Email Deliverability Myths: 6 Beliefs Gmail and Outlook Punish
Gmail and Outlook now reject mail that breaks their sender rules. Here are six email deliverability myths Indian marketers still believe, and a 10-minute audit to fix them tonight.

Gmail and Outlook now reject mail that breaks their sender rules. Here are six email deliverability myths Indian marketers still believe, and a 10-minute audit to fix them tonight.

01Google treats any domain that sends close to 5,000 messages a day to personal Gmail accounts as a bulk sender permanently, even if volume later drops.
02Gmail asks senders to keep spam complaints below 0.1% and removes mitigation eligibility above 0.3% until seven straight days back under it.
03Since 5 May 2025, Microsoft rejects unauthenticated mail from senders of 5,000 or more emails a day to Outlook.com, Hotmail and Live addresses with error 550 5.7.515.
04Apple Mail Privacy Protection loads tracking pixels in the background, so email open rates no longer prove that a list is engaged.
On 5 May 2025, Microsoft stopped junking unauthenticated bulk mail to Outlook.com and Hotmail addresses. It started bouncing it. Six months later Gmail began ramping up its own enforcement, with temporary and permanent rejections for senders who break its rules. Yet most email deliverability myths we hear from Indian D2C and B2B teams still date from 2022.
Here are six of them, what Google, Microsoft, Apple and India’s data protection rules actually say, and the 10-minute check that tells you which ones are costing you inbox placement right now.

Yes, partly, and probably more than you think. Google’s bulk sender rules kick in at close to 5,000 messages a day to personal Gmail accounts, counted across your primary domain. Cross that line once and you are a bulk sender permanently. Basic authentication rules apply to every sender regardless of volume.
Myth: “We only blast 4,000 people, so the February 2024 rules skip us.”
Reality: Google’s FAQ says bulk sender status “doesn’t have an expiration date.” If your Diwali sale went to 30,000 people in one day in 2024, you have been a bulk sender ever since, even if you now send 2,000 a week. And because volume counts at the primary domain, your newsletter tool, your Shopify order mails and your CRM sequences all add up.
The rule list for bulk senders: SPF and DKIM both passing, a DMARC record (p=none is the minimum), the From domain aligned with SPF or DKIM, one-click unsubscribe on marketing mail, and a spam rate kept below 0.3%.
Watch out: Google says new domains that weren’t sending 5,000 a day to Gmail before 1 January 2024 are on an “accelerated timetable” for enforcement. Spinning up a fresh domain to escape a bad reputation now gets you less patience, not more.
No. For marketing and promotional mail, Gmail wants one-click unsubscribe through the RFC 8058 List-Unsubscribe header, pointing to a single HTTPS URL. Google’s FAQ is explicit that a mailto address or a link in the email body doesn’t meet the requirement. Unsubscribes should be processed within 48 hours.
The header is what powers the “Unsubscribe” button Gmail shows next to the sender name. Neil Kumaran, Group Product Manager for Gmail Security and Trust, put the principle plainly when the rules were announced in October 2023: “It should take one click.”
Two details trip up Indian teams. First, transactional mail (OTPs, invoices, shipping updates) doesn’t need it, so don’t break those flows chasing compliance. Second, plenty of homegrown CRMs and older SMTP setups never added the header. Google says it won’t auto-reject mail without it, but missing the 48-hour window makes you ineligible for delivery support, and people who can’t leave easily press “Report spam” instead.
Gmail wants your spam rate below 0.1% and says it should never reach 0.3%. Above 0.3%, bulk senders lose eligibility for any delivery mitigation from Google, and they only regain it after seven consecutive days back under 0.3%. The rate is calculated daily and shown in Google Postmaster Tools.
Myth: “A 1% complaint rate is normal for a big sale blast.”
Reality: 1% is more than three times Gmail’s ceiling. Our maths below turns the percentages into the number of people who can click “Report spam” before you’re in trouble.
| Delivered to Gmail inboxes | Target (0.1%) | Hard ceiling (0.3%) |
|---|---|---|
| 25,000 | 25 complaints | 75 complaints |
| 1,00,000 | 100 complaints | 300 complaints |
| 5,00,000 | 500 complaints | 1,500 complaints |
These are simplified per-send figures; Postmaster Tools reports a daily rate. The lesson holds anyway. Picture a jewellery brand mailing its full 1 lakh Gmail list, including people who last opened in 2023, every day of Dhanteras week. It needs only 300 irritated people across a day to cross the line. The seven-day recovery period then swallows the rest of the festive sale.

It gets rejected outright. Since 5 May 2025, Microsoft requires domains sending 5,000 or more emails a day to Outlook.com, Hotmail.com and Live.com addresses to pass SPF and DKIM and publish a DMARC record of at least p=none, aligned with one of them. Failing mail bounces with error 550 5.7.515.
Myth: “Worst case, Outlook drops us in junk and a few people still find it.”
Reality: A rejection never reaches the mailbox, junk or otherwise. If your ESP’s bounce report shows “5.7.515 Access denied” against Hotmail and Outlook addresses, that’s the rule in action, not a list quality problem.
Microsoft is lighter elsewhere. Em Blitstein, Senior Content Marketing Manager at Sinch Mailgun, notes that Microsoft hasn’t explicitly required RFC 8058 one-click unsubscribe and sets no public spam-rate threshold. Build to Gmail’s standard and you clear both.
Authentication used to decide which folder you landed in. Now it decides whether you land at all.
Not as a measure of engagement. Apple’s Mail Privacy Protection downloads remote content, including tracking pixels, privately in the background and hides the reader’s IP address. So emails to Apple Mail users can register as “opened” whether or not a person read them. Opens are now a directional signal at best.
Myth: “Our 45% open rate proves the list is healthy, so we don’t need to prune it.”
Reality: Inflated opens hide the dormant subscribers most likely to complain or bounce. India skews Android, so the distortion is smaller here than in the US. Check your own split before assuming: most ESPs report opens by email client. A premium brand whose buyers mostly use iPhones may be flying blind.
Use clicks, site sessions and orders instead. Tag every campaign link with UTM parameters and judge it in GA4 (our GA4 setup guide covers the events). For list hygiene, define “active” as anyone who clicked or bought in the last 90 to 180 days, not anyone who “opened.”
Yes, because the consent you collect today is the consent you’ll have to defend later. India notified the Digital Personal Data Protection Rules, 2025 on 14 November 2025 with an 18-month phased compliance period, which runs to around May 2027. The Rules require every data fiduciary to issue a separate consent notice.
Myth: “DPDP is a 2027 problem. We’ll clean up the list then.”
Reality: Every subscriber you add this festive season through a pre-ticked checkbox, a bought list or a “by continuing you agree” popup will still be on your database in 2027. Fixing the sign-up form now costs an afternoon. Re-permissioning lakhs of contacts in 2027 costs most of your list.
Deliverability and DPDP point the same way here. People who knowingly opted in rarely press “Report spam.”

Pro tip: Before a festive campaign, segment out anyone with no click or purchase in 180 days and send them a separate, smaller “still want to hear from us?” email. You protect the main send’s spam rate and learn who’s really there.
Not everyone needs to panic. A B2B firm mailing 3,000 contacts at company domains hosted on Google Workspace is not sending to personal Gmail accounts, so Gmail’s bulk count may never apply. Some marketers argue email matters less in India anyway, with WhatsApp carrying more of the selling (our WhatsApp marketing playbook covers that side).
We’d push back on both. B2B lists rarely stay pure; personal Gmail addresses arrive via webinar sign-ups and free trials. And WhatsApp marketing messages are paid per message, so email remains the cheapest owned channel most Indian brands have. You only keep it cheap if it reaches the inbox.
Ignore the 5,000 threshold and build as if you were a bulk sender from day one: SPF, DKIM, DMARC, one-click unsubscribe, spam rate under 0.1%. It costs a few DNS records and a header. Stop reporting open rates to clients or bosses as proof of health, and fix sign-up consent now rather than in 2027. The brands that will struggle this Diwali aren’t the small senders. They’re the big lists still running on 2022 habits.
For the full channel picture, from list building to automation, see our email marketing guide, and for how email fits the year’s other shifts, read digital marketing trends for India in 2026.
Send a campaign to a personal Gmail address, open it on Gmail web, click the three-dot More menu and choose Show original. Gmail lists the SPF, DKIM and DMARC results at the top, and all three should read PASS.
Yes, both Gmail and Outlook accept a DMARC policy of p=none as the minimum for bulk senders. The From domain still has to align with SPF or DKIM, and Google recommends aligning both.
No. Google requires one-click unsubscribe only on marketing and promotional messages. OTPs, invoices and shipping updates are exempt.
It is the rejection Microsoft returns when a high-volume sender to Outlook.com, Hotmail or Live addresses fails its SPF, DKIM or DMARC requirements. The message is not delivered to the inbox or the junk folder.
Google Postmaster Tools at postmaster.google.com shows a daily spam rate once you verify your sending domain with a DNS TXT record. It also has a compliance status dashboard for the sender guidelines.
What changed in marketing and AI, why it matters and exactly what to do. In your inbox at 11:00 IST.