Medium riskEmail Scams

Fake Unsubscribe Email Scam

This scam relies on the 'unsubscribe' link in spam emails, which can confirm your address is active, lead to a phishing page, or trigger a malware download rather than stopping the messages.

Quick verdict

Risk level
Medium risk
Scam type
Confirmation / phishing lure
Main red flag
An unsubscribe link in an email from a sender you do not recognise.
What to do first
Do not click unknown unsubscribe links. Use your email's built-in spam and block tools.

What this scam usually looks like

This scam relies on the 'unsubscribe' link in spam emails, which can confirm your address is active, lead to a phishing page, or trigger a malware download rather than stopping the messages.

Example message pattern

Example pattern — not a real report
Example pattern: A spam email you never signed up for ends with 'To unsubscribe and stop these emails, click here: [suspicious link]', which confirms your address or opens a phishing page.

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

Red flags to watch for

  • An unsubscribe link in spam you never opted into
  • A sender or domain you do not recognise
  • An unsubscribe page that asks you to log in or enter details
  • A flood of new spam after clicking unsubscribe
  • Mismatched or hidden link destinations

What to do

  • Use your email app's 'report spam' or 'block sender' instead of unknown unsubscribe links
  • Only unsubscribe from senders you actually recognise
  • Set up filters to route junk away from your inbox
  • Delete the email

If you already clicked or replied

  • If a page asked you to log in, change that password immediately
  • If a file downloaded, run a security scan
  • Mark the sender as spam and block them
  • Watch for increased spam and tighten your filters

What not to do

  • Do not click unsubscribe in spam from unknown senders
  • Do not log in on an 'unsubscribe' page
  • Do not reply to ask to be removed

Similar scams

Medium risk Email

Email Storage Full Scam

This scam warns that your mailbox or storage is full and that you will stop receiving messages unless you 'verify' or 'upgrade' through a link. The link leads to a fake webmail login page that captures your email password.
High risk Email

Malware Attachment Scam

In a malware attachment scam, an email arrives with a file posing as an invoice, receipt, CV, statement or delivery note. Opening the attachment, or clicking a prompt to 'enable content' or 'enable macros', can quietly install malware that steals passwords, banking logins or files. The message is often crafted to feel urgent or routine so you act before thinking. Treating every unexpected attachment with caution, and verifying it through a separate channel, is one of the most effective defences.
High risk Email

Fake PayPal Email Scam

This scam sends an email claiming your PayPal account is limited or shows unusual activity, urging you to 'confirm' your details through a link that leads to a fake login page designed to steal your password.

Frequently asked questions

Isn't unsubscribing the right thing to do?
For genuine senders you recognise, yes. For unknown spam, clicking can confirm your address is active or lead to phishing. Use your email's spam tools instead.
Why did I get more spam after unsubscribing?
Clicking can tell spammers your address is real and monitored, which often increases the volume rather than stopping it.
How should I stop unwanted email?
Use 'report spam' and 'block sender' in your email app, and set up filters. These are safer than unknown unsubscribe links.
I logged in on the unsubscribe page. What now?
Change that password right away from a trusted device, enable two-factor authentication, and watch the account for unusual activity.

Last reviewed: June 2026

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.