Affiliate marketing · Glossary

DOI Double opt-in

In plain words

DOI, double opt-in, means a sign-up only counts after the user confirms it, usually by clicking a link in an email. One extra step, so fewer people finish, but every lead that does is real and verified. Advertisers pay more for it, and your traffic needs enough intent to carry users through the confirmation.

Definition

Double opt-in (DOI) is a registration flow with a confirmation step: after submitting a form, the user receives an email (sometimes an SMS) and must click a link or enter a code before the registration is complete. In affiliate offers the acronym marks when the payable conversion fires: a DOI offer pays only for confirmed registrations, while its single opt-in (SOI) counterpart pays on form submit. The confirmation filters out typos, fake addresses, bots and people who were never interested, which is why DOI leads approve at high rates and carry higher payouts.

The trade-off is volume. A share of users who submit the form never open the confirmation email, because it lands in spam, arrives late or simply gets ignored; DOI conversion rates are commonly a third to a half of SOI rates on the same traffic. The affiliate’s job on DOI therefore extends past the form: the confirmation email must arrive and be clicked, so the advertiser’s deliverability and the clarity of the on-page instruction (“check your inbox now”) are part of the funnel you are measured on.

DOI is also the compliance-friendly flow. Under GDPR, consent must be freely given, specific, informed and unambiguous, and the controller must be able to demonstrate it; a confirmed opt-in is the simplest evidence that the person who owns the address agreed. That is why Mailchimp kept double opt-in as the default for EU customers when it switched everyone else to single opt-in on October 31, 2017. The rules on bulk email that Google and Yahoo began enforcing in February 2024 push in the same direction: senders of 5,000 or more messages a day to Gmail must authenticate with SPF, DKIM and DMARC, offer one-click unsubscribe and keep spam complaints below 0.3%, and a list built on confirmed addresses is the easiest way to stay under that line.

For the affiliate the choice between DOI and SOI offers of the same product comes down to traffic intent and approval. Warm traffic (search, content, email) converts well enough on DOI to collect the higher payout; cold traffic (push, pop) often cannot carry users to the inbox and does better on SOI despite the scrub. The worked example on the SOI page shows how the scrub rate, not the headline payout, decides between them.

In practice

Case from the industry

Mailchimp’s 2017 switch and the EU exception

On October 31, 2017 Mailchimp changed the default for new signup forms from double opt-in to single opt-in, arguing that the confirmation step cost its customers subscribers. The decision was widely criticised by deliverability specialists, and within a day the company announced that accounts with a primary contact address in the EU would keep double opt-in as the default, to help those customers document consent ahead of GDPR enforcement in May 2018.

The episode is a clean summary of the DOI trade-off at scale. A platform optimising for list growth chose single opt-in; the same platform, facing a regulation that requires demonstrable consent, chose double opt-in for the market where the proof matters. The 2024 Gmail and Yahoo bulk-sender requirements, with a hard 0.3% spam-complaint ceiling, reinforced the second choice: a confirmed list complains less. For an affiliate running DOI offers, the practical reading is that advertisers who insist on DOI are usually those for whom consent evidence and deliverability are business-critical, and they tend to approve confirmed leads at very high rates.

Common mistakes

  • Sending cold, low-intent traffic to DOI offers. Users from push or pop rarely open a confirmation email; the conversion rate collapses and the higher payout never materialises.
  • Ignoring the confirmation step on your own pages. Tell users to check their inbox and spam folder; a thank-you page that says nothing loses confirmations.
  • Comparing DOI and SOI by payout. Compare payout times conversion rate times approval rate on your traffic; the answer differs by source.
  • Assuming DOI leads cannot be scrubbed. They approve at high rates, but duplicates, out-of-GEO users and forbidden traffic types are still declined.
  • Treating the confirmation email as the advertiser’s problem only. Ask about their deliverability; if confirmation emails land in spam for a GEO, your conversion rate there will be a fraction of the network average.

Go deeper

FAQ

What is the difference between DOI and SOI?

DOI requires the user to confirm the registration through an email link or a code; SOI counts the registration on form submit. DOI converts less and pays more; SOI converts more, pays less and is scrubbed more.

Why do DOI offers pay more?

Because the confirmation proves the address is real and the user is interested, so the advertiser receives a lead it can use and can document consent. Higher lead quality is priced into the payout.

Is DOI required by GDPR?

GDPR does not name double opt-in, but it requires consent to be demonstrable, and a confirmed opt-in is the most common way to demonstrate it. Many EU-facing advertisers run DOI for that reason.

Which traffic works for DOI offers?

Traffic with intent and a working inbox habit: search, content sites, email lists and well-targeted social. Cold push and pop traffic usually performs better on SOI versions of the same offer.

Sources

  1. Why single opt-in? And an update for our EU customers — Mailchimp (mailchimp.com, 2017)
  2. Mailchimp changes signup process — Word to the Wise (wordtothewise.com, 2017)
  3. Email sender guidelines — Gmail Help (support.google.com, 2024)
  4. Sender requirements and recommendations — Yahoo Sender Hub (senders.yahooinc.com, 2024)
  5. Regulation (EU) 2016/679 (GDPR), Article 7 and Recital 32 on conditions for consent — EUR-Lex (eur-lex.europa.eu, 2016)

References are listed as plain text on purpose; look them up by title and publisher. Updated: 2026-10-05.

Terms are the easy part.

Run them inside a network with real tracking, roughly 48-hour payouts and a dedicated manager.

Join the network