Why you shouldn’t unsubscribe from spam
For mail you signed up for, unsubscribe freely. For actual spam, the unsubscribe button does the opposite of what you want: it confirms you’re real.
The unsubscribe link sits right there at the bottom of the message, and clicking it feels like the clean fix. For a newsletter you once signed up for, it is. For actual spam, it is the worst thing you can do. The two look alike and are opposites, so the first job is telling them apart.
What the click tells a spammer
Spam goes out to millions of harvested and guessed addresses at once. The sender does not know which ones are real, which are abandoned, and which are dead. Most of the blast lands nowhere. When you click unsubscribe, you answer the one question the spammer most wants answered: yes, a person reads this address. That turns a cheap guess into a confirmed, monitored inbox. A confirmed-active address is worth more than an unverified one, so it gets sold to more lists and hit with more spam, not less.
The link may not be an unsubscribe link
The message already faked or hid who sent it to reach your inbox, so there is no reason to trust that the button does what it says. In spam, an unsubscribe link can just as easily be a phishing page that harvests your login, a page that tries to run something on your machine, or a tracker that logs the click and nothing more. You cannot tell which from the outside, and the safe assumption is that clicking helps the sender, not you.
Real spammers were never going to honor it
A working unsubscribe is a legal obligation for legitimate senders. In the US, CAN-SPAM requires them to honor an opt-out within ten business days; in the EU, marketing mail needs consent in the first place. Someone already operating outside those rules has no obligation to respect your request and no incentive to. Unsubscribing from genuine spam assumes a good faith that, by definition, is not there.
The line that actually matters
None of this means never touch unsubscribe. It means the sender decides everything. If you handed over your address, to a shop, a service, a newsletter, then the list is legitimate, the unsubscribe is real, and the law requires it to work. Use it. The only mail you should never unsubscribe from is mail from a sender you do not recognize and never opted into.
| Mail you signed up for | Actual spam | |
|---|---|---|
| Did you opt in? | Yes, at some point | No, never |
| The unsubscribe link | Real, and legally required to work | Unknown; may phish, load malware, or just track |
| What clicking signals | A routine opt-out to a compliant sender | That your address is live and worth more |
| What to do | Unsubscribe | Mark as spam, then delete |
What to do instead
- Ask one question first: did I ever give this sender my address? If no, treat it as spam.
- For senders you recognize, prefer the unsubscribe button your mail app puts at the top of the message. It uses the sender’s List-Unsubscribe header, not a link buried in the body, and since 2024 Gmail and Yahoo have required bulk senders to make it one click.
- For everything else, mark it as junk or spam and delete it. Do not open it, do not click anything, do not reply.
Marking as spam is the move because it points the other way. Unsubscribing sends a signal outward, to the sender, and confirms you. Reporting spam sends a signal inward, to your filter, and the sender learns nothing. Your filter gets better at catching the next one; the spammer gets no reply at all.
That inward signal is exactly what Klar runs on. Klar classifies every message on your Mac, inside Apple Mail, and learns from what you mark, without your mail or your reaction ever leaving the machine. The report goes to your filter, never back to the sender. How the on-device approach compares to cloud filters is on our compare page.
