Experts Issue Warning About 'Unsubscribe' Links That Could Get You Hacked

Sometimes, the goal is simple: confirm your address is active. Just clicking tells attackers that you're a real person and that you're paying attention. From there, your address might be added to more spam lists or worse, targeted with social engineering scams.

Other risks are more aggressive. Fake unsubscribe links can lead to phishing sites or trigger malware downloads. 

If a page asks for your login credentials "to confirm your unsubscribe," experts say that’s a red flag. 

"Don’t do it," warns Michael Bargury, co-founder of Zenity. Instead, go directly to the brand's website to update your settings manually.

So what can you do instead? Use the "list-unsubscribe" button some email services display at the top of marketing emails. It's generally safer than links embedded in the body. Or just mark the message as spam and move on. Setting up filters or using disposable email addresses for signups can also cut down on future junk.

In the end, the best advice might be the simplest: if you don’t trust the sender, don’t trust their unsubscribe link. Because sometimes the clean-up comes with a cost you never saw coming.