Also known as: Confirmed Opt-in, Verified Opt-in, Closed-loop Opt-in
Double opt-in is a two-step subscription process. A user first submits their email through a web form, then must click a confirmation link sent to that address before they are added to the active mailing list. Only after that click does the subscription count as valid.
The second step proves two things at once: the email address is real and deliverable, and the person actually controls the inbox and consented. That single confirmation click removes fake addresses, typos, and malicious sign-ups that would otherwise poison your list.
It contrasts with single opt-in, where submitting the form is enough to be subscribed. Single opt-in captures more contacts but lets in spam-trap addresses and hostile injections; double opt-in captures fewer but cleaner contacts, protecting your sender reputation and deliverability over the long run.
For example, an affiliate offering a free trading guide might see 1,000 form submissions, of which 780 confirm. The 220 who never click are exactly the fake, mistyped, or half-interested addresses that would have dragged down open rates and risked spam-trap hits — so the confirmed 780 is the list worth keeping.
When a user submits the sign-up form, the email platform holds them in a pending state rather than adding them live. It immediately sends a confirmation email containing a unique verification link. Clicking that link confirms the address and moves the contact to the active list; the platform also timestamps and logs the confirmation as a record of consent.
If the link is never clicked, the contact stays pending and receives no marketing — which is precisely how spam traps and fake addresses are filtered out before they can damage deliverability. Well-built flows redirect the confirmer to a branded 'thank you' page and often deliver the promised lead magnet only after confirmation, giving the user a reason to complete the second step.
Because every active subscriber has a logged confirmation, the partner holds provable, closed-loop consent — the audit trail regulators and mailbox providers both reward.
The contact enters a pending state; they are not yet on the active list.
A unique verification link goes to the address immediately after submission.
The click verifies the address, records consent with a timestamp, and activates the subscription.
Redirect to a branded thank-you page and release the promised guide only after confirmation.
Contacts that never click stay pending and receive no marketing, keeping the list clean.
Why it matters for partnership: Double opt-in builds a high-quality, compliant list that brokers trust. It eliminates spam traps and fake emails, protects sender reputation, and provides documented consent — a strong defense under GDPR and CAN-SPAM.
An affiliate promoting a Pepperstone demo account offers a free strategy guide behind a double opt-in form. Of 1,000 submissions, 780 confirm and receive the guide. Over the next quarter that confirmed list holds a much lower bounce rate and higher open rate than the affiliate's older single opt-in list, and its clean sender reputation keeps broker-approved promos landing in the inbox rather than spam.
| Attribute | Double Opt-in | Single Opt-in |
|---|---|---|
| Steps to subscribe | Form + confirmation click | Form only |
| List size | Smaller | Larger |
| List quality | High, verified | Lower, unverified |
| Spam-trap risk | Very low | Higher |
| Consent proof | Logged and timestamped | Weaker |
Redirect users to a custom 'Almost there!' page instructing them to check their spam folder for the confirmation link, and deliver the promised guide only after they confirm.
Relying on single opt-in and suffering a ruined sender reputation when competitors or bots inject thousands of fake emails into your unprotected forms.
GDPR requires provable, freely given consent but does not name double opt-in specifically. Double opt-in is the most reliable way to produce that proof, which is why many EU-facing partners adopt it.
Yes — typically 15% to 30% of sign-ups never confirm. Those are mostly fake, mistyped, or low-intent addresses, so the smaller list is usually higher quality and performs better.
They stay in a pending state and receive no marketing emails. This is how double opt-in filters out spam traps and invalid addresses before they can hurt deliverability.
Authenticate your domain with SPF, DKIM, and DMARC, send from a recognizable address, and warn users on the thank-you page to check their spam folder for the link.
Single opt-in can suit low-risk lead magnets where volume matters and injection risk is low. For financial marketing, the compliance and deliverability benefits of double opt-in usually outweigh the smaller list.
Generally yes. A verified, consented list means fewer spam complaints and lower compliance risk, both of which brokers watch closely when evaluating affiliate partners.