A suspicious email has an 'unsubscribe' link. What does CISA say to do?

Do not use it. Delete the message instead.

Start playing free

  1. Click it to stop future spam
  2. Reply with the word STOP
  3. Do not click it, just delete the message ✔

Why: In a scam email, unsubscribe can confirm your address is live or lead to a bad site. Delete it and report it if you can.

Huh, didn't know that: CISA's three steps are Recognize, Resist and Delete.

The dad joke
Is your virus software running? Well, you better go run after it!
Like this card?
Play the game

References

Answer: Do not click it, just delete the message. In a scam email, unsubscribe can confirm your address is live or lead to a bad site. Delete it and report it if you can.

  1. CISA: Recognize and Report Phishing www.cisa.gov/secure-our-world/recognize-and-report-phishing
    Delete the message. Don't reply or click on any attachment or link, including any "unsubscribe" link. Just delete.
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game