Unsubscribing from spam? That’s exactly what scammers want!

Your inbox is probably bursting at the seams with junk—promo emails, sketchy job offers, feedback requests, and webinars you never signed up for. So hitting that unsubscribe link feels like the easiest way to declutter, right? Well, it turns out that little button could be a hacker’s new best friend.

Cybersecurity experts are now warning that clicking on those links might actually be doing more harm than good. A new Wall Street Journal report breaks down how fraudsters are using unsubscribe buttons to figure out which email addresses are active—basically turning your click into a green light for more spam, phishing, or worse.

What the email unsubscribe scam actually looks like

Here’s how it goes: cybercriminals send emails that look like regular promos or newsletters. They sneak in fake unsubscribe links that don’t remove you from any list—instead, they quietly track your behaviour, redirect you to phishing sites, or ask you to confirm your unsubscribe by typing in your email or password. The moment you interact, they know your inbox is real—and valuable.

Some of these emails might seem harmless, but the trick lies in their design. According to DNSFilter, nearly one in every 644 unsubscribe links leads to a shady or dangerous site. That’s more common than you’d think, especially when you’re swimming in spam.

How to safely clean up your inbox

Instead of clicking every unsubscribe link you see, your best bet is to use the tools already baked into your inbox. Services like Gmail and Outlook offer trusted unsubscribe options right at the top of promotional emails—these are far more secure and don’t involve leaving your inbox.

If something feels off, it’s better to mark it as spam. This not only kicks it out of your inbox but also helps train the system to catch similar stuff in the future. Emails from sources you don’t recognise should be left alone entirely—don’t click, don’t reply, just get rid of them.

For an extra layer of protection, tools like Apple’s “Hide My Email” or browser privacy extensions can keep your real email hidden from marketers and scammers alike. And always make sure your email app and antivirus software are fully updated so you’re protected from newer threats.

Think before you click

In a world full of shady emails, sometimes the smartest move is doing nothing at all. That unsubscribe link might seem like a quick fix, but it could open the door to a flood of spam—or worse. Let your email client do the heavy lifting, and keep your inbox (and your data) safe.