How to Build an Email List From Scratch (Without Buying One)

A list is not a count of addresses. It is a count of people who will still be opening your mail in eighteen months, and those two numbers diverge fast. Every shortcut that inflates the first one at the expense of the second costs more than it returns, because mailbox providers score you on how recipients react, not on how many of them there are.

What a bought list actually does to you

The legal problem is the obvious one. Under GDPR Article 4(11), consent has to be a "freely given, specific, informed and unambiguous" act by the person themselves, which a purchase from a data broker cannot manufacture retroactively. Under CAN-SPAM the bar is lower, but you still owe every recipient a working opt-out honored within 10 business days and a valid physical address.

The operational problem is worse and arrives sooner. Aged lists are dense with abandoned addresses, and mailbox providers recycle some of those into spam traps precisely to catch senders who never got permission. Hitting them, plus the complaint rate from people who do not recognize you, pushes you toward the 0.3% spam rate ceiling that Google and Yahoo have enforced for bulk senders since February 2024. Reputation is domain-level and slow to rebuild, so a single bad import can degrade the deliverability of every legitimate email you send for months.

Offer something worth an address

People price their inbox realistically. The exchange has to be concrete, immediate, and narrow enough that the person can tell in two seconds whether it is for them. A "free guide to marketing" converts badly; a "checklist for passing a food hygiene inspection" converts well to exactly the people you want, and badly to everyone else, which is the point.

• E-commerce: a first-order discount, delivered as a unique code in the first email rather than shown on the form, so the address has to be real.
• Service businesses: a checklist, calculator, or template tied to the decision the customer is about to make.
• Restaurants and local retail: a loyalty perk or event invite, collected at the point of sale where intent is highest.
• B2B: a short email course or a benchmark report, which also gives you a natural reason for the next four sends.

Reduce the form to the smallest honest ask

Every field is a decision point. Ask for the email address, and add a first name only if you will actually use it. Fields you collect "for later" are fields that cost you signups now and sit empty forever.

Placement matters more than design. An inline form in the footer catches people who read to the end, an exit-intent overlay catches people leaving, a dedicated landing page is what you link to from everywhere else, and the checkout opt-in catches people at the moment of maximum trust. Run at least the footer form and the checkout opt-in before you spend an afternoon styling a popup.

Double opt-in, and when it is worth the cost

Double opt-in sends a confirmation link the subscriber must click before you add them. You lose some signups: people mistype addresses, the confirmation lands in Promotions, they get distracted. What you gain is a list with no typo addresses, no bot signups, no spam traps, and a timestamped consent record that is genuinely useful if anyone ever asks how you obtained an address.

Turn existing touchpoints into signup points

Most small businesses already touch more people than their list contains. The gap is that nobody is asked. Add a signup link to your email signature and to every social bio, put a QR code on packaging, receipts, and table tents, and ask at the counter. None of these are clever; all of them compound, and together they usually outperform whatever growth tactic you were researching instead.

One caveat on existing contacts: you can import people who already gave you permission, such as customers who opted in at purchase, but "I have their business card" is not permission. If you are unsure about a batch of old contacts, send one re-permission email to it and keep only the people who respond. A small confirmed list beats a large ambiguous one, and it protects everything you send afterward.

Written by

Valter Brandt

Chief Marketing Officer

Valter Brandt is the Chief Marketing Officer of ThisCom, working with clients across the United States and internationally. He has led marketing strategy through the major shifts in social advertising, mobile, content marketing, programmatic media, and marketing automation.

All articles by Valter Brandt →