Unsubscribe Links Can Expose Email Users to Phishing Risks

Summary

The hosts warn that unsubscribe links in unsolicited emails can lead to malicious sites or confirm an inbox is active. They recommend using email-client protections, including Apple Mail’s option to unsubscribe without an external redirect.

Key points

• The hosts say unsubscribe links in unsolicited messages may lead to malicious websites or reveal that an inbox is active.
• They cite a report’s estimate that approximately one in 644 unsubscribe-link clicks leads to a potentially malicious website.
• Attackers may use spoofed email and the desire to stop spam to make a link seem safe; the resulting flow may ask for information like a phishing login link.
• The hosts note that Apple Mail can process unsubscribe requests by sending an automated email rather than redirecting users to an external website, citing DNS Filter CTO TK Cananani.
• They encourage caution with unfamiliar email links and recommend staying within the email client’s protections where available.

People

Vendors