Google’s New Email Rules: What UK SMEs Need To Know

By: Ben Fielding | Estimated Reading Time: 4 minutes

Every business has lived this moment… You send an important update to customers or prospects and the replies just stop.

No bouncebacks. No errors. Just silence.

Nine times out of ten, the problem isn’t your message. It’s providers like Google tightening email standards again. And this latest update is the biggest shift I’ve seen since Gmail split inbox tabs.

As someone who spends a lot of time helping SMEs steady their IT foundations, I can say this confidently: email deliverability is now an IT issue, not a marketing one. And ignoring it will hit sales, customer communication, and even staff productivity.

According to Nxt Gen IT’s email deliverability expert, Ben Fielding, these new rules essentially mean one thing:
Businesses must behave like responsible publishers, or risk being blocked.

Let’s see what’s changed and what it means for you.


The essentials (in plain English)

Google now expects all businesses (even small senders) to meet strict technical and behavioural standards. Yahoo have already signalled alignment, and Microsoft and Apple are expected to follow.

If you’ve ever hit Google’s criteria for a “bulk sender” (5,000+ emails/day to Gmail), enforcement is immediate and permanent. But even if you’re nowhere near that volume, poor behaviour triggers the same blocks.

Here’s what’s new.

1. Email authentication is now mandatory

To reach Gmail inboxes, your domain must have:

  • SPF that passes
  • DKIM that passes
  • DMARC with a minimum policy of p=none

Miss any of these, and Google starts rejecting your traffic with codes like 5.7.27 or 5.7.30.

Why it matters:
Gmail is done “trusting” good intent. If your domain isn’t technically verified, Google treats it like a spoof.

I often see SMEs with half-configured records or outdated DNS settings and this update exposes that instantly.

2. Your “From:” address must match your authenticated domain

If you send from hello@yourcompany.co.uk but your system actually sends mail from another domain in the background, Google will now block it (error 4.7.32).

This is common with older CRMs, legacy ticketing systems, and bulk email tools that rewrite the From: address “for convenience”.

3. TLS encryption is required

Emails sent without encryption will now fail with error 5.7.29.

Think of TLS as the equivalent of HTTPS for email. If you’re using older servers, outdated SMTP relays, or cost-cutting email gateways, this will matter.

4. Your spam complaint rate must stay under 0.3%

This is the behavioural one and it’s the rule I believe will sting the most.

Google is clear:

  • 0.1% starts causing inboxing problems
  • 0.3%+ means hard blocks for at least seven days

Translation:
If just 3 out of every 1,000 people hit “mark as spam”, your domain becomes a liability.

In my experience, high spam rates nearly always trace back to three issues:

  • sending to cold or unengaged lists
  • overusing bulk tools
  • mixing operational emails with newsletters or promotions

5. One-click unsubscribe is now mandatory

For any promotional email, not just marketing newsletters.

Transactional messages (password resets, invoices, support tickets) are exempt.Everything else must include a true one-click unsubscribe using official List-Unsubscribe headers.

Footer links aren’t enough.
“Email us to unsubscribe” isn’t enough.
Landing pages aren’t enough.

This rule exists to protect inboxes and to protect your reputation.

6. PTR (reverse DNS) must match your sending IP

If your email provider doesn’t have proper reverse DNS configured, Google will block your traffic (5.7.25).

This mainly affects businesses using:

  • cheap bulk mail tools
  • outdated shared hosting
  • legacy on-prem email servers

It’s one of the easiest issues to miss, and one of the quickest to fix with proper IT support.

7. New domains will be heavily scrutinised

Any domain that hasn’t sent 5,000+ messages/day to Gmail since Jan 2024 is considered “new”. These domains get no grace period. Enforcement is harsher and faster.

This is Google’s official crackdown on burner or temporary domains.


What this really means for SMEs

Underneath the technical rules, Google is sending one message:

Email is no longer a free-for-all. Every sender must prove they’re legitimate.

Google, Microsoft, Yahoo, and Apple are shifting towards one global standard and by 202, we expect every major mailbox provider will enforce the same baseline.

From what I see across UK SMEs, the businesses most at risk are those using:

  • outdated CRMs
  • older on-prem mail servers
  • newsletter platforms with weak compliance
  • “quick win” mailing tools
  • shared IPs
  • unsegmented bulk lists

This isn’t about marketing. It’s about trust and whether inboxes believe you’re a safe sender.


What you should do next (the practical list)

If I were reviewing your organisation tomorrow, here’s where I’d start.

1. Check your SPF, DKIM, and DMARC

Make sure all three exist, pass, and are aligned.

2. Align your From: domain

Stop using vanity or look-alike domains your infrastructure can’t authenticate.

3. Implement one-click unsubscribe

If you send any promotional content, you must support RFC 8058.

4. Clean your mailing lists

Remove:

  • dead addresses
  • disengaged recipients
  • anyone who hasn’t opened an email in 90 days

5. Separate your email traffic

Operational, marketing, and automated notifications should not share the same infrastructure.

6. Monitor your spam rate daily

Use Gmail Postmaster Tools.
If you’re over 0.3%, stop sending until fixed.

7. Review every link for redirect chains

More than one redirect (common with tracking-heavy CRMs) fuels spam signals.


Nxt Steps

If you’re unsure where your business stands, don’t guess. These changes are technical, behavioural, and far-reaching, and for most SMEs, they land across IT, marketing, and operations at the same time.

At Nxt Gen IT, we help companies build people-first technology foundations that make communication reliable, secure, and compliant. If you’d like a clear picture of your organisation’s email health authentication, alignment, infrastructure, and deliverability. I’m always happy to talk.

Book a meeting with Ben Fielding today and explore how Nxt Gen IT can help you build IT peace of mind and email reliability that just works.