The way I understand it, even opening (reading) the message is a mistake, because it will usually contain html code that sends back your info to a server somewhere. Of course, if you click on anything in the message, that's when the serious damage begins.