Back to blog
Guides & How-tos2026-03-15·10 min read

New Email Deliverability Rules for Gmail and Yahoo in 2025

By Ibrahim DemolCEO IBLeadUpdated March 15, 2026

The new email deliverability rules for Gmail and Yahoo came into effect on February 1, 2024. In 2025, they will be strengthened and apply to all mass senders — that is, from 5,000 emails sent per day. Ignoring these rules risks having your campaigns end up directly in spam or even being blocked before they reach their destination.

Here’s what you need to implement, without exception.


Why Gmail and Yahoo Changed the Rules

The volume of commercial emails has exploded. Inboxes are saturated. Gmail, Yahoo, and Microsoft have decided to act to protect their users — and their infrastructure.

These platforms together represent over 3 billion active email accounts worldwide. When they set a rule, it effectively applies to the entire email marketing market.

The message is clear: if you send in bulk without adhering to technical standards, your emails will not arrive. No negotiation.


A Requirement, Not a Recommendation

Every commercial email sent in bulk must include a clearly identifiable unsubscribe link. This is no longer just a best practice. It is a technical condition imposed by Gmail and Yahoo to accept your sends.

The link must be visible. Not hidden in a footer in 8-point gray on a white background. Not behind three clicks. Accessible in one click, directly from the email.

The Critical Threshold: 0.3% Spam Complaints

This is the number to remember. If your spam complaint rate exceeds 0.3%, your deliverability collapses. Your emails fall into spam. In the most severe cases, your domain is blocked.

For 10,000 emails sent, that means a maximum of 30 complaints. That’s few. Very few.

A functional unsubscribe link mechanically reduces this rate. A recipient who can easily unsubscribe does not click "Report as spam." It’s that simple.

Processing Unsubscribes: 2 Days Maximum

New for 2025: unsubscribe requests must be processed within a maximum of 2 days. This requirement goes further than the standard GDPR, which allows 30 days.

If someone unsubscribes on Monday, they should no longer receive your emails by Wednesday. Not the following week. Not at the next send.

Automate this process. Any manual management of unsubscribes is a source of errors and risks.


Rule #2: Email Authentication is Mandatory (SPF, DKIM, DMARC)

Three Protocols, One Function: Prove You Are You

Email authentication existed before 2024. It was recommended. Today, it is mandatory for all mass senders. Without properly configured SPF, DKIM, and DMARC, your emails will not arrive at Gmail or Yahoo.

These three protocols work together. Each plays a distinct role.

SPF — Sender Policy Framework

SPF defines which servers are allowed to send emails from your domain. It is added to your domain's DNS records.

In practical terms: if a spammer tries to send emails pretending to be you, the receiving server checks the SPF. If the sending IP is not on the authorized list, the email is rejected or marked as suspicious.

An SPF record looks like this:

v=spf1 include:_spf.google.com ~all

Adapt it according to your sending tool (Mailchimp, Brevo, Lemlist, etc.).

DKIM — DomainKeys Identified Mail

DKIM adds a cryptographic signature to every email you send. This signature is verifiable by the receiving server.

It guarantees two things: the email indeed comes from your domain, and it has not been altered in transit. It is protection against interception and forgery.

Configuration is done via your sending tool, which generates a public key to add to your DNS.

DMARC — Domain-based Message Authentication, Reporting & Conformance

DMARC relies on SPF and DKIM. It defines what the receiving server should do if an email fails the checks: ignore it, quarantine it, or reject it.

It also generates reports that you receive by email. These reports indicate how many emails pass or fail authentication, and from which servers.

A minimal DMARC record:

v=DMARC1; p=none; rua=mailto:[email protected]

Start with p=none to observe without blocking. Then move to p=quarantine and finally p=reject once you are sure of your configuration.

From Recommendation to Requirement: What Changes

Before 2024, many senders sent without SPF, DKIM, or DMARC. It worked, more or less. Gmail and Yahoo tolerated it.

That is no longer the case. The platforms systematically check these protocols. An email without correct authentication is treated as suspicious by default.


Key 2025 Clarifications

TLS Connection Mandatory Between Servers

Gmail now requires that the connection between mail servers be encrypted via TLS (Transport Layer Security). This is an additional layer of security that adds to SPF, DKIM, and DMARC.

In practice, if you use a professional sending tool (Brevo, Mailchimp, Lemlist, Instantly, etc.), this configuration is generally managed automatically. Still, check with your provider.

Marketing Emails vs Transactional Emails

The new rules primarily target marketing emails: newsletters, prospecting campaigns, promotions.

Transactional emails — order confirmations, password resets, account notifications — are generally excluded. Exception: if a transactional email contains promotional content, it falls under the rules.

Separate your sending streams. Use distinct domains or subdomains for transactional and marketing. This is a good practice that protects your overall reputation.

Impact on Subdomains

If your main domain exceeds the 0.3% complaint threshold, the impact can spread to all your subdomains. A problem on newsletter.yourdomain.com can affect mail.yourdomain.com.

Monitor your metrics by domain and subdomain. Isolate at-risk streams.

Google Workspace: A Notable Exception

Professional emails sent via Google Workspace (formerly G Suite) are not subject to these restrictions. This exception applies to individual or small volume sends via the professional Gmail interface.

As soon as you use a mass sending tool — even with a Google Workspace address — the rules apply.


How to Measure Your Email Deliverability

Google Postmaster Tools

Google provides Google Postmaster Tools, a free tool that gives you access to your deliverability metrics at Gmail: spam rate, domain reputation, IP reputation, authentication errors.

Log in with your Google account, add your domain, and verify it via a DNS record. The data appears as soon as you send a sufficient volume to Gmail addresses.

This is the reference tool for tracking your sender reputation at Gmail.

Yahoo Feedback Loop

Yahoo offers a feedback loop that alerts you to spam complaints from its users. Sign up for the Yahoo Sender Hub program to access this data.

These two tools together give you a clear view of your deliverability on the two main platforms.

A Good Deliverability Rate: Between 95% and 99%

A healthy deliverability rate is between 95% and 99%. Below 95%, there is a problem to identify: poorly qualified list, incorrect authentication, degraded reputation.

Also monitor your bounce rate. A hard bounce rate above 2% is a warning sign. Clean your lists regularly.


The Most Common Mistakes

Sending without verifying email addresses. A list with 10% invalid addresses generates mass bounces and destroys your reputation. Verify your addresses before each campaign with a validation tool.

Buying email lists. Contacts who do not know you click "spam." Your complaint rate rises. Your deliverability drops. It’s mechanical.

Ignoring unsubscribes. Continuing to send to someone who has unsubscribed guarantees a spam complaint. And now, it’s also a violation of Gmail/Yahoo rules.

Configuring DMARC in p=reject without checking SPF and DKIM. If your SPF or DKIM is misconfigured and DMARC is in reject mode, you block your own emails. Always start with p=none.

Sending from a brand new domain. New domains have no reputation. Gmail and Yahoo are wary. Do a gradual warm-up: start with 50 emails/day, double each week.


IBLead: Building Compliant Email Lists for Your Prospecting

If you are doing local B2B prospecting — artisans, merchants, liberal professions, SMEs — the quality of your starting list directly determines your deliverability.

IBLead indexes over 50M businesses from Google Maps in 37 countries. Each listing contains 50+ data fields: name, address, phone, email extracted from the website, Google rating, number of reviews, detected technologies.

You filter by city, postal code, category, Google rating, number of reviews. You export to CSV in seconds. The database is updated weekly — everything is already indexed, the export is instantaneous.

A useful filter: you can target only listings that have a provided email address. You only pay for actionable contacts. Fewer bounces, better sender reputation.

IBLead also detects 160+ web technologies per listing — CMS, analytics tools, advertising pixels, payment solutions. You can target companies using WordPress, Shopify, or those that do not yet have a Facebook pixel. This is a level of targeting you won’t find elsewhere.

For €44, you export 10,000 qualified contacts — that’s €0.004 per lead. The CSV imports directly into Lemlist, Instantly, Brevo, or any sending tool.

free credits — 200 credits included


Summary: Key Points to Remember

Rule Detail
Spam Complaint Rate Must not exceed 0.3%
Unsubscribe Link Mandatory, visible, 1 click
Unsubscribe Processing 2 days maximum
SPF Mandatory in DNS
DKIM Mandatory cryptographic signature
DMARC Mandatory processing policy
TLS Connection Mandatory encryption between servers
Application Threshold From 5,000 emails/day

These rules are not optional. They apply from today, for any sender exceeding 5,000 emails per day to Gmail or Yahoo addresses.


FAQ — Email Deliverability 2025

What is a good email deliverability rate?

A healthy rate is between 95% and 99%. Below 95%, identify the cause: poorly qualified list, authentication issue, or degraded reputation. Use Google Postmaster Tools to diagnose.

Do the new rules apply to all emails?

No. They primarily target mass senders (more than 5,000 emails/day) and marketing emails. Transactional emails are generally excluded unless they contain promotional content.

What happens if I exceed 0.3% spam complaints?

Your emails start being filtered as spam. If the rate remains high, your domain may be blocked by Gmail or Yahoo. Recovering a degraded reputation takes several weeks.

How to configure DMARC without blocking my emails?

Start with p=none to observe without impact. Analyze DMARC reports for 2 to 4 weeks. Then move to p=quarantine, and finally to p=reject once SPF and DKIM are correctly configured.

Are emails sent via Google Workspace affected?

Individual sends via Google Workspace are excluded from the new rules. But if you use a mass sending tool connected to your Workspace address, the rules apply.

How to check if my authentication is correct?

Use tools like MXToolbox or Mail-Tester to check your SPF, DKIM, and DMARC records. Google Postmaster Tools will then indicate if your emails pass authentication at Gmail.

Ready to get started?

Access every Google Maps business, enriched with emails and legal data.

Try IBLead free