outlook.com 550 5.7.515 (support.microsoft.com/en-us/outlook/fix-ndr-error-550-5-7-515-in-outlook-com)
  4. Cloudflare Email Routing troubleshooting (developers.cloudflare.com/email-routing/troubleshooting/)

Facts are taken from each vendor's own pricing pages, documentation or terms as of the updated date above; prices are in US dollars per month unless stated. Cost comparisons apply each vendor's published rates to the same volume. MarkRelay is not affiliated with Google, Yahoo or Microsoft;MarkRelay sells a self-hosted email app, which this page mentions where it fits. Spotted something outdated? Tell us.

Revisions

  • : First published; every fact checked on the vendor's own pages.

Related guides

More research