What Is Google Ads Customer Match? Requirements, List Upload and Consent

What is Google Ads Customer Match?
Customer Match is a Google Ads targeting feature that matches your first party customer data, such as emails, phone numbers, names and addresses, with signed in Google users. You can then reach those customers, or exclude them, on Search, the Shopping tab, Gmail, YouTube and Display.
In this guide I look at Customer Match from the policy side first. Who can use it? How should you format and upload a list? And what consent do you need under GDPR and similar laws? I have managed ad accounts since 2012. In my experience, the biggest problem with this feature is rarely technical. It is usually a list nobody agreed to join, or a messy export.
If you want the Meta version of this idea, read my guide to Meta custom audiences. Here I cover Google Ads only. Every limit and date below comes from Google's own help pages.
How does Customer Match work?
The process has three steps. First, you prepare your customer list in a specific format. Second, you upload the file to Google Ads. Finally, Google compares the details with its own account data and adds the matching people to an audience segment.
One detail matters a lot here. You can hash the data with the SHA256 algorithm before you send it. If you skip that step, Google Ads hashes it for you. In other words, raw email addresses never appear in your campaign settings; the matching runs on hashed values.
According to Google, matching can take up to 48 hours. So do not expect a size report right after the upload. Also, the matched count will always sit below your row count, because:
- some people on the list do not use a Google Account with that email,
- some users have turned off ad personalisation,
- some rows break the formatting rules and never enter matching,
- people who have not used Google services in the last 30 days do not count as active.
Where can you use Customer Match lists?
Google's help page lists Search, the Shopping tab, Gmail, YouTube and Display as Customer Match inventory. As a result, one list can carry different messages to the same customers across several channels.
In practice you use a list in three ways:
- Targeting: You show ads only to people on the list. For example, you offer a comeback deal to customers who have not ordered in a year.
- Observation: The campaign stays open to everyone, but you track the list separately and adjust bids.
- Exclusion: You remove existing customers from an acquisition campaign, so the budget goes to new people.
In automated campaigns such as Performance Max and Demand Gen, a list usually works as an audience signal. Put simply, it tells the system "find people like these". I explain the Display shift in my post on Display campaigns moving to Demand Gen.
What are the Customer Match eligibility requirements?
Google does not open this feature to every account at the same level. The official policy asks for a good history of policy compliance and a good payment history. For full access, the account also needs 90 days of Google Ads history and more than USD 50,000 in total lifetime spend.
Accounts below that threshold do not lose everything. According to the policy page, they can still use lists in observation settings and exclusions. So even a small account can remove existing customers from acquisition campaigns, or watch their performance on its own line.
| Requirement | What Google expects | What it means in practice |
|---|---|---|
| Policy compliance | A good compliance history | Frequent disapprovals and suspensions add risk |
| Payment history | A good payment history | Late payments can affect access |
| Account age | 90 days of Google Ads history | Do not expect full access on a new account |
| Lifetime spend | More than USD 50,000 | Below it, you use observation and exclusions |
| List size | At least 100 members added or refreshed in 540 days | Old lists fall out of eligibility without refreshes |
To see where your account stands, run a quick scan with my Google Ads audit tool.
What does the Customer Match policy prohibit?
The policy page draws a few clear lines. First, you cannot use customer data to target ads by sensitive interest categories, or to identify those categories. Health, religious belief and sexual orientation fall into that group.
Second, you cannot upload data about people under 13. Third, your ad copy cannot imply that you know personal details about the user. For instance, "Anna, has the medication you bought last week run out?" breaks both this rule and the sensitive category rule.
Also, you may send data only through Google's approved interface or API. One more point: IP address and timestamp matching is not allowed in the EEA, the UK or Switzerland. In short, Customer Match does not turn every piece of data you hold into ad material.
- Targeting by sensitive categories: not allowed.
- Data about children under 13: never.
- Ad copy that hints at personal information: a policy breach.
- Uploads outside approved channels: off limits.
How do you format a Customer Match file?
You prepare the list as a CSV file. Google's formatting guide asks for ASCII or UTF-8 encoding; UTF-16 will not work. Column headers must use the exact English names: Email, Phone, First Name, Last Name, Country and Zip.
Phone numbers follow the E.164 standard with the country code, for example +44 for the UK. For emails, you remove leading and trailing spaces and convert everything to lowercase. For gmail.com and googlemail.com addresses, you also remove the dots before the domain name.
Before I upload a list for a client, my team and I run this clean up:
- We delete duplicate rows.
- Test orders and internal staff addresses come out.
- We drop anyone who never opted in or later withdrew consent.
- Phone numbers move to E.164 format.
- Finally, we check that the file holds at least 100 records.
If you hash the file yourself, you can test the output with our hash generator. The clean up looks like a small job. However, it affects both match rate and legal safety at once.
How do you upload a customer list in Google Ads?
Google's current help page describes these steps. Click the Tools icon, then open the Shared library drop down in the section menu and choose Audience manager. Next, click the plus button and pick Customer list from the menu.
Then you name the segment and upload your CSV file. At this point a checkbox appears. It states that the data "was collected and is being shared with Google in compliance with Google's Customer Match policies". This box is not a formality. By ticking it, you take responsibility for consent.
After that, you set a membership duration. The maximum duration is 540 days. Then you click Upload and create. Once the list finishes processing, you add it as an audience at campaign or ad group level.
Besides manual upload, you can use the Google Ads API, Customer Match upload partners or Data Manager. Google recommends Data Manager for new integrations. Industry press reported that API based Customer Match uploads had to move to the Data Manager API by 1 April 2026. Manual uploads in the interface still work the same way.
What consent does Customer Match need under GDPR?
This is the most important part of the guide. Google's policy says you must obtain consent where the law requires it. Your privacy policy must also disclose that you share data with third parties such as Google.
Sending a customer's email to Google for advertising goes beyond the reason you first collected it, which was usually to deliver an order. Therefore a generic line in your checkout privacy notice often falls short. You should name the advertising purpose clearly and, where possible, collect a separate opt in.
In the EU and the UK, that usually points to consent under GDPR and UK GDPR. Other regions have their own rules. I do not give legal advice here. Instead, when my team prepares a list for a client, we always ask their legal adviser to confirm the basis first. For the website side, see my guide on building a GDPR compliant website.
A good test is simple. Could you show, for every row, when and how that person agreed? If not, the row should stay out of the file.
What is the EU user consent policy for Customer Match?
If your list includes people in the EEA, the UK or Switzerland, Google's EU user consent policy applies. According to Google's consent page, Google will not process data from EEA users without the required consent, and cannot use it for ad personalisation.
On the API side, two signals express this consent: ad_user_data, which covers sending user data for advertising, and ad_personalization, which covers personalised ads. Since March 2024, both fields need the value GRANTED before lists can serve in Europe. In the manual upload flow, you do not see these field names. Instead, the checkbox acts as your statement that you hold that consent.
There is another change to note. Since early March 2024, Customer Match lists no longer serve on Google Partner Inventory or third party exchanges in the EEA, the UK and Switzerland. So a store that sells into Europe should plan its lists around Google's own properties. The full steps live on the Google Ads consent help page.
How should you design your consent forms?
Consent for email marketing and consent for data sharing with ad platforms are not the same thing. Someone may happily accept your newsletter, yet that choice does not cover sending their email to Google. The reverse is also true.
For that reason, I recommend separate questions on your forms. A layout that works well looks like this:
- An optional, separate checkbox for personalised advertising.
- Privacy notice text that names ad partners such as Google and explains the purpose.
- A CRM field that stores the date and source of each consent.
- Finally, a routine that removes withdrawn contacts before the next upload.
With this setup, you can tick Google's checkbox with a clear conscience. Moreover, if a customer ever asks who gave their data to Google, you can answer with evidence. That answer protects your brand far more than any extra reach.
Why is my Customer Match rate so low?
I hear this question more than any other. A 10,000 row list that shows a much smaller audience is normal. Google names the main reasons: the user is not active on Google properties, has opted out of ad personalisation, or the data breaks the formatting rules.
In the lists I review, these issues come up again and again:
- Work email addresses, because people usually sign up to Google with a personal address.
- Phone numbers without a country code, or with a leading zero.
- Broken characters and hidden spaces from spreadsheet exports.
- Old addresses that nobody has used for years.
Adding a phone column next to email usually lifts the match rate. That said, every new column needs consent for that data too. The upload screen also shows error messages that explain which rows failed and why. Read them before you try again.
Why do list size and the 540 day limit matter?
Google recommends a list size of at least 100 users so that your ads can serve, and each file needs at least 100 records. On the Search Network, customer lists need at least 100 active users in the last 30 days.
The duration rule is also clear. Customer Match lists have a maximum membership duration of 540 days. Memberships added or refreshed more than 540 days ago stop counting. To stay eligible, a list needs at least 100 members added or updated within that window.
The practical result is this. If you upload a list once and forget it, it quietly stops working about a year and a half later. That is why my team refreshes lists monthly or weekly in the accounts we manage. New customers join on time, and people who withdraw consent leave on time.
How is Customer Match different from remarketing?
Both reach people who already know you, but their sources differ. Remarketing collects site or app visitors through tags and cookies. Customer Match starts from your own customer records instead, so the person does not need a recent visit.
| Feature | Customer Match | Remarketing |
|---|---|---|
| Data source | CRM, shop backend, member lists | Site or app tag |
| Who it covers | Customers who gave you their details | Recent site visitors |
| Cookie blocking impact | Lower | Higher |
| Consent question | Consent to share data | Consent to cookies and tracking |
| Typical use | Win back, cross sell, exclusions | Cart recovery, product reminders |
The two methods complement each other rather than compete. I cover the other half in my post on strengthening your sales funnel with remarketing.
Is Customer Match the same as enhanced conversions?
No. Both use hashed customer data, which is why people mix them up. Enhanced conversions hash details such as email at the moment of conversion to improve measurement. Its job is to connect a conversion to the right person, not to target anyone.
Customer Match, on the other hand, is purely a targeting and exclusion tool. You upload a list and use it as an audience. It has no direct effect on measurement.
Still, running both makes sense. Without accurate measurement, you cannot tell whether a list campaign really works. You can follow the setup steps in my enhanced conversions setup guide. Also, both features require data that people agreed to share, so your consent work serves both at once.
Which Customer Match segments should you build?
Several small lists built for clear goals usually beat one giant list. However, each list needs at least 100 active users, or your ads will not show. So plan your segments around the size of your customer base.
In my experience, these core segments work well:
- Buyers from the last 90 days: to exclude from acquisition campaigns.
- Customers inactive for a year: for win back offers.
- High value customers: for premium products or cross selling.
- Leads who got a quote but did not buy: to support B2B follow up.
- Newsletter subscribers: for interested people who have not bought yet.
Before you build segments, you need to know your customers well. The steps in my guide on target audience analysis help with that.
How do you use a customer list in Search campaigns?
In Search campaigns I use lists in two main ways. The first is observation. The campaign stays open, but you see clicks and conversions from existing customers on a separate line. As a result, you learn how much of your brand budget goes to people who already buy from you.
The second is exclusion. For example, you remove existing customers from a campaign focused on new customers. On brand keywords in particular, this split answers a hard question: are we paying for clicks from people who would come anyway?
Targeting only list members is possible for accounts with full access. In that case you can use broader keywords, because the audience is already narrow. But a small list also means low impression volume.
If you want to plan the account structure and budget split together, my team builds this setup as part of our Google Ads management service.
How can online stores benefit from Customer Match?
For ecommerce, the most valuable use is steering budget towards new customers instead of repeat buyers. Many stores already get a large share of Shopping and Performance Max conversions from loyal customers. Yet their reports rarely show that split.
Once you add a customer list as observation or as a signal, the split becomes visible. Then you can ask two questions. What does a new customer really cost me? And does my spend on existing customers bring extra sales, or would they buy anyway?
Seasonal lists also work well. For instance, a store that sells winter gear can build a list of last November's buyers and remind them in late October. My team reviews this kind of data setup during our ecommerce consulting work. Clean data in the shop backend makes every later step easier.
How can B2B companies use customer lists?
B2B lists tend to be small, so observation and exclusion are more realistic than pure targeting. For example, you put contacts from firms that received a quote but never signed into a separate segment. Then you watch their search behaviour and show them case studies on brand searches.
There is a catch, though. Most addresses in B2B lists are work emails, and work emails rarely match a Google Account. Therefore asking for a phone number on your forms, with the right consent, can lift matching noticeably.
I would also exclude existing clients from acquisition campaigns. In B2B, current clients often search your brand name for support or invoices. Paying for those clicks adds cost without adding sales.
How do you keep customer lists up to date?
Manual upload is fine for small businesses. However, repeating the same steps every month tends to slip. So first you name an owner and a schedule. Next, you set up a fixed export in your CRM or shop system that pulls only contacts with valid consent.
Google also offers automated routes such as the Google Ads API, upload partners and Data Manager, and it recommends Data Manager for new integrations. When my team automates this, we check three things:
- Anyone who withdraws consent drops out at the next sync.
- Test and staff records stay out automatically.
- Each upload leaves a log entry with its date and row count.
That way you never hit the 540 day limit by accident. You can also show exactly which data went to Google, and when, if anyone ever asks.
How should you write ads for list audiences?
The benefit of a list campaign is that you can shape the message around the customer relationship. However, the policy bans ads that imply you know personal details. So you write for the group, not for the individual.
For example, instead of "You bought this product last month", you use something general like "New season picks for our regular customers". Likewise, you keep names, cities and purchase history out of headlines.
My preferred approach is simple. Existing customers see news, complementary products or service reminders. Lapsed customers see a clear reason to come back. This split also raises ad relevance without making anyone uneasy. Before an ad goes live, it helps to ask the team one question: does this line hint at something personal?
What are the most common Customer Match mistakes?
Over the years I have seen the same mistakes in account after account. Most of them come from a process nobody owns, not from a lack of technical skill.
- Uploading lists with unclear consent: trade show lists, bought data and old campaign exports carry the most risk.
- Uploading once and forgetting: after 540 days the list quietly loses eligibility.
- Skipping exclusions: acquisition campaigns keep spending on existing customers.
- Using one giant list: customers of very different value see the same message.
- Personal ad copy: it leads to policy violations.
Use this list as a checklist. Above all, do not take the first point lightly. When a customer asks who gave Google their data, you need a ready answer. You can read the full rules in the Customer Match policy.
How do you measure Customer Match performance?
Good measurement starts with a comparable setup. Without it, you cannot tell whether a lift came from the list or from the season.
I track three things: conversion rate of the list audience, cost per acquisition against people outside the list, and the change in new customer share after exclusions. I also note the active audience size every month, because a shrinking list can explain a drop in results.
One more habit helps. Before you add a list to a campaign, collect two or three weeks of baseline data. Then your before and after comparison actually means something. For the core concepts, Google's help page about Customer Match is a good reference.
Are you ready to start with Customer Match?
To sum up, Customer Match is a strong tool, but it needs legal and technical groundwork first. Before you start, answer these questions:
- Does my account meet the policy, payment and spend requirements?
- Do I have consent to share data for advertising for every person on the list?
- Does my privacy notice name ad partners such as Google?
- Does my file follow the Google formatting guidelines?
- Who will refresh the list, and how often?
If you can say yes to all of them, start with a small exclusion test. It carries little risk and shows quickly how many of your customers already click your ads. From there, you can decide whether full targeting deserves more budget.




