Safe Email Attachment Habits
Launch library · evergreen read
Unexpected attachments, even from a familiar name, deserve a genuine second look before opening, since a compromised contact's account is sometimes used to send malware to their own trusted circle of contacts entirely without their knowledge. Even a familiar name is not proof that the message is genuine.
Checking whether the file type genuinely makes sense for the context, such as an unexpected executable file attached to what claims to be an invoice, helps identify a mismatch that is often a clear warning sign. A mismatched file type is often the clearest signal something is wrong.
Contacting the sender through a separate channel, such as a text message or phone call, to confirm they genuinely sent an unexpected attachment adds a simple, effective layer of verification before opening anything at all. This quick call costs little and prevents a potentially costly mistake.
Keeping security software genuinely updated, and being especially cautious of attachments urging you to "enable content" or macros in a document, addresses one of the more common ways malware actually spreads through email. Treating this instruction as suspicious by default is almost always the right call.