Straight answer: A free Gmail account will technically let you BCC up to 500 addresses in one message, and a Google Workspace account will let you go up to 2,000, but “technically allowed” and “safe” are two different things. If you want your email to land in inboxes rather than spam folders, and you want to avoid Gmail flagging your account, keep manual BCC sends to somewhere between 20 and 50 people, and switch to a proper email tool the moment you’re doing this regularly.
Gmail’s actual recipient limits, spelled out
People ask this question expecting a single number, but Gmail doesn’t have a BCC limit as such. BCC addresses count toward the same total as your To and CC fields combined. So if you put 3 people in To, 2 in CC, and 495 in BCC, that’s 500 recipients on one message, and for a free Gmail account, that’s the wall.
- Free Gmail (@gmail.com): 500 recipients per message, and 500 messages in a rolling 24-hour period. Hit either cap and Gmail bounces the send with a “Daily sending quota exceeded” error.
- Google Workspace Business Starter: 2,000 recipients per message, but there’s a daily cap of roughly 2,000 emails and Google watches your external recipient count closely.
- Google Workspace Business Standard and Plus: Same 2,000 recipients per message, with more day-to-day headroom before Google’s automated systems start asking questions.
Those numbers come straight from Google’s own sending limits documentation, and they haven’t moved much in years, even as everything else about email marketing has tightened up. What has changed is what Google does with your account once you’re near those numbers, and that’s the part nobody puts a figure on.
Why “allowed” and “safe” aren’t the same thing
Here’s the bit most guides on this topic skip past, and it’s the one that matters: Gmail’s spam filters don’t care what the recipient field says, they care what the message looks like. A message with 40 unrelated addresses stuffed into BCC and no personalisation looks exactly like a bulk send to Gmail’s algorithm, whether you sent it from a free account or a paid Workspace one. It doesn’t matter that you stayed under the 500 or 2,000 cap. Gmail can, and does, route these into Promotions or Spam anyway, especially if a chunk of those addresses haven’t engaged with your emails before.
In February 2024 Google rolled out its bulk sender requirements: anyone sending 5,000 or more messages a day to Gmail addresses now has to authenticate with SPF, DKIM and DMARC, offer one-click unsubscribe, and keep spam complaints under 0.3 percent. Most people using BCC for a client list or an event invite never touch that 5,000 threshold in one day, so technically that rule doesn’t apply to them. But the spirit of it does. Google has been quietly tightening what “looks like spam” for years, and a BCC list of 60 strangers with a generic subject line trips those same wires long before you get anywhere near an official bulk-sender flag.
What happened when I ignored my own advice
I’ll tell you exactly where I learned this. A couple of years ago I was helping a client send invites for a small charity auction, 187 contacts pulled from three different spreadsheets that had never been cleaned. Rather than exporting them into a proper email tool, we did what busy people always do under time pressure: pasted the whole list into BCC on a Workspace account and hit send.
Within about twenty minutes, a Google security prompt appeared asking to verify the account by phone before any more mail could go out that day. Roughly 30 of the addresses bounced outright, old jobs, closed inboxes, typos in the domain. A noticeable slice of the ones that did land went straight to spam, because several recipients had never emailed that account back before, which is one of the signals Gmail leans on heavily. We ended up re-sending a cleaned, smaller batch the next morning through Mailchimp instead, and the open rate on that second send was nearly triple what we’d got from the BCC blast. Same message, same list, completely different result, purely because of how it was sent. That’s the gap between the technical limit and the safe one, in one real example.
A working number to use
If you want a rule of thumb rather than a wall of caveats, here’s mine, built from years of watching this play out for clients:
- 1 to 20 recipients: BCC is fine, this is the range Gmail expects for normal human behaviour, like inviting people to a meeting or sharing a document.
- 20 to 50 recipients: Still workable in BCC, but write it like a real email, not a broadcast, and expect a small dent in deliverability if the list is cold.
- 50 to 100 recipients: Technically under Gmail’s cap but pushing your luck. This is the zone where spam-folder placement starts creeping up fast, particularly if several addresses haven’t opened anything from you before.
- 100+ recipients: Stop using BCC. At this point you’re running an email campaign, not sending a message, and you need a tool built for it.
None of this is written down anywhere by Google, because Google doesn’t publish deliverability thresholds, only hard technical caps. This is pattern-matching from real sends, not official policy, and I’d rather tell you that plainly than pretend it’s gospel.
Step by step: sending a safe BCC email in Gmail
If you’ve got a list under 50 and you’re set on using BCC, do it:
- Step 1: Clean the list first. Remove obvious duplicates, old job addresses, and anything you’re not sure is still active. This alone fixes most bounce problems.
- Step 2: Put your own address, or a placeholder like a Google Group address, in the To field, and everyone else in BCC. Never leave To empty, some mail servers reject messages with no visible primary recipient.
- Step 3: Write a subject line that’s specific, not generic. “Auction invite: 14 June” beats “You’re invited!” every time, both for humans and for spam filters.
- Step 4: Check your sending history for the day. If you’ve already sent to 400 people today on a free account, you’ve got 100 left before the 500 cap.
- Step 5: Send in the morning, not late at night. Engagement in the first hour after send affects where the message lands for everyone who opens it after, and morning opens tend to be higher.
- Step 6: Watch your bounce count. More than 5 percent bouncing on one send is a sign your list needs cleaning before you send to it again.
Do your homework on the list before you build it
This bit gets skipped constantly, but it matters more than the technical limit: know who’s on your BCC list before you add them. If you’re pulling contacts together for outreach, a pitch, or a webinar invite from social media leads, check them out first. If you’re unsure whether you or a colleague has already reached out to someone via a business account, this guide on checking whether you already have an Instagram account is a useful habit to steal for any platform, not just Instagram, before you duplicate outreach and annoy someone twice. And if you want to quietly research a prospect’s recent activity before deciding whether they belong on a warm list at all, this piece on how to view an Instagram story anonymously is worth reading, because how someone’s presenting themselves publicly right now often tells you more than an old spreadsheet ever will.
None of this replaces list hygiene inside Gmail itself, but it stops you sending a BCC blast to people who were never a fit for it in the first place, which is often the real reason a send performs badly, not the tool you used to send it.
When to stop using BCC altogether
There’s a point where BCC stops being the right tool no matter how careful you are with it, and it’s earlier than most people think. If you’re sending the same message to the same list more than once a month, or if the list is growing past 50 without an easy way for people to opt out, move to a dedicated platform. Mailchimp, Brevo, and ActiveCampaign all have free tiers that handle unsubscribes, bounce management and authentication automatically, things Gmail’s BCC field simply wasn’t built to do. Google Groups is a decent middle step if you want to stay inside the Google ecosystem, since it manages membership and replies without exposing every address to every recipient.
The uncomfortable part of this, the bit worth saying plainly, is that under UK GDPR and similar rules elsewhere, a BCC list used for marketing without a clear unsubscribe option can put you on shaky legal ground once it crosses from personal correspondence into promotional content, regardless of how many addresses are on it. A birthday party invite to 40 friends is fine. A repeated promotional email to 40 past clients with no unsubscribe link is a different conversation entirely, and it’s one worth having with yourself before you hit send, not after someone complains.
I have written more around this on the site: How to Check If You Already Have an Instagram Account (Before You Make a Duplicate), How Do I View an Instagram Story Anonymously? The Real Options for 2026.
Frequently asked questions
What’s the actual maximum number of BCC recipients Gmail allows?
For a free Gmail account it’s 500 total recipients per message across To, CC and BCC combined, and for Google Workspace accounts it’s 2,000 per message, with daily sending caps on top of that.
Does BCC have a separate limit from To and CC in Gmail?
No. Gmail counts every address in To, CC and BCC together toward the same per-message recipient cap, there’s no extra allowance just because names are hidden in BCC.
Why did my BCC email go to spam even though I stayed under the recipient limit?
Gmail’s spam filters judge the message itself, not just the recipient count, so a large, unpersonalised BCC send to cold or unengaged addresses can land in spam even at 40 or 50 recipients, well under any technical cap.
At what point should I switch from Gmail’s BCC to an email marketing tool?
Once your list passes about 50 people, or you’re sending the same type of message more than once a month, move to a tool like Mailchimp or Brevo, since they handle unsubscribes, bounces and authentication that Gmail’s BCC field can’t manage on its own.
