Double opt-in: what the confirmation email costs you, and what it buys
Lawful without it in the UK, and some lists still need it. The question is whether the sign-ups you lose are worth more than the junk you keep out.
- 028Double Opt-In
- A subscription method where users confirm their email address before being added to a list, ensuring valid and engaged subscribers. Double opt-in reduces spam complaints and improves deliverability by ensuring that only legitimate subscribers are added to your email list.
- 147Verification Email
- An email sent to confirm a subscriber's email address, often used in double opt-in processes.

- Also called
- Confirmed opt-in, with a verification email doing the confirming
- Required in the UK?
- No. A clear single opt-in is lawful
- Set in Klaviyo
- Per list, so check every list your forms feed
- Best for
- Forms that attract bots, typos or prize hunters
Not a legal requirement, a list quality decision
We get it, double opt-in sounds like the compliant option. In the UK it isn't required. Neither UK GDPR nor PECR asks for a confirmation email, as long as your opt-in is clear and you keep the record. That's our reading, not legal advice.
Google does recommend confirming each address before you subscribe it, in its sender guidelines. So it's a list quality call, and it comes down to a trade.
| What you give up | What you get |
|---|---|
| Sign-ups who never click the confirmation | No typos, dead domains or made-up addresses |
| A welcome flow that waits for the click | Proof the owner of the address said yes |
| One more email to design and test | Bot sign-ups stopped at the door |
Where double opt-in earns its keep
- Giveaways and competitions, where people want the prize, not the emails
- Forms bots have found and started filling with real people's addresses
- A list rebuilding after deliverability trouble
- Any source that's sent you a wave of typos or fakes before
It's rarely worth it at checkout. The customer has just used that address to get an order confirmation, which is about as verified as an address gets.
Writing a confirmation email people actually click
It's the most important email nobody designs. Klaviyo sends it the moment someone signs up to a double opt-in list, and nobody joins until they click, so the welcome flow waits too.
- Say what to do in the subject line, in plain words
- Send it from the name they saw on the form a moment ago
- Put one button near the top, with nothing competing with it
- Say what's waiting after the click, whether that's a welcome code or the first email
- Test it in Gmail, Outlook and Apple Mail before the form goes live
Klaviyo sets double opt-in per list. It's easy to switch it on for the pop-up and forget the footer form.
Related terms
FAQs

Does double opt-in improve deliverability?
It improves what gets in. Fewer typos, fewer fake addresses, fewer traps, and a list of people who acted twice to join. It doesn't keep the list healthy afterwards. People still go quiet, so you still need sunset rules, whichever way they signed up.
Why aren't people clicking our confirmation email?
Usually one of three things. It landed in Promotions or spam, it arrived late, or it didn't say why anyone should click. Send it instantly, say plainly what's waiting after the button, and test it on the inboxes your customers actually use before blaming the form.
Does a confirmed sign-up prove consent?
It's strong evidence the owner of the address agreed, with a timestamp attached. It doesn't fix a bad form. If the wording was vague or bundled into something else, a confirmation click only proves they clicked. Keep the form wording on file beside the confirmation record.
Rather we explained it on your own account?
Bring your Klaviyo account to a growth consultation. We'll walk through what this means for your numbers, in plain English, and what we'd fix first.


Half an hour with Theo, our founder.
We're all about relationships built on trust, mutual respect and a shared vision for success. If that sounds like your vibe, let's make some waves together 🌊



