In a massive shift in email marketing regulations, back in early 2024, Google and Yahoo introduced strict sender requirements to combat spam and improve inbox security.
By now, these “new” rules have simply become the standard rules of the road. However, many businesses are still seeing their open rates dip or their emails land in spam because they haven’t fully maintained their technical compliance.
If your organisation’s email performance has stagnated in 2025, it’s time for a quick audit. Here is everything you need to know to keep your emails in the inbox.
TL;DR
The regulations enforced in 2024 are now strictly monitored. To stay out of the spam folder in 2025, your business must have authorised domains, a one-click unsubscribe function, and a spam complaint rate below 0.10%.
The 3 Pillars of Inbox Success
If your organisation sends more than 5,000 emails a day to Gmail or Yahoo addresses, these technical setups are mandatory.
(5,000 emails a day? That seems like a lot. But it’s not really. If you have a reasonably busy ecommerce website or use a CRM like Hubspot, you could be pushing out thousands of order confirmations, invoices, reminders, newsletters, and other emails without even realising it)
Even if you send fewer, they are highly recommended for professional deliverability.
1. Technical Authentication (The “Digital ID”)
You cannot send emails from a generic domain without proving you own it. You must have these three protocols active:
- SPF (Sender Policy Framework): An IP allowlist that defines who is authorised to send email on your behalf.
- DKIM (Domain Keys Identified Mail): A digital signature attached to your email that proves it hasn’t been tampered with.
- DMARC (Domain-based Message Authentication, Reporting, and Conformance): The instruction manual that tells Gmail/Yahoo what to do if an email fails the first two checks (e.g., “reject this email”).
2. The One-Click Unsubscribe
This was the biggest change for bulk senders. It is no longer enough to have a link in the footer that takes users to a preference centre.
- The Requirement: You must implement RFC 8058 (One-Click Unsubscribe) in the email header.
- What it looks like: A distinct “Unsubscribe” button/link appears at the very top of the email interface (next to the sender name) in Gmail/Yahoo apps.
- The Goal: It allows users to leave your list instantly. If you make it hard to leave, users will mark you as spam instead.
3. Strict Spam Thresholds
Google is transparent about the numbers now.
- The Target: Keep spam complaints below 0.10%.
- The Danger Zone: If you hit 0.30%, you risk having all your emails blocked or sent to spam folders automatically.
Beyond the Technical: Engagement Metrics
Technical compliance gets you into the inbox; engagement keeps you there. In 2025, mail providers are aggressive about filtering out “greymail” (emails that are technically safe but annoying).
- Clean Your Lists: If a subscriber hasn’t opened an email in 6 months, stop sending to them. They are hurting your organisation’s sender reputation.
- Mobile First: Over 60% of emails are opened on mobile. If your font is too small or your buttons are too close together, engagement drops.
- Double Opt-In: While not strictly “mandatory” by Google, using double opt-in ensures high-intent subscribers, which protects you from hitting that dreaded 0.30% spam rate.
FAQ: Troubleshooting Your Deliverability
Q: Our business is a small sender (under 5,000/day). Do we really need DMARC?
A: While the strict enforcement targeted bulk senders, using DMARC is now considered a basic trust signal. Without it, your domain is easier to spoof, and your emails look less trustworthy to filters. It is highly recommended for everyone.
Q: Our open rates dropped suddenly this month. What happened?
A: Check your spam complaint rate first. If you recently sent a campaign that annoyed people and your complaint rate spiked, Google may be penalising you temporarily. Pause sending, clean your list, and warm up your reputation slowly.
Q: How do I set up One-Click Unsubscribe?
A: Most modern Email Service Providers (ESPs) like Mailchimp, HubSpot, or Klaviyo handle this automatically in their headers now. If your business uses a custom SMTP server, you may need a developer to add the specific List-Unsubscribe-Post: List-Unsubscribe=One-Click header.
Q: Where can I check my reputation?
A: Google provides a free tool called Google Postmaster Tools. It will show you exactly what Google thinks of your domain reputation and spam rate.
