The suspicious attachment checklist for a busy inbox
An attachment arriving during a busy day can borrow credibility from the work you are already doing. Before opening it, connect the file to an expected task and a sender you can verify.
Check the context
Were you expecting this document, and does the message make sense for the sender? A known display name can be spoofed or an account compromised. Use a separate trusted channel to confirm an unusual request.
Avoid bypassing protections
Do not enable macros, disable security tools or follow special instructions merely because a document says they are required to view an invoice. Keep software updated through official mechanisms and follow your workplace’s security process where applicable.
Report rather than investigate
Use the email service’s reporting feature or contact your organization’s support team. If you already opened the file, explain what happened promptly and follow qualified guidance. Do not try random cleanup commands from an unknown page. A useful inbox habit is a short pause at the moment a message asks you to do something outside your normal workflow.
Sources & further reading
Source material and official guidance. Original practical suggestions are editorial content, not statements from the organisations below. Selected references checked September 24, 2026; publication dates and context are stated in each article.
Have a correction or a question about this article? Contact the editorial team. Read our editorial policy and disclaimer.
