Customize spam filter settings

If you have the legacy free edition of G Suite, upgrade to G Suite Basic to get this feature. 

Mail sent to your domain is subject to Google's spam filters. By default, the filters automatically move messages detected as spam into a user's Gmail spam folder. Spam settings and filters apply to all users in an organizational unit. Users in child organizations inherit the settings you create for the parent organization.

You can further customize an organization unit's spam filters to:

  • Be more aggressive for more stringent filtering of bulk email.
  • Bypass mail sent from your domain.
  • Use approved sender lists.

Create and use an approved sender list

You can create an approved sender list (based on email or an entire domain) to bypass any spam filters. This setting only applies to incoming messages. In addition, approved sender lists can be used in the following ways:

  • Reuse approved sender lists across different settings. For example, you can specify the same list in the Spam setting and the Restrict delivery setting to modify the behavior of both settings.
  • Gmail checks the addresses or domain names that you enter against the From part of the message header, and not the Return-Path part of the message header. For this reason, From must match an address or domain you entered in the list.

  • Match and add both domain and sub-domain names to the approved sender list, for example abc.com and xyz.abc.com.

  • In some cases, a message that's blatantly spam,  although sent from an approved sender, can still be marked spam and delivered to a recipient's spam folder.

  • If a message from an approved sender contains a virus or is part of an email attack, Google's virus filters will prevent it from reaching your users.

  • A message from an approved sender will still be blocked if directed to do so by the sender's Domain-based Message Authentication, Reporting, and Conformance (DMARC) policy.

Customize a spam filter 

To bypass spam filters for messages from addresses or domains specified in an approved sender list:

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Appsand thenG Suiteand thenGmailand thenAdvanced settings.

    Tip: To see Advanced settings, scroll to the bottom of the Gmail page.

  3. (Optional) On the left, select an organization.
  4. Scroll to the Spam section, hover over the Spam setting, and click Configure. If the setting is already configured, hover over the setting and click Edit or Add Another.
  5. For a new setting, enter a unique name.
  6. To configure more aggressive spam filtering, check the Be more aggressive when filtering spam box. If you select this option, it's likely that more messages will be marked spam and sent to your users' spam folders.
  7. To bypass spam filters for internal messages from users within the same organization, check the Bypass spam filters for messages received from internal senders box. 

    Authenticated messages from subdomains, including subdomains not hosted by Google, are treated as internal messages.
  8. Check the Bypass spam filters for messages received from addresses or domains within these approved senders lists box, and select one or more address lists to use:
    1. Click Use existing or create a new one.
    2. Enter a new list name, and click Create.
      Tip: To use an existing list as your approved sender list, click the list name.
    3. Move your pointer over the list name, and click Edit.
    4. Click AddAdd.
    5. Enter email addresses or domain names, using a space or a comma to separate multiple entries.

      Note: If you want to bypass this setting for approved senders that don't have authentication, uncheck the Require sender authentication box. Use this option with caution as it can potentially lead to spoofing. Learn more about sender authentication.
    6. Click Save.
    Learn more about address lists, including how to search, or view all entries in the list, and how addresses are matched against the address lists.
  9. To send filtered messages to Admin Quarantine for review, check the Put spam in administrative quarantine box.
    • If you select this option, spam messages are never directed to users' spam folders.
    • If you're using the Message Center, spam messages aren't directed to the Message Center.
    • Messages released from quarantine are marked as spam. Once they're released, they're checked once again against Gmail filters as soon as they reach the end user's mailbox.
  10. Click Save.
  11. At the bottom of the Gmail Advanced settings page, click Save.

It can take up to an hour for your changes to take effect. You can track prior changes with the Admin console audit log.

Was this helpful?
How can we improve it?