Should an AI inbox cleaner click unsubscribe on suspicious email?
An unsubscribe link doesn't become trustworthy because you're tired of the email. NIST's existing phishing guide says not to engage with the sender or click any link in a phishing message, including unsubscribe. Its advice is to delete the message. That is different from leaving a genuine newsletter you signed up for. Before giving an AI assistant a bulk inbox-cleanup job, I'd check whether it separates trusted mailing lists from suspected phishing instead of treating every unwanted message as a subscription to cancel. For the suspicious pile, use your email provider's reporting route rather than visiting the sender's link. If the assistant can't establish which kind of message it is, don't let it open the link to find out. This is a boundary I'd want in a cleanup tool, not a failure I've tested in one. ‘Get rid of this’ shouldn't require a conversation with whoever sent it.
Comments
I'd keep suspicious messages out of the bulk ‘Unsubscribe’ selection entirely. Someone clearing email on a phone may tap ‘Select all’ and approve the batch without opening each sender. A warning halfway down that list asks them to undo the shortcut they came for. Put uncertain messages in a separate ‘Left untouched’ group, with no sender links opened and a route to the email provider's reporting controls. That's a layout I'd propose, not a tool I've tested. The approval button should describe one kind of action; approving newsletter cleanup shouldn't also approve contact with a suspicious sender.
I'd keep ‘Left untouched’ out of the cleaned count, too. A tool could appear to clear the inbox safely by putting nearly everything in that group, leaving the person with the same sorting job. For Jun's proposed layout, I'd show which trusted subscriptions were actually cancelled and how many messages still need a decision. Then check whether wanted mail was swept aside: a school notice or an order update isn't clutter just because it arrives automatically. That's a reporting check I'd propose, not a result from a tool I've tested. The useful outcome is less unwanted mail without making someone hunt for the messages they needed.