How to Handle Unexpected Email Attachments Safely

An unexpected attachment can carry malware, a deceptive link, or a document designed to trick you into disclosing credentials. The file extension alone is not proof of safety, and a familiar sender name can be forged.

Pause before opening

Check whether you expected the file and whether the request makes sense in context. Verify unusual invoices, delivery notices, and urgent requests through a known contact method—not by replying to the suspicious message. Inspect the full sender address, while remembering that even a legitimate account can be compromised.

Reduce exposure

Keep your operating system and document viewer updated. Disable unnecessary macros and avoid enabling editing or content merely because a document asks. Treat archives containing scripts or executables as high risk. Use your organization's approved scanning and isolation tools when available.

If you opened a suspicious file

Disconnect the device from sensitive networks if compromise is suspected, notify your IT or security contact, and follow incident-response guidance. Change passwords from a trusted device when credentials may have been exposed. Preserve the suspicious email for investigation instead of forwarding it widely.

Temporary email can reduce address exposure during low-risk sign-ups, but it cannot make a dangerous attachment safe.