Find the real unsubscribe link UNSUB

The two ways out, and why one is better

• The List-Unsubscribe header. An instruction in the message that your mail client can act on without you visiting anything. Where it carries List-Unsubscribe-Post as well (the one-click form defined in RFC 8058), a single request removes you, with no landing page, no login and no survey. This is the route to use whenever it is there, and it is invisible unless you look at the raw message.
• The link at the bottom. A web page, which means the sender learns you opened the message, sees your address and your rough location, and gets to decide how many steps removal takes.

Since 2024 the large mailbox providers have required bulk senders to offer one-click unsubscribe, so the header is present far more often than people expect, including in messages whose visible link is deliberately awkward.

The tricks it flags

• A link that only goes to a preference centre, where "unsubscribe from everything" is the one option not shown on the first screen.
• Requiring a login to leave a list you never logged in to join.
• A confirmation step that does nothing except give the sender another chance, sometimes with a delay attached.
• Unsubscribe text set in the background colour, at six points, or rendered as part of an image so it cannot be found by searching the page.
• A tracking redirect on the unsubscribe link itself, so leaving confirms the address is live before it removes you.

When not to click anything

If the message is not from a company you recognise, unsubscribing is the wrong move. To a sender who bought your address, any interaction, including unsubscribing, confirms a real person reads it, and a confirmed address is worth more than an unconfirmed one. Mark it as spam instead; that trains your provider and tells the sender nothing.

The same goes for a message you are not sure about. Unsubscribe links in phishing mail go where the sender wants you to go. PHISHLENS will say where a link actually leads without opening it, and UNBEACON strips the tracking pixels out of a message you want to keep.