[inopinatus]

Never do this. Automated email scanners may fetch the URL. For example, Hotmail’s mail delivery process is notorious for triggering magic links.

[nly]

You can defend against this a little bit by having the magic link load a page with a button (which submits a POST action) that you have to click.