Google now blocks spoofed emails for better phishing protection

Google now blocks spoofed emails for better phishing protection

April 1, 2024 at 04:34PM

Google has implemented stricter guidelines for bulk email senders, requiring email authentication and adherence to specific spam thresholds. Non-compliance may lead to email delivery issues and rejection of non-compliant traffic starting in April 2024. These measures aim to prevent spam, phishing, and malware, ensuring users can rely on the security of their emails.

From the meeting notes, the key takeaways are:
– Google has implemented stricter guidelines regarding bulk email sending to strengthen defenses against spam and phishing attacks.
– Bulk email senders are required to authenticate their messages using SPF/DKIM and DMARC email authentication for their domains if they want to send over 5,000 messages daily to Gmail accounts.
– Additional guidelines include avoiding sending unsolicited or unwanted messages, providing a one-click unsubscribe option, responding to unsubscription requests within two days, maintaining spam rates below 0.3%, and not impersonating Gmail in “From” headers.
– Non-compliance may result in email delivery issues, including rejected emails or emails being automatically sent to recipients’ spam folders.
– Beginning in April 2024, Google will start rejecting non-compliant traffic, with an accelerated timetable for domains used to send bulk emails since January 1, 2024.
– Google claims its AI-powered defenses can successfully block nearly 15 billion unwanted emails daily, preventing over 99.9% of spam, phishing attempts, and malware.
– Neil Kumaran, Group Product Manager for Gmail Security & Trust, emphasized the importance of email security standards and the goal to close loopholes exploited by attackers.

Full Article