PingTalks PingTalks
Email Marketing Tips 9 min read

Email Deliverability Myths: 6 Beliefs Gmail and Outlook Punish

Gmail and Outlook now reject mail that breaks their sender rules. Here are six email deliverability myths Indian marketers still believe, and a 10-minute audit to fix them tonight.

Laptop on a desk showing an email inbox, illustrating email deliverability myths and checks

Key takeawaysThe story in 20 seconds

01Google treats any domain that sends close to 5,000 messages a day to personal Gmail accounts as a bulk sender permanently, even if volume later drops.

02Gmail asks senders to keep spam complaints below 0.1% and removes mitigation eligibility above 0.3% until seven straight days back under it.

03Since 5 May 2025, Microsoft rejects unauthenticated mail from senders of 5,000 or more emails a day to Outlook.com, Hotmail and Live addresses with error 550 5.7.515.

04Apple Mail Privacy Protection loads tracking pixels in the background, so email open rates no longer prove that a list is engaged.

On 5 May 2025, Microsoft stopped junking unauthenticated bulk mail to Outlook.com and Hotmail addresses. It started bouncing it. Six months later Gmail began ramping up its own enforcement, with temporary and permanent rejections for senders who break its rules. Yet most email deliverability myths we hear from Indian D2C and B2B teams still date from 2022.

Here are six of them, what Google, Microsoft, Apple and India’s data protection rules actually say, and the 10-minute check that tells you which ones are costing you inbox placement right now.

Laptop showing an email inbox, illustrating email deliverability checks
Most deliverability problems are visible in your own inbox if you know where to look.

Do Gmail’s sender rules apply if you send under 5,000 emails a day?

Yes, partly, and probably more than you think. Google’s bulk sender rules kick in at close to 5,000 messages a day to personal Gmail accounts, counted across your primary domain. Cross that line once and you are a bulk sender permanently. Basic authentication rules apply to every sender regardless of volume.

Myth: “We only blast 4,000 people, so the February 2024 rules skip us.”

Reality: Google’s FAQ says bulk sender status “doesn’t have an expiration date.” If your Diwali sale went to 30,000 people in one day in 2024, you have been a bulk sender ever since, even if you now send 2,000 a week. And because volume counts at the primary domain, your newsletter tool, your Shopify order mails and your CRM sequences all add up.

The rule list for bulk senders: SPF and DKIM both passing, a DMARC record (p=none is the minimum), the From domain aligned with SPF or DKIM, one-click unsubscribe on marketing mail, and a spam rate kept below 0.3%.

Watch out: Google says new domains that weren’t sending 5,000 a day to Gmail before 1 January 2024 are on an “accelerated timetable” for enforcement. Spinning up a fresh domain to escape a bad reputation now gets you less patience, not more.

No. For marketing and promotional mail, Gmail wants one-click unsubscribe through the RFC 8058 List-Unsubscribe header, pointing to a single HTTPS URL. Google’s FAQ is explicit that a mailto address or a link in the email body doesn’t meet the requirement. Unsubscribes should be processed within 48 hours.

The header is what powers the “Unsubscribe” button Gmail shows next to the sender name. Neil Kumaran, Group Product Manager for Gmail Security and Trust, put the principle plainly when the rules were announced in October 2023: “It should take one click.”

Two details trip up Indian teams. First, transactional mail (OTPs, invoices, shipping updates) doesn’t need it, so don’t break those flows chasing compliance. Second, plenty of homegrown CRMs and older SMTP setups never added the header. Google says it won’t auto-reject mail without it, but missing the 48-hour window makes you ineligible for delivery support, and people who can’t leave easily press “Report spam” instead.

What spam complaint rate does Gmail allow?

Gmail wants your spam rate below 0.1% and says it should never reach 0.3%. Above 0.3%, bulk senders lose eligibility for any delivery mitigation from Google, and they only regain it after seven consecutive days back under 0.3%. The rate is calculated daily and shown in Google Postmaster Tools.

Myth: “A 1% complaint rate is normal for a big sale blast.”

Reality: 1% is more than three times Gmail’s ceiling. Our maths below turns the percentages into the number of people who can click “Report spam” before you’re in trouble.

Our maths: your complaint budget per send

Delivered to Gmail inboxesTarget (0.1%)Hard ceiling (0.3%)
25,00025 complaints75 complaints
1,00,000100 complaints300 complaints
5,00,000500 complaints1,500 complaints

These are simplified per-send figures; Postmaster Tools reports a daily rate. The lesson holds anyway. Picture a jewellery brand mailing its full 1 lakh Gmail list, including people who last opened in 2023, every day of Dhanteras week. It needs only 300 irritated people across a day to cross the line. The seven-day recovery period then swallows the rest of the festive sale.

0.1%spam rate Google asks senders to stay under
0.3%rate that removes bulk senders’ eligibility for mitigation
7 daysstraight under 0.3% to become eligible again
Woman reading marketing email on her phone, the moment a spam complaint happens
One tap on "Report spam" counts against your sender reputation.

What happens to unauthenticated email in Outlook now?

It gets rejected outright. Since 5 May 2025, Microsoft requires domains sending 5,000 or more emails a day to Outlook.com, Hotmail.com and Live.com addresses to pass SPF and DKIM and publish a DMARC record of at least p=none, aligned with one of them. Failing mail bounces with error 550 5.7.515.

Myth: “Worst case, Outlook drops us in junk and a few people still find it.”

Reality: A rejection never reaches the mailbox, junk or otherwise. If your ESP’s bounce report shows “5.7.515 Access denied” against Hotmail and Outlook addresses, that’s the rule in action, not a list quality problem.

Microsoft is lighter elsewhere. Em Blitstein, Senior Content Marketing Manager at Sinch Mailgun, notes that Microsoft hasn’t explicitly required RFC 8058 one-click unsubscribe and sets no public spam-rate threshold. Build to Gmail’s standard and you clear both.

Authentication used to decide which folder you landed in. Now it decides whether you land at all.

Can you still trust email open rates?

Not as a measure of engagement. Apple’s Mail Privacy Protection downloads remote content, including tracking pixels, privately in the background and hides the reader’s IP address. So emails to Apple Mail users can register as “opened” whether or not a person read them. Opens are now a directional signal at best.

Myth: “Our 45% open rate proves the list is healthy, so we don’t need to prune it.”

Reality: Inflated opens hide the dormant subscribers most likely to complain or bounce. India skews Android, so the distortion is smaller here than in the US. Check your own split before assuming: most ESPs report opens by email client. A premium brand whose buyers mostly use iPhones may be flying blind.

Use clicks, site sessions and orders instead. Tag every campaign link with UTM parameters and judge it in GA4 (our GA4 setup guide covers the events). For list hygiene, define “active” as anyone who clicked or bought in the last 90 to 180 days, not anyone who “opened.”

Does the DPDP Act affect your email list today?

Yes, because the consent you collect today is the consent you’ll have to defend later. India notified the Digital Personal Data Protection Rules, 2025 on 14 November 2025 with an 18-month phased compliance period, which runs to around May 2027. The Rules require every data fiduciary to issue a separate consent notice.

Myth: “DPDP is a 2027 problem. We’ll clean up the list then.”

Reality: Every subscriber you add this festive season through a pre-ticked checkbox, a bought list or a “by continuing you agree” popup will still be on your database in 2027. Fixing the sign-up form now costs an afternoon. Re-permissioning lakhs of contacts in 2027 costs most of your list.

Deliverability and DPDP point the same way here. People who knowingly opted in rarely press “Report spam.”

Marketing team reviewing email list and consent data on a laptop
A consent audit and a deliverability audit share the same spreadsheet.

A 10-minute deliverability audit you can run tonight

  1. Check authentication in Gmail. Send your latest campaign to a personal Gmail address. Open it on Gmail web, click the three-dot More menu beside Reply and choose Show original. You want SPF: PASS, DKIM: PASS and DMARC: PASS.
  2. Check alignment. On the same screen, confirm the DKIM “d=” domain or the SPF domain matches the domain in your From address. “PASS” for your ESP’s domain alone isn’t alignment.
  3. Open Google Postmaster Tools. Go to postmaster.google.com, add your sending domain and verify it with the DNS TXT record Google gives you. Then check the compliance status dashboard and the daily spam rate.
  4. Look for the unsubscribe button. In Gmail, a compliant promotional email shows “Unsubscribe” next to the sender name. No button usually means no List-Unsubscribe header. Ask your ESP or developer to add RFC 8058 one-click.
  5. Search your bounce log. Filter for “5.7.515” and Gmail codes beginning “5.7.2” and “5.7.3”. Any hits mean authentication is failing at scale.

Pro tip: Before a festive campaign, segment out anyone with no click or purchase in 180 days and send them a separate, smaller “still want to hear from us?” email. You protect the main send’s spam rate and learn who’s really there.

Who can ignore these email deliverability myths?

Not everyone needs to panic. A B2B firm mailing 3,000 contacts at company domains hosted on Google Workspace is not sending to personal Gmail accounts, so Gmail’s bulk count may never apply. Some marketers argue email matters less in India anyway, with WhatsApp carrying more of the selling (our WhatsApp marketing playbook covers that side).

We’d push back on both. B2B lists rarely stay pure; personal Gmail addresses arrive via webinar sign-ups and free trials. And WhatsApp marketing messages are paid per message, so email remains the cheapest owned channel most Indian brands have. You only keep it cheap if it reaches the inbox.

PingTalks verdict

Ignore the 5,000 threshold and build as if you were a bulk sender from day one: SPF, DKIM, DMARC, one-click unsubscribe, spam rate under 0.1%. It costs a few DNS records and a header. Stop reporting open rates to clients or bosses as proof of health, and fix sign-up consent now rather than in 2027. The brands that will struggle this Diwali aren’t the small senders. They’re the big lists still running on 2022 habits.

For the full channel picture, from list building to automation, see our email marketing guide, and for how email fits the year’s other shifts, read digital marketing trends for India in 2026.

What to do now

  • Run “Show original” on your latest campaign and fix any SPF, DKIM or DMARC result that isn’t PASS.
  • Verify your domain in Google Postmaster Tools and check the spam rate before your next big send.
  • Confirm one-click unsubscribe is live on every promotional email.
  • Swap open rate for clicks and orders in your email reports.
  • Remove pre-ticked boxes from sign-up forms and add a clear consent notice.

Frequently asked questions

How do I check if my emails pass SPF, DKIM and DMARC?

Send a campaign to a personal Gmail address, open it on Gmail web, click the three-dot More menu and choose Show original. Gmail lists the SPF, DKIM and DMARC results at the top, and all three should read PASS.

Is DMARC p=none enough for Gmail and Outlook?

Yes, both Gmail and Outlook accept a DMARC policy of p=none as the minimum for bulk senders. The From domain still has to align with SPF or DKIM, and Google recommends aligning both.

Do transactional emails need one-click unsubscribe?

No. Google requires one-click unsubscribe only on marketing and promotional messages. OTPs, invoices and shipping updates are exempt.

What does error 550 5.7.515 mean?

It is the rejection Microsoft returns when a high-volume sender to Outlook.com, Hotmail or Live addresses fails its SPF, DKIM or DMARC requirements. The message is not delivered to the inbox or the junk folder.

Where do I see my Gmail spam rate?

Google Postmaster Tools at postmaster.google.com shows a daily spam rate once you verify your sending domain with a DNS TXT record. It also has a compliance status dashboard for the sender guidelines.

Sources

Kousik BhattacharyaEditor, PingTalks

Digital Evangelist and Entrepreneur at Clickseek Digital. A results-oriented marketing leader with an 18+ year track record driving transformative growth for diverse global businesses. Expert in performance marketing, demand generation, customer acquisition, strategic partnerships, and market expansion within B2B SaaS, Consumer-Tech, Fintech, Travel/Hospitality, and CRM/ITES Solutions sectors. IIM alumnus with a strong analytical background and a string of accolades, including "Top 50 Most Influential E-Commerce Professional of India" and "Top 100 Digital Marketer of India."

More in Email Marketing

See all 2 stories

Two stories a day. Zero noise.

What changed in marketing and AI, why it matters and exactly what to do. In your inbox at 11:00 IST.