What Is Double Opt-In?
TL;DR
Double opt-in is a subscription flow where a contact submits an address and then confirms it by clicking a link in a confirmation email, so nothing else is sent until the confirmation arrives. It proves both that the address works and that the person behind it asked to hear from the sender.
What does double opt-in protect against?
Four things at once. Typos in submitted addresses, addresses entered by someone other than their owner, spam traps and role addresses harvested into a signup form, and later disputes about whether consent was given, because the confirmation click is dated evidence.
The effect on list quality compounds. A list built this way starts smaller and stays cleaner, so its complaint volume and bounce volume both stay low, and those are the two inputs receiving providers weigh most heavily.
Does double opt-in apply to cold outreach?
No, and the reason is definitional rather than practical. A cold email goes to someone who never subscribed, so there is no signup to confirm. The quality controls that double opt-in provides for a marketing list are supplied in outbound by targeting and by address verification instead.
Keeping the two apart matters for compliance reasoning. Consent-based regimes govern the subscribed list, and cold outreach relies on a different lawful basis and a different set of obligations, so applying the rules of one to the other produces the wrong answer in both directions.
Frequently asked questions
GDPR does not name it. It requires that consent be freely given, specific, informed and unambiguous, and that the controller be able to demonstrate it. Double opt-in is the most common way to produce that demonstration, which makes it strong evidence rather than a legal requirement.