Hacker News new | ask | show | jobs
by treyfitty 930 days ago
Maybe Tutanota.com has a lot of outlook users reporting your marketing emails as spam. I generally do this if the unsubscribe route is too painful, or even if it takes too long to load.
3 comments

Even if the unsubscribe link works I still report spam as spam. If it is unsolicited then it is spam, plain and simple.
I'm very surprised to see you are being downvoted, I was convinced everybody is doing that. Spam is spam, period. Asking me go click on a link that leads somewhere is just a waste of my time - and there are still a few culprits out there who instead of unsubscribing me straight away demand that I log in to "manage my notification preferences"!
Furthermore I consider it a public service, if enough good people mark it as spam then the algorithm can block it for other users too.
The worst ones are the ones that add a whole paragraph to their spam to explain why it isn't spam and they have a right to send you their junk.
Yeah, those are lousy.

Even worse though are places like Atlassian, which add a footer to some of their emails like "this email can't be unsubscribed from".

Even though it's directly illegal for them to have emails that can't be unsubscribed from.

It's their own special "Fuck You!" message to their email recipients.

Their lawyers will argue that’s a transactional email part of the functionality of the app, so they can play fast and loose with legal requirements
I'm not even their customer (and never will be), so not really sure what kind of app functionality they'd be claiming. :/

But the concept of your comment "they're just doing what they want because they reckon they can get away with it" is pretty common among large tech companies.

Or some simply do not unsubscribe you.

After feeling gaslighted by some spam emails that I was very sure I had unsubscribed from, I started keeping a spreadsheet to track my requests with date, and what link I followed to get removed. Almost 25% of my requests have never been honoured, it's disgusting.

Well, computers are tough. It takes ~31 days to update a database, right?
A database? No, that's instant.

But when you have dozens of databases, each owned by a different company, and they feed off each other perhaps once a day, then you can end up with a long time before all your data is deleted.

And that’s their problem, not mine. If they structure their email campaigns such that it takes a long time to update every database, that’s a design choice on their side. When that design choice means they effectively ignore my unsubscribe, well, I don’t see why that should receive any sympathy.
Or move your email to a list they can sell on..
When someone sends spam perhaps don't click on any "Unsubscribe" type link...?

Those links are often spammer controlled and just confirm your email address as valid.

Nah. Hit unsubscribe every time.

I own my own email domain, and I use a different email address per service. I have done so for 13 years.

On legitimate emails, unsubscribe works correctly almost every time.

True spam seems to originate from a handful of compromised services like LinkedIn, parkmobile, etc. I don’t hit unsubscribe on those, but I don’t see how it would make things any worse.

Would you happen to be running a windows desktop when checking your email?
No.
If your e-mail client loads external images it was already confirmed on open without clicking any link.
Are people still using that for tracking? I thought it was made pretty pointless by the large cloud providers simply prefetching and proxying it through their servers, and independent mail clients only loading them on-demand.
Ewww, why would anyone have their client configured to do that? That would be truly idiotic.

Personally, my email is text only. It drops all HTML. I prefer it this way. :)

Most clients are configured this way by default. I change it every time I switch.
Nearly everyone has their client configured to do that, because it is the default setting. Gmail makes that very easy to change, but many other clients have it buried in the menu
None of the E-mail clients I use load external images by default and I haven't had to configure that behavior myself.
It's not spam if you agree to receive marketing emails from the sender
It is spam if I didn’t specifically ask for it. Offering an opt-out as part of some other flow doesn’t mean I want your marketing crap.
Ah yes, the 5-pixel-wide grey opt-out checkbox placed on a grey background, claiming to be for "essential communication"...
eh, some vendors take this to mean daily (or twice daily) emails.

They get the spam flag too for not being respectful of my inbox.

It is good practise. You should never use the unsubscribe function as it tells sender the account receives is actually in use and valid. Thus they will sell your email to even more spammers.
Yeah no. Emails which include an unsubscribe link are legit enough to not do that. Actual spammers don't bother to include an unsubscribe link.
Not really true. Many spams (at least in the past) used to include unsubscribe link, either for faked-legal-compliance, to give some illusion of legitimacy of the mail/originating company to the recipient, and/or to track who is actually receiving them.

But if you landed in a mailing list, there are quite high changes that the unsubscribe link is legit.

> But if you landed in a mailing list, there are quite high changes that the unsubscribe link is legit.

"Legit" in that it will unsubscribe you from that exact list but not the 100 others they added you to at the same time.

Totally true, but sometimes people just want to unsubscribe to a mailing list they got in because they forgot to uncheck the box "send me promotions" when buying something online, or maybe they even signed up on purpose in the past. Still, some of these just mark the mails as spam not to get them any more.
The unsubscribe link is legit, but how did I end up on the list? I've never ever signed up for something with the goal of receiving marketing emails. I've never given explicit permission to receive marketing emails.

So if you send me a marketing email, it's spam because I didn't ask for it. It may be legal but that doesn't impress me.

If you ended up on the list without signing up, well I wouldn't blame you to click the "Report spam" button, because that's what it is.

But I'm pretty sure that some people who actually signed up on purpose to be on some mailing list just click the spam button not to see them any more, because they are not any more interested, or for whatever other reason.

That's probably 1% of 1%. The rest is opt out instead of opt in and dark patterns.
I wish you were right, but that is not the case, sadly. I could give you several examples but here's one: there was a comment on HN a little while ago [1] about a spammer by the name of whitehallmedia. Every single email they send has an unsubscribe link. Clicking it (I used a test email account.) does not have the effect that one might expect.

[1] https://news.ycombinator.com/item?id=30405503

Nope.

If you want to get people to click a link in your malicious booby trapped email, then an "unsubscribe" one is high on the list to include. :)

Are you sure that 100% of companies have not sold unsubscribed users information?

As if there is even single counter-example you should just automatically mark it spam and then email providers should blacklist the domain.

That hugely draconian.

Are you 100% sure you never just signed up for a newsletter and forgot about it?

Are you 100% sure your email didn't end up there in some other way?

I used to send out some newsletters for my website; just a programming blog thingy. It was just a form with a simple program on the server to collect email addresses. Wrote everything myself; no external service or whatnot involved.

I got some pretty aggressive replies about people who insisted that I was spamming them. Did they forget (I didn't send out the newsletter very often)? Did someone typo their email and end up at the wrong person? Did some bot maybe fill in the form and pass the little captcha I added? Who knows. All I know is that there was a legit POST /subscribe request.

And as someone who also worked with spam prevention: it's this kind of stuff that also makes legit spam detection harder than it needs to be. The "Report spam" button is not a "fuck you" button, but unfortunately many people seem to use it as such.

With email spam it has been long proven that best way to act is to treat all actors as malicious. As there is enough malicious actors around.

And it took me a minute to find phishing mail with unsubscribe link. Which entirely proves my original point. Sure those sending phishing mails won't stop the mails I probably ordered somewhere?

> And it took me a minute to find phishing mail with unsubscribe link. Which entirely proves my original point

You weren't talking about phishing before. You're shifting this to something radically different.

You do not need to be 100% sure.

99% of the time you explicitly unsubscribed from all categories, but the sender just added a new one and helpfully opted you in. So, yes, "fuck you".

And that other 1%[1] is just collateral damage? "Sucks to be you!" Please note they were suggesting that a single email should "blacklist the domain".

You are pretty much suggesting the very thing Microsoft is doing here.

This is not a serious suggestion in any shape or form.

[1]: A number I have serious doubts about by the way, but we'll use it for now.

> Are you 100% sure you never just signed up for a newsletter and forgot about it?

For me, I can be pretty sure as I have extensive email archives.

Before claiming I've not signed up for stuff I check them first. :)

You're absolutely incorrect about this. What you're saying may have been true a long time ago but it's 100% wrong now. In 2023/2024 you should click unsubscribe links.

No matter how spammy a sender is, an unsubscribe click is a big signal that they don't want to contact that email account again. It takes time and money to warm up a domain, prepare it for outbound email, and keep it from being blacklisted when you're sending out a high volume of mail. The days where someone can just spin up an email server in a couple of minutes and blast hundreds of thousands of people with spam are over. If you don't manage your reputation you'll get blacklisted in a matter of hours. The #1 way as a mailer to manage your reputation is to respect unsubscribe requests.

Yes, clicking the unsubscribe link indicates that there's a real human checking the mailbox. But data resellers have many ways to verify the validity of a mailbox that are more effective than this one. And unlike this one, they don't indicate that the person dislikes receiving unsolicited email. So very few data resellers use unsubscribe clicks as a way to verify email validity, because if they do they'll be polluting their product with the emails of people who are likely to get pissed off by unsolicited mail, report it and get a customer's domain blacklisted. If the data reseller is selling "verified" data that is getting his customers blacklisted - he won't be in business for much longer.

It's worth pointing out that not all unsolicited mail is illegal. There are exceptions carved out in US CAN-SPAM and in other jurisdictions. If you're a business in the US the law is basically that people can send you unsolicited marketing emails whether you like it or not, as long as they provide an unsubscribe link and respect your request if you click it. To not use the mechanism that is explicitly required by the law for your protection is shortsighted.

> You're absolutely incorrect about this.

No, not absolutely.

I presume you are operating under the assumption that most bulk email comes from the big providers like AWS and MailChimp (who in fact uses on SendGrid underneath). And yes, under those circumstances you are correct. Those big firms whose day job is sending "spam" have a huge incentive to ensure you don't outright reject the spam - if they don't the reputation of the IP Address ranges they are sending from get trashed. For example, they go to the trouble of wrapping every link in the email with a redirect via them, so they can monitor what emails from them you are engaging with.

But I have some news for you - the vast bulk of spam does not come from them. Maybe you aren't aware of that because you use an email provider like GMail or Outlook. They stop most of this other spam (which is how we get to the headline). But nonetheless it's there, and if it does sneak through and you click on the unsubscribe link you no only won't be unsubscribed, you confirming your a real human will ensure you will be subscribed to many spam emails.

I don’t know how often I have clicked the unsubscribe link only to find I am not unsubscribed.

Plus the link is always at the bottom in a tiny footer.

The mark as spam button has no such issue and hurts the sender to boot.

Another data point: since 2021, every time I clicked the unsubscribe link, I stopped receiving emails from those services.

I also haven't seen those email addresses passed on to someone else (I use unique aliases).

If it's from a generally legit company the unsubscribe function does actually work.
You absolutely should use the unsubscribe link if it is solicited mail. It is very rude to ask for mail then harm the senders reputation because you don't want to unsubscribe.

But if the mail is unsolicited or the unsubscribe link doesn't work then absolutely yes, mash that spam button.

> or even if it takes too long to load

Which is not ideal, and might explain why Gmail routinely puts perfectly legit correspondence in my spam folder - again and again.

I realize this might well be a problem stemming from email clients having but one option to flag emails: spam. Ideally one should have more options - as it is scamming, spoofing and innocuous unsolicited marketing (and slow loading messages it seems) are all put in the same basket.

> as it is scamming, spoofing and innocuous unsolicited marketing

Those are all spam. Especially unsolicited marketing. Fuck everyone who sends that, and I hope they get banned from whatever provider they use and it kills their company. I always report all of those even with an unsubscribe link, as it’s not as if I can trust them not to use "unsubscribe" as a "send more spam" signal, they’ve already proven themselves untrustworthy by not using double-opt-in.

Though with some providers even "mark as spam" seems to be able to leak your email as they send reports which contain the message-id. Good in our case as we don’t want to spam anyone and can then blacklist the address, but bad in case you report evil spammers.

Do you think regular users would know, or even care about which category to use? As far as they're concerned, it's "this message bad!", period.
That's why Gmail is fantastically bad at spam filtering. Even simple spamassassin setup is miles ahead of it. Gmail filtering is basically useless because it forces me to check spam folder and I need to look at all this spam anyway.
> scamming, spoofing and innocuous unsolicited marketing

it is all spam; none of us want to see any of it, why do we need more fine grained control?

you forgot to mention "slow loading emails", and I might add "I don't remember signing up to this newsletter", or "ok I signed up to this newsletter but this article triggers me" etc.

This "users can't handle fine-grained control" philosophy is stupifying users IMO. Granted, many don't have the knowhow, but they could just use the (hypothetical) dislike button, and the anti-spam AI could in that case place little weight to their judgement call. The interested user could instead be placed on a journey to be ever more adept at identifying email misuse.

Edit: as another commenter mentions, at present these completely unreliable signals to the anti-spam software causes for example Gmail to put perfectly legit emails in the spam folder - so I have to wade through a load of junk anyway (otherwise the legit messages in there gets deleted after 30 days).

The system is broken, and people reporting irrelevant things as spam is most likely a part of it.

The OP was talking about the unsubscribe loading too slow, not the mail. That is certainly grounds for being marked as spam.

Also "I don't remember signing up to this newsletter" is mostly a case of pre-checked "consent" to mails or companies packing on newsletter subscription as a requirement to some unrelated service. That's also spam.

> The OP was talking about the unsubscribe loading too slow, not the mail.

OK thanks, my bad. But you also seem to miss something, namely my point: you seem to imply that I'd be opposed to users marking unsolicited or dark pattern mailing lists emails as spam, if they indeed are such. Or that the existence of such emails somehow undermines my point. But that's not it.

The overarching problem is of course spam in the first place, secondly the substandard systems that email services use to identify spam. In third place I'd place the problem I raised, that legit emails are not delivered correctly, where part of the problem seems to be that users use the 'spam' label as a dislike button.

But here's the kicker: this last problem is mainly what might threaten email as a means of correspondence, period: If I get a lot of junk then I can sift that out to get to my real messages. But if my real messages don't reach me at all then that's likely game over for the email era.

Or the ever favorite: you need to login to be able to state your preference.