How to build an email list

No list, no campaign. But not all lists are equal: 10,000 addresses collected through a purchase can do more damage than 500 gathered the honest way. Here is what actually works, what destroys your domain, and why validation matters regardless of how you collected the data.

Legitimate methods: the list that makes money

Every legitimate approach comes down to one thing: the person gives you their email address and knows they will receive messages. That is opt-in. Everything else is a trade-off with varying degrees of risk.

1. Opt-in forms on your website

The most obvious channel, and the most underused. Most subscription forms say something like "Subscribe to our newsletter" and convert at around 0.5–1%. That is baseline noise.

What actually moves the number:

• A concrete promise. Not "stay in the loop," but "every week: 3 conversion case studies." The reader needs to know what they are getting.
• Placement. A form buried in the footer is invisible. Forms after useful content, mid-article, or on an exit-intent popup convert 2–5x better.
• Double opt-in. Yes, you lose 15–20% of signups at the confirmation step. What remains is clean: no typos, no fake addresses, no bots.

A form with a specific offer and double opt-in converts at 3–7% on traffic that already knows your product. This comes from real B2B project data, not theory.

2. Lead magnets

The visitor leaves their email in exchange for something useful: a checklist, template, calculator, or mini-course. The operative word is useful. A 40-page PDF nobody will read is not a lead magnet; it is clutter in someone else's Downloads folder.

Good lead magnets solve one specific problem in under five minutes. A few examples that work:

• Cold outreach email template (Google Docs, copy-ready)
• Ad campaign ROI calculator (Google Sheets)
• 12-point email launch checklist (single-page PDF)

Landing pages with a lead magnet convert at 20–30% on average, versus 1% for a plain subscription form. The gap comes from specificity and immediate value.

3. Webinars and online events

Webinar registration is opt-in with a higher level of intent. The person did not just drop their email for a PDF; they blocked out time in their calendar. These contacts open emails 2–3x more often than subscribers from standard forms.

Production quality does not matter much. A 30-minute Zoom breakdown of one real case with ten attendees is enough. What matters is that the topic hits a specific pain point your audience has, not a broad "trends 2026" overview.

4. Social media and messaging apps

Telegram channels, LinkedIn, Instagram — all of these are entry points. A social follower is not an email subscriber, though. You need a bridge: content available only by email.

A pattern that works: publish 80% of your content publicly and reserve 20% for email subscribers. Every post gets a link to the lead magnet or the signup page, but framed concretely: "In Friday's email I broke down how we pushed open rate from 12% to 34% — link in the comments."

The gray zone: scraping and buying lists

Now for the part that polite marketing blogs tend to skip. Scraping and buying lists is real. Plenty of companies do it. Many of them regret it later.

Scraping: harvesting emails from public sources

A script crawls websites, LinkedIn profiles, and company directories to collect email addresses. Technically straightforward. Legally, a minefield.

• GDPR (Europe): fines up to 4% of annual global turnover. These are not empty threats. In 2024, Italy's data protection authority fined a company €2.6 million for scraping LinkedIn.
• CAN-SPAM (US): technically permits unsolicited email, but recipients can report it, and your domain ends up on the Spamhaus blocklist.
• Data quality: 30–50% of scraped addresses are invalid. Stale addresses, typos, catch-all domains. One campaign to that list can push your bounce rate above 15%, and mailbox providers will start filtering everything you send.

Buying ready-made lists

"100,000 business email addresses from New York for $200." Sounds tempting. In practice, a list like that contains:

• 20–40% invalid addresses (non-existent domains, full mailboxes)
• 5–10% spam traps — addresses planted by mailbox providers to catch senders who do not clean their lists
• Addresses belonging to people who have never heard of you and will hit "Report spam" on the first message

One campaign to a purchased list can destroy a sending reputation you spent years building. Recovery takes 3–6 months, if it is possible at all. This is not a savings play; it is Russian roulette.

If you decide to take the risk anyway, at least do not blast the whole list at once. Break it into segments of 200–500 addresses, warm up the domain gradually, and watch bounce rate and complaint rate closely. And validate the list before the first send.

Why validation is mandatory after any collection method

Even a list built through double opt-in, lead magnets, and live webinars will have 10–15% bad addresses within six months. People change jobs, companies shut down, free mailboxes get abandoned.

What validation checks:

• Syntax — typos like gmial.com instead of gmail.com
• Domain existence — whether MX records exist and the domain accepts mail
• Mailbox existence — SMTP verification without sending an actual message
• Spam traps — addresses that instantly land you on a blocklist when you hit them
• Role-based addresses — info@, support@, admin@ have low engagement and high complaint rates

The rule is simple: validate before any large send if more than three months have passed since the last check. Always validate if the list came from an external source.

Removing 15% invalid addresses before sending is not a loss. It protects the 85% that can actually become customers.

The strategy in short

Three points that cover everything:

1. Collect through opt-in. Lead magnets, webinars, content — anything where the person consciously gives their email. It is slower, but it is the only path to a list that generates revenue rather than problems.
2. Avoid the gray zone. Scraping and purchasing lists are technical debt in email marketing. The bill comes due eventually: a blocklist, a fine, or just zero deliverability.
3. Always validate. Regardless of how you collected the list, check it before sending. Five minutes of work can save months of reputation recovery.