emailrules.today
Stop 4 of 8Week oneUnder one second

Bulk sender

Someone sending large volumes (providers often use ~5,000 messages/day to their users as a threshold).

Say it out loud

“Above five thousand a day to one provider, stricter rules apply. Most of us cross that line without noticing.”

Gmail, Yahoo and Microsoft publish extra requirements for high-volume senders to their consumer inboxes. The threshold is counted per day, to that one provider's users — not against your total list, and not per month. Below it you still need basic authentication; above it the requirements get specific and enforced.

5,000/day
Gmail personal accounts
Google, Email sender guidelines
5,000/day
Outlook consumer accounts
Microsoft, Outlook.com sender requirements
To scaleOne ordinary campaign against Gmail's threshold
94k
5k
  • 94,000 to Gmail, one Tuesday
  • 5k — Gmail's bulk threshold

Drawn to scale, which is the point: the threshold is so far left that most senders cross it without ever deciding to. The threshold is Google's; the volume is an example.

The arithmeticAre you one? Almost certainly.Example numbers
Your list180,000
of which Gmail addresses94,000(52%)

Gmail is typically half a consumer list. Count it separately, because the provider does.

One campaign, sent Tuesday94,000 to Gmail in a day
Gmail's threshold5,000/day

You crossed it at nineteen times over, on one ordinary send.

A 12,000-person list still crosses it in one send.

So does a 6,000-person list where most addresses are Gmail.

Per day, per provider. Not your list size, not your monthly total. This is the single most misread number in email.

Nobody's

Nothing to action — it changes a number or a risk you report.

What people get told

The claim. “We only have a few thousand subscribers, so bulk rules do not apply.”

Actually. The count is messages to one provider in one day. A single campaign to six thousand people, half of them on Gmail, is three thousand Gmail messages — under the line that day, over it the moment you send twice. Authentication is required of everyone regardless.

The dated rules behind this

A definition is not a citation. These are the pages with the primary source, the date it was published, and what to do about it.

See also

Where this sits

Stop 4, identity gets checked. The receiver works out whether the message really comes from who it says it does.

← BeforeTLSNext →Alignment

FAQ

Awkward questions

Who is this actually for?

People who ship email and are too busy to re-read every PDF: week-one marketers, lifecycle/CRM, deliverability, multi-country ops, DTC brands, agencies — on Klaviyo, Mailchimp, Braze, HubSpot, SFMC, or something else. Pick your tool and geos so product-specific pages only appear when they match. EU and UK are first-class filters. Not for people who sell tools about email and need a fake score to demo.

Why only ~40 rules? Isn’t that… thin?

On purpose. A wall of 400 undated “best practices” is how you look busy and still get burned. Every page needs a primary source we actually read. Thin and checkable beats fat and folklore. Europe, bulk inbox rules, measurement honesty, and protocol topics like BIMI/DMARC policy are on the shelf when we can cite them — not every Member State and not every vendor myth. Coverage map lists what we still refuse to invent.

Is this legal advice?

No. If it were, you’d have a billable hour and a longer PDF. This is a dated operator reference written by an email geek. Confirm anything high-stakes with counsel who knows your facts. Same for “will this make me compliant?” — no tool does that. Lawyers and judges do. We say what the sources say and what to do first on Monday.

Why no trust score out of 100?

Because we refuse to invent a number you can’t audit. Fake scores sell seed tests and panic. You get findings, dates, and links. If that feels less exciting than a red dial, good — you’re not the red-dial customer.

Why should I trust you more than my ESP’s blog?

ESPs sell seats. Seed-score vendors sell fear. AI invents citations when nobody watches. We sell nothing today — no pixels, no placement scores, no affiliate — so we can say when a tool is the problem. A human verifies, dates, and corrects in public. Tools may help draft; they do not ship unsourced claims. Check the primary links. Fail that test and leave.

Do I need an account?

No. Filters live in this browser and the URL. Share the link. That’s it. Accounts come later only if they earn it — not so we can nurture you about email.

I’m an agency. Where’s multi-client mode?

We tried a client-name CRM on the setup card. It made the product feel like work before it felt useful. Role filters + copy link + one-page brief (optional PDF title) is enough for now. Complexity comes back when the free shelf is habit, not before.

Is the quiet changelog a bug?

No. Quiet means nothing material moved. We don’t invent urgency so the homepage looks “alive.” Sticky risks still show what usually needs a person when the market is still.