Before You Unsubscribe, Know This First
By: Jim Stickley and Tina Davis
November 4, 2025
Bad actors are everywhere these days, and now they’re behind the latest “unsubscribe” email phishing scam. We all know how invasive spam emails are, and keeping them from flooding your inbox is but a dream. And now, clicking the unsubscribe button is a devious way to infect your device with malware.
Here’s what you need to know.
DNSFilter analysis found more than one of 644 links to subscriptions lead to malicious websites. Knowing this, don’t click any email links unless you absolutely trust the sender and especially question the safety if the link is unexpected…even if you do know the sender. The same goes for emails using urgency or panic to get a reaction; so stop and think before you click. Better deleted means better safe than sorry.
The “Problem” Click
Hackers are now setting up bogus “Unsubscribe” buttons that when clicked redirects you to a fake website to “opt out” of the mailing list. That’s when info-stealing malware likely gets installed on your device. The malware steals your PII, passwords and other useful information attackers use to do damage. That information is enough for account takeovers (ATOs), identity and financial theft, and so much more.
There’s one more thing to know about these bogus clicks that hacker’s love. Simply clicking “unsubscribe” tells bad actors your email address is active and you’re actually reading them. That means only one thing: you can expect many more phishing emails to follow. So just delete them and block them if you can.
Remember, use your Spidey sense with any unsolicited emails, especially those using tricks to pull you in. When in doubt, delete a suspicious email and you’ll be safe and not sorry.