Customize spam filter settings


Mail sent to your domain is subject to Google's spam filters. By default, the filters automatically move messages detected as spam into a user's Gmail spam folder. Spam settings and filters apply to all users in an organizational unit. Users in child organizations inherit the settings you create for the parent organization.

You can further customize an organization unit's spam filters to

  • Be more aggressive for more stringent filtering of bulk email.
  • Bypass mail sent from your domain.
  • Use approved sender lists.

Create and use an approved sender list 

You can create an approved sender list (based on email or an entire domain) to bypass any spam filters. This setting only applies to incoming messages. In addition, approved sender lists can be used in the following ways:

  • Reuse approved sender lists across different settings. For example, you can specify the same list in the Spam setting and the Blocked senders setting to modify the behavior of both settings.
  • Gmail checks the addresses or domain names that you enter against the From part of the message header, and not the Return-Path part of the message header. For this reason, From must match an address or domain you entered in the list.

  • Match and add both domain and sub-domain names to the approved sender list, for example and

  • In some cases, a message that's blatantly spam,  although sent from an approved sender, can still be marked spam and delivered to a recipient's spam folder.

  • If a message from an approved sender contains a virus or is part of an email attack, Google's virus filters will prevent it from reaching your users.

  • A message from an approved sender will still be blocked if directed to do so by the sender's Domain-based Message Authentication, Reporting, and Conformance (DMARC) policy.

Customize a spam filter:

  1. From the Admin console Home page, go to Appsand thenG Suiteand thenGmailand thenAdvanced settings.

    Tip: To see Advanced settings, scroll to the bottom of the Gmail page.

  2. (Optional) On the left, select an organization.
  3. Scroll to the Spam section, hover over the Spam setting, and click Configure. If the setting is already configured, hover over the setting and click Edit or Add Another.
  4. For a new setting, enter a unique name.
  5. To configure more aggressive spam filtering, check the Be more aggressive when filtering spam box. If you select this option, it's likely that more messages will be marked spam and sent to your users' spam folders.
  6. To bypass spam filters for messages from users in the same organization, check the Bypass spam filters for messages received from internal senders box.

  7. To bypass spam filters for messages from addresses or domains specified in an approved sender list:

    1. Check the Bypass spam filters for messages received from addresses or domains within these approved senders lists box.

    2. Click Use existing or create a new one, enter a new list name, and click Create.

    3. To use an existing list as your approved sender list, click the list name.

  8. To add email addresses or domains to a list:

    1. Hover over the list name, click Edit, and then click Add.

    2. Enter an email address or domain name.
      Important: Use the Do not require sender authentication option with caution as it can lead to spoofing. The option bypasses the spam folder for approved senders that don't have authentication, such as SPF or DKIM, enabled.

    3. Click Save.

    4. Repeat the steps to add more email addresses or domains to the list.

  9. To send filtered messages to Admin Quarantine for review, check the Put spam in administrative quarantinebox. If you select this option, spam messages are never directed to users' spam folders. If you are using the Message Center, spam messages aren't directed to the Message Center. A message that's released from quarantine is delivered directly to the user's Gmail inbox or non-Gmail mailbox.
  10. Click Add Setting.
  11. At the bottom of the Gmail Advanced setting page, click Save.


It can take up to an hour for your changes to take effect. You can track prior changes with the Admin console audit log.