Why you should be careful before clicking the ‘unsubscribe’ button on emails in your inbox

Inboxes are chaos central these days, swarming with emails offering crypto tips, flash sales, and the annoying LinkedIn emails of who looked up your profile. The usual exit route? That trusty “unsubscribe” link. But according to cybersecurity experts, that link could do more harm than good, as per a report by The Wall Street Journal.

The report quotes cybersecurity firm DNSFilter, which suggests that one in every 644 unsubscribe clicks leads to a potentially malicious website. The danger? Clicking tells scammers your email is active and monitored—essentially raising your hand in a crowd of bots and burner accounts.

“You’ve left the safe, structured environment of your email client and entered the open web,” TK Keanini of DNSFilter told The Wall Street Journal. This can expose users to phishing sites, malware downloads, or shady data harvesting setups. Some unsubscribe pages ask for login credentials, which is an immediate red flag and something one should never do.

According to the report, even legitimate-looking unsubscribe pages can be problematic. Michael Bargury of Zenity told WSJ that re-entering your email on such pages just confirms to spammers that they’ve got a live one.