Scam Message Checker

Malicious attachment

An email or message attachment that hides malware or a phishing link, often disguised as an invoice or document.

How it appears in scam messages

You get an unexpected 'invoice', 'receipt', or 'document to sign' as an attachment.

Example only - do not act on it

Example only: Open the attached invoice to view your charge.

Why it matters

Opening it or enabling content can install malware or send you to a credential-stealing page.

Common red flags

Unexpected attachments
'Enable macros/content' prompts
Generic 'document'/'invoice' names
Mismatched sender

Safe next steps

Stop and verify through official channels you find yourself.
Don't click links or share codes, passwords, or card details.
Report it and warn anyone who might be targeted.

Check a suspicious message

See the red flags in a real message and what to do next.

Check a message

PhishingPhishing is when a scammer pretends to be a trusted person or organisation to trick you into revealing passwords, codes, or financial details, or into clicking a malicious link.Business email compromise (BEC)A scammer impersonates a senior colleague or supplier to redirect a payment to a fraudulent account.

Related scam messages you can check

Related scam-type hubs

Related red flags

malicious attachment

Emergency guides

Frequently asked questions

Should I open an unexpected attachment?

No. Verify with the sender through a known contact and check the account directly before opening anything.

Get scam safety updates

Practical scam alerts, new examples, and simple safety tips. No spam. No sensitive message data.