Email List Hygiene: Bounces, Sunset Rules and the Gmail and Yahoo Sender Requirements

A list decays even in the months you never send

People change jobs and stop checking the account they signed up with. None of that shows until you send. Then the dead addresses bounce, the bored ones delete without reading, and a few tired subscribers press the spam button because it is closer than the unsubscribe link. Gmail and Yahoo read all of it as a verdict on you, the sender, and file your next campaign accordingly.

Hygiene is the unglamorous answer. It means mailing only addresses that work, belong to people who still want the mail, and come from a domain that proves it is yours. It costs nothing but attention. The vendor figures on how much marketing mail misses the inbox are collected, with their sources, on our email marketing statistics page; this guide is about keeping your own mail out of that share.

Deliverability starts with how addresses arrive, and confirmed opt-in keeps typos and fakes off the list, as our guide to building an email list explains. This guide assumes the list already exists and has some dust on it.

Bounces: the addresses that tell you to stop

A bounce is the receiving server refusing your message. Platforms sort them into two kinds. Mailchimp's help article on soft versus hard bounces defines a hard bounce as a permanent reason the email cannot be delivered and a soft bounce as a temporary delivery issue. It removes hard bounces from future sends immediately, and turns a soft bounce into a cleaned address after 7 soft bounces for a contact with no activity, or up to 15 for one with a history of engaging.

The mailbox providers agree in spirit. Google's email sender guidelines tell senders to unsubscribe recipients automatically after multiple bounced messages, and to reduce volume when bounces and deferrals pile up. Yahoo's sender best practices ask senders to monitor hard and soft bounces and remove invalid recipients promptly.

A sudden wall of bounces is usually the domain, not the list. A host change that dropped the mail records produces exactly this, and our fix page on email that stopped working after a website move walks through the repair.

The silent subscriber, and a sunset policy for letting go

An address that accepts every message and never responds still drags on your reputation, and an abandoned mailbox can become something worse. Spamhaus, the blocklist operator, describes recycled spam traps as addresses that were once valid and are no longer used, and treats mail reaching them as a sign the sender kept mailing long after anyone was home. Its article on sunset policies says mailbox providers can look at an address unengaged for anywhere from three to twelve months.

A sunset policy is the written rule for when a subscriber stops getting regular mail. Write yours down so it runs the same way every quarter:

1. 1

   Define silence by clicks and purchases, not opens

   Apple Mail Privacy Protection loads tracking images for many readers who never look, so an open proves little, as our page on email open rates explains. Count clicks, replies, orders and bookings.

2. 2

   Pick a window that fits your cadence

   Our practice for a monthly sender: six months without a click or purchase. Weekly senders can go shorter; seasonal businesses may need a year.

3. 3

   Send a short re-permission series

   Two or three plain messages that ask whether they still want the mail, with one obvious button to stay. Yahoo suggests sending a reconfirmation email to inactive subscribers periodically. Our guide to marketing automation covers building the sequence.

4. 4

   Stagger it

   Spamhaus warns that mailing every unengaged address at once can wreck a sender's reputation. Spread the series over days, smallest batches first, and watch bounces and complaints between them.

5. 5

   Suppress, do not delete

   Move the people who stay silent to a suppression list. Deleting them invites someone to re-import the same addresses from an old spreadsheet next spring.

A subscriber who has ignored you for a year is not a lead. It is a vote against you that arrives with every send.

What Gmail and Yahoo require of senders, side by side

In February 2024, Gmail and Yahoo began enforcing sender requirements, and the two sets match closely. Both have one tier for everyone and a stricter tier for bulk senders. Gmail defines bulk as close to 5,000 or more messages to personal Gmail accounts in 24 hours, counted across a primary domain, and its sender guidelines FAQ says a sender that crosses that line once is treated as a bulk sender permanently. Yahoo's sender FAQ declines to name any number at all.

Yahoo began enforcing its unsubscribe requirement in June 2024, and Google's FAQ says Gmail started ramping up enforcement on noncompliant traffic in November 2025. Gmail's rules apply to personal Gmail accounts, not to businesses on Google Workspace.

The three DNS records, set up without breaking the mail you already send

SPF lists the servers allowed to send for your domain. DKIM signs each message so the receiver can check it was not altered and came from you. DMARC tells receivers what to do when a message fails both and where to send reports. A website move that changes DNS providers can quietly delete all three; our page on DNS that stops resolving after a domain change covers the wider problem.

1. 1

   List everything that sends as your domain

   The email platform, your Google Workspace or Microsoft 365 mailboxes, the store, the booking system, the invoicing tool, the website's contact form. Each one needs to be covered, or its mail fails.

2. 2

   Keep one SPF record

   Google's SPF troubleshooting page says each domain can have only one SPF record covering every sender, and that the specification allows a maximum of 10 DNS lookups. Merge services into that single record rather than adding a second.

3. 3

   Turn on DKIM in each sending tool

   Your platform gives you the records to publish. Google requires DKIM keys of at least 1,024 bits and recommends 2,048.

4. 4

   Publish DMARC at p=none with reports

   Yahoo strongly recommends a rua tag so reports reach you during setup. Read them for a few weeks before considering a stricter policy.

5. 5

   Send from an address on your own domain

   A From line on a free gmail.com or yahoo.com address cannot align with your platform's authentication. Use your business domain, and keep the same sender over time.

Changing the sending address or domain resets the history providers have learned about you. One company found that out the expensive way, a story we told in the most expensive rebrand in email. If the website's forms or order emails are the ones failing, our team handles form and script repairs, and store owners on WooCommerce can start with the fix for order emails that are not sending.

How to send a test email without testing on your customers

A test belongs in a set of inboxes you own, never in the live list. Keep personal accounts at Gmail, Yahoo and Outlook.com for this job, since a Workspace inbox at your own company is outside Gmail's consumer rules and tells you little about how they treat you.

1. 1

   Use the platform's test send

   Every major platform can send a single copy to chosen addresses. Send to your seed accounts, not to a segment of real subscribers.

2. 2

   Read the headers

   In Gmail on the web, open the message, click the More icon beside Reply and choose Show original, per Google's instructions. In the Authentication-Results lines, look for spf=pass, dkim=pass and dmarc=pass.

3. 3

   Note where it landed

   Primary, Promotions or Spam in Gmail; inbox or spam at Yahoo and Outlook.com. A promotional email in the Promotions tab has still reached the inbox. One in spam is a problem to solve before the campaign goes out.

4. 4

   Press your own unsubscribe

   Check that the unsubscribe link in the body works and that the platform added the one-click header. Then confirm the seed address was actually suppressed.

After the real send, look at the scoreboard. Google's Postmaster Tools has a Compliance status dashboard that marks each sender requirement as compliant, needs work or no data found, plus spam rate, authentication and delivery error reports. Low-volume senders may see no data on quiet days. Yahoo offers its Complaint Feedback Loop for complaint reports on mail to Yahoo addresses.

List-cleaning services, and what a clean list really is

Email verification services promise to scrub a list before you send. They can catch addresses that no longer exist, and a typo check on the signup form stops bad addresses at the door. But a post on Spamhaus's resource hub, You can't buy data hygiene, argues that cleaning a list moves its statistics without fixing why it performs badly, doubts that any cleaning service can reliably find spam traps, and notes that Spamhaus does not share its trap feeds with third parties.

Its definition of a clean list is worth pinning above the desk: one that is actively mailed with its bounces removed. A verification pass makes sense before importing an old file you have not mailed in years. It does not make a bought or scraped list safe; Gmail's guidelines say not to buy addresses from other companies at all, and no scrub changes who agreed to hear from you.

Cold prospecting at volume draws complaints against the same domain your newsletter uses, a risk our guide to email outreach takes seriously.

Twenty minutes a month that keep the list healthy

Hygiene works as a habit, not a rescue. Put this on the calendar for the week after each monthly send:

• Confirm hard bounces were suppressed and repeated soft bounces are on their way out.
• Check the spam complaint rate in Postmaster Tools against the 0.3% ceiling, and look harder at any send that came near 0.1%.
• Move subscribers past your silence window into the re-permission series.
• Submit your own signup form and confirm the welcome arrives, as the newsletter guide recommends before every issue.
• Send a test to the seed inboxes after any change to the domain, the host, the platform or the From line.
• Read the DMARC reports for senders you do not recognize.

Once the records are right, an owner can run this alone. Our email marketing service sets up the authentication, the bounce and sunset rules, the re-permission flows and the reporting, then runs the sends. For the full program around it, start at the email marketing guide or the starter plan in email marketing for small business. And if the website your emails point to has problems of its own, a free site audit checks speed, SEO, mobile, security and content.