Double opt-in is a two-step email subscription process in which a new subscriber first completes a signup form, then receives an automated confirmation email and must click a verification link before being fully added to the mailing list. The first step is the initial signup: the person enters their email address on a form or landing page. The second step is the confirmation: they receive an email asking them to verify their address by clicking a link. Only after clicking that link are they added as an active subscriber. If they do not click, they are either left in a pending state or removed from the list after a set period. This contrasts with single opt-in, where the person is added to the list immediately upon form submission.
Double opt-in has two primary advantages. First, it verifies that the email address is real and belongs to the person who submitted the form, which reduces bounce rates and protects list quality. Second, it provides a clear record of explicit consent, which is valuable for demonstrating GDPR compliance and defending against spam complaints. The trade-off is that the confirmation step reduces the total number of subscribers added, as some people do not complete the second step.
For B2B marketers, double opt-in is generally considered best practice, particularly for lists used for marketing communications. The reduction in raw subscriber volume is more than offset by the improvement in list quality: contacts who complete double opt-in have demonstrated genuine intent, which typically translates into higher engagement rates and lower spam complaint rates than single opt-in lists of comparable size.
GDPR does not explicitly mandate double opt-in, but it requires that consent be freely given, specific, informed, and demonstrated by an unambiguous positive action. Double opt-in provides strong evidence of all of these: the subscriber actively confirmed their address and their intention to subscribe. While single opt-in with clear consent language on the form can also satisfy GDPR, double opt-in creates a more defensible audit trail. Many legal advisors recommend it as best practice for GDPR compliance.
Yes. Some percentage of people who complete an initial signup form will not click the confirmation link. Research suggests the dropout rate varies widely, from under 5 percent to over 30 percent, depending on how quickly the confirmation email is sent, how compelling the confirmation email subject line is, and how much the subscriber values what they signed up for. The contacts who do complete double opt-in tend to be more engaged and more valuable than those who drop off, so the reduction in volume is generally offset by improved list quality.
The confirmation email should be sent immediately after the initial signup, have a clear subject line that makes the action required obvious (such as ‘Please confirm your subscription to [Publication Name]’), contain a single prominent call to action to confirm the subscription, and briefly remind the recipient what they signed up for and what they can expect to receive. Keep it short and focused: the goal is a single click. Include a note that if they did not sign up, they can ignore the email and will not receive anything further.
Email marketing held its ground in 2025. Open rates edged upward, click behaviour recovered, and marketers spread their campaigns more evenly across the year.
Spain's 2025 GDMA email benchmark shows a major deliverability turnaround, but opens, clicks and spam complaints reveal where the real work still lies.
Every year, the GDMA Email Benchmark gives us a rare look across borders: billions of emails, thirty-plus countries, one shared dataset.
The French CNIL and Italy's Garante have both published rules on tracking pixels in email. We explain what's changed and how to adapt or prepare.
EMAS '26 is the email marketing event with sessions by international speakers on marketing automation. And Spotler is there too.
With more and more projects being shipped within days rather than weeks, privacy is an often overlooked element of your app. Learn how to make the difference.
Discover what the US CLOUD Act means for GDPR, data sovereignty and choosing between US and EU cloud or SaaS providers.
Come to CTRL+SHIFT Live on June 25. iO shows how to convert marketing, sales & service into one intelligent revenue engine.
Visit Spotler at NIMA Marketing Day, June 11, 2026. Get inspired, network with peers, and stay up to date on everything moving in marketing.
A practical take on the Litmus 2026 report, covering AI, email strategy, team pressure, and what’s driving results now.