Email Marketing
How to Build an Email List From Scratch (Without Buying One)

A list is not a count of addresses. It is a count of people who will still be opening your mail in eighteen months, and those two numbers diverge fast. Every shortcut that inflates the first one at the expense of the second costs more than it returns, because mailbox providers score you on how recipients react, not on how many of them there are.
What a bought list actually does to you
The legal problem is the obvious one. Under GDPR Article 4(11), consent has to be a "freely given, specific, informed and unambiguous" act by the person themselves, which a purchase from a data broker cannot manufacture retroactively. Under CAN-SPAM the bar is lower, but you still owe every recipient a working opt-out honored within 10 business days and a valid physical address.
The operational problem is worse and arrives sooner. Aged lists are dense with abandoned addresses, and mailbox providers recycle some of those into spam traps precisely to catch senders who never got permission. Hitting them, plus the complaint rate from people who do not recognize you, pushes you toward the 0.3% spam rate ceiling that Google and Yahoo have enforced for bulk senders since February 2024. Reputation is domain-level and slow to rebuild, so a single bad import can degrade the deliverability of every legitimate email you send for months.
A purchased list is not a shortcut to an audience. It is a loan against your sender reputation at an interest rate you do not get to see until the bill arrives.
Offer something worth an address
People price their inbox realistically. The exchange has to be concrete, immediate, and narrow enough that the person can tell in two seconds whether it is for them. A "free guide to marketing" converts badly; a "checklist for passing a food hygiene inspection" converts well to exactly the people you want, and badly to everyone else, which is the point.
- E-commerce: a first-order discount, delivered as a unique code in the first email rather than shown on the form, so the address has to be real.
- Service businesses: a checklist, calculator, or template tied to the decision the customer is about to make.
- Restaurants and local retail: a loyalty perk or event invite, collected at the point of sale where intent is highest.
- B2B: a short email course or a benchmark report, which also gives you a natural reason for the next four sends.
Reduce the form to the smallest honest ask
Every field is a decision point. Ask for the email address, and add a first name only if you will actually use it. Fields you collect "for later" are fields that cost you signups now and sit empty forever.
Placement matters more than design. An inline form in the footer catches people who read to the end, an exit-intent overlay catches people leaving, a dedicated landing page is what you link to from everywhere else, and the checkout opt-in catches people at the moment of maximum trust. Run at least the footer form and the checkout opt-in before you spend an afternoon styling a popup.
Double opt-in, and when it is worth the cost
Double opt-in sends a confirmation link the subscriber must click before you add them. You lose some signups: people mistype addresses, the confirmation lands in Promotions, they get distracted. What you gain is a list with no typo addresses, no bot signups, no spam traps, and a timestamped consent record that is genuinely useful if anyone ever asks how you obtained an address.
| Situation | Model | Why |
|---|---|---|
| New domain, no sending history | Double opt-in | You cannot afford early complaints while reputation is being established. |
| Any EU or UK audience | Double opt-in | Gives you the demonstrable, unambiguous consent record the GDPR expects. |
| Point-of-sale or event capture | Double opt-in | Handwritten and hurried entries produce the most invalid addresses. |
| Checkout opt-in on an established store | Single opt-in | The address is already verified by the transaction, and intent is documented. |
| Paid acquisition to a lead magnet | Double opt-in | Paid traffic attracts throwaway addresses; confirming filters them before you pay to mail them. |
Turn existing touchpoints into signup points
Most small businesses already touch more people than their list contains. The gap is that nobody is asked. Add a signup link to your email signature and to every social bio, put a QR code on packaging, receipts, and table tents, and ask at the counter. None of these are clever; all of them compound, and together they usually outperform whatever growth tactic you were researching instead.
One caveat on existing contacts: you can import people who already gave you permission, such as customers who opted in at purchase, but "I have their business card" is not permission. If you are unsure about a batch of old contacts, send one re-permission email to it and keep only the people who respond. A small confirmed list beats a large ambiguous one, and it protects everything you send afterward.
Key takeaways
- ✓Sender reputation is scored on recipient reaction, so list quality determines whether list size is worth anything.
- ✓GDPR Article 4(11) requires a clear affirmative act; a purchased list cannot supply one, and spam traps in aged lists do lasting damage.
- ✓Make the lead magnet narrow. A magnet that converts everyone is a magnet that segments no one.
- ✓Tag every subscriber with the source that brought them in. You cannot reconstruct it later.
- ✓Use double opt-in on new domains, EU audiences, and paid traffic. Single opt-in is defensible at verified checkout.
Related reading
Sources
- Art. 4 GDPR: Definitions (consent, Article 4(11)), EU General Data Protection Regulation
- CAN-SPAM Act: A Compliance Guide for Business, US Federal Trade Commission
- Email sender guidelines (bulk sender requirements), Google Workspace Admin Help (2024)
- Sender best practices, Yahoo Sender Hub (2024)

Valter Brandt
Chief Marketing Officer
Valter Brandt is the Chief Marketing Officer of ThisCom, working with clients across the United States and Europe. He has led marketing strategy through the major shifts in social advertising, mobile, content marketing, programmatic media, and marketing automation.
All articles by Valter Brandt →Frequently asked questions
How fast can I grow an email list from scratch?+
Slower than the case studies suggest, and the speed depends almost entirely on existing traffic. A site with a few hundred visitors a month and one good lead magnet typically converts in the low single digits of those visitors, so the first hundred subscribers takes weeks. Point-of-sale and checkout capture usually outpace web forms for local businesses, because intent is already established.
Is single or double opt-in better?+
Double opt-in for a new sending domain, any EU or UK audience, paid traffic, or anything collected by hand at an event, because those are the situations that produce invalid addresses and complaints. Single opt-in is reasonable at checkout on an established store, where the transaction already verified the address. The signups you lose to confirmation are disproportionately the ones that would never have engaged.
What is a good lead magnet for a local business?+
Something redeemable in person and soon: a first-visit discount, a loyalty enrollment, or an invitation to an event you are actually holding. Local audiences discount abstract downloads heavily. Deliver a unique code in the confirmation email rather than displaying it on the form, so the address has to be real to be worth anything.
Can I import contacts I already have?+
Only where you have permission, which means people who opted in or who bought from you and were told they would receive email. Business cards, LinkedIn connections, and scraped addresses do not qualify. If a batch is ambiguous, send it one re-permission email and keep only those who confirm, since the alternative risks spam traps and complaints on every subsequent send.
Related articles
Email Marketing for Small Business: The Complete 2026 Guide
The famous $36-per-$1 return is a self-reported survey figure, not a promise. Here is how a small business actually builds an email program that reaches the inbox and drives revenue, from list to automation to metrics.
Read →BrandingBranding for Small Business: The Complete Guide
Branding is not just a logo, it is the reputation and promise customers associate with you. Here is how a small business builds a brand that earns trust and commands a premium.
Read →Email AutomationWelcome Email Sequences That Convert New Subscribers
The welcome sequence is the highest-engagement email you will ever send. Here is a proven structure to turn new subscribers into customers automatically.
Read →Related reading
- Email Automation
Email Automation 101: Workflows Every Small Business Should Set Up
Automated email flows run 24/7 and drive a large share of email revenue. Here are the core workflows every small business should set up first.
- Email Automation
Abandoned Cart Emails: Recover Lost Revenue on Autopilot
Most online carts are abandoned before checkout. A well-built abandoned-cart flow recovers a meaningful share of that revenue automatically.
- Email Marketing
Email Segmentation: Send the Right Message to the Right People
Blasting the same email to everyone is the fastest way to train your list to ignore you. Segmentation lifts engagement and revenue dramatically.
- Email Marketing
Writing Email Subject Lines That Get Opened (With Examples)
The subject line decides whether your email is read or ignored. Here are the principles and proven formulas that lift open rates, plus what to avoid.
- Deliverability
Email Deliverability: How to Stay Out of the Spam Folder
The best email in the world is worthless in the spam folder. Deliverability is infrastructure, here is how small businesses earn and protect inbox placement.