‘Unsubscribe’ Gmail scam: How a helpful button can put you at risk!

The unsubscribe button in your Gmail inbox is supposed to be of help in trying to reduce spam but now cyber security experts are alerting that the unsubscribe button has become a tool that the scammers are using to prey on unsuspecting users. Seemingly a harmless activity of clearing up your mailbox, in reality, might become the gateway to phishing, malware, and information thefts.

Scammers are putting unsubscribe links of nothing but in reality and this is being done by making email appear to be real promotional, survey or updating mail. By clicking on these links, you will not be taken off a mailing list but redirected to a phishing site, asked to fill in some personal data or even initiate a malware download. In other instances, clicking the link indicates to the scammer that your email account is operational and this is good enough to target you with additional spam and to re-visit you in case they need to attack.

Cybersecurity company DNSFilter estimates that one in 644 unsubscribe links may refer to a malicious site-a high proportion, considering the numbers of emails sent daily.

Why are users falling for the scam?

The hackers write the mails that are almost similar to the actual promotion or brand messages and will include an unsubscribe button. Upon clicking of this button, rather than being taken off a mailing list, the user can be redirected to a phishing site, or asked to reveal some sensitive data or even have malware installed on their computer without their knowledge. Even clicking in some instances is sufficient confirmation to the scammers that your mail is still active, with more intrusions to come.

One of the reasons to do it is inbox fatigue and the number of unwanted emails, which are too attractive to lose an opportunity and press the unsubscribe button without consideration. Phishers take advantage of this fact because the users are so willing to clear up clutter that they have no incentive to doubt the source or the link. The unsubscribe option also appears in the form of a disguised button, which resembles those of genuine brands even further reducing the level of protection that is given to a user.

How to protect yourself from the unsubscribe scam?

The only way is to use the unsubscribe option through the email service you use (of course in the case of Gmail or Outlook, there is the unsubscribe option located at the top of a promotional message). These do not leave your inbox and are way safer than links on the email text. In case the email appears to be sent by an unknown source, with an unusual layout, or language of a high level of urgency (Final Notice, Urgent Action Required, etc.), do not press the links, including unsubscribe. 

Use mail labeling in case of emails that you do not recognise and also feel untrustworthy. This assists your mailing company to filter similar messages in future. Legitimate unsubscribe is normally at the bottom or top but not in the centre or in a pop up. Pay attention to the fact that the button can be oversized or stylised. Your email app and antivirus software should be updated frequently to shelter against the newest threats. When pressing any of the links, and it requires signing in, email confirmation, or some confidential information, shut the page off at once.

Future outlook

The Gmail unsubscribe scam is the harsh reminder that even the tools that we are used to working with can be used in the hands of hackers. Pause and confirm the sender and only use good unsubscribe tactics. In case of any doubts, label unwanted emails as spam and never click on the links you cannot verify. The most effective defense mechanism against the digital threat is to remain fully alert at all times. 

The Gmail unsubscribe attack and other such scams show how an arms race between attackers and defenders unfolds. Both sections of this fight are now focused on artificial intelligence (AI). On the one hand hackers use AI to design more authentic phishing messages, create malware capable of bypassing detection and automate vast scale assaults. Cybersecurity professionals, on the other hand, use artificial intelligence-driven tools to evaluate huge volumes of data and identify threats on the fly and act automatically in response to suspicious activity. Apply AI-powered technologies, which are needed to detect suspicious tendencies, identify possible frauds, and even forecast new attack vectors.

Read More:

Air India crash triggers Rs 4088 crore insurance claim: All details

Donald Trump’s move into the US tech market: Can Trump compete in big tech?

PM Modi highlights India’s tech revolution: Know more

Pro-AI strategy could transform India's global standing: All details