Ironically, I just happened to receive an unsolicited email message this morning -- in my work e-mail account, even! -- suggesting I go watch a YouTube review of a gaming related product. I glanced through the message briefly, because it was ostensibly about something I actually might be interested in... but then I saw that the link for their YouTube video referenced in the message was to some random domain that was unfamiliar, instead of an actual YouTube link.
Well, naturally my first assumption was that they're trying to track clicks for advertising purposes... and my corresponding first instinct was simply to not give them the satisfaction. Heck, no! You don't need to be tracking my activities, bud. Instead, I googled the YouTube video myself. Wouldn't you know it? The caption on the thumbnail for the YouTube video prominently displayed the phrase "paid promotion by..." and it identified the same company that had sent out the email. I didn't even bother to watch the video, because nope. Just like that, I'm no longer interested.
Of course, it's not precisely the same thing, as I don't actually have any reason to believe that the email I received was from hackers... but these are nonetheless the kind of habits that we all need to pursue. Don't click any links that people email or text you. Period.
"But wait! What if it's actually legit, or important??"
My philosophy is pretty simple: if someone I actually know wants to show me a video that badly, they'll almost always be more than happy to shove their own phone in my face the next time I see them. (And they frequently do!) And if it's from someone that I don't know, then it's automatically not that important to me. The clickbait advertisers are just going to have to work a lot harder for my eyeballs.