Malware Attachment

A file attached to a message that installs harmful software when opened.

How it appears in scam messages

A malware attachment arrives as a file you are urged to open — an 'invoice', 'delivery label', 'CV', 'receipt', or 'voicemail'. Common formats are disguised documents, ZIP files, or files that ask you to 'enable content' or 'enable macros'. Opening it, or enabling the prompt, can install software that steals passwords or watches what you type.

Example only - do not act on it

Example only: Invoice attached (Invoice_4821.zip). Enable editing to view the amount due.

Why it matters

Opening it can give attackers access to your device and data.

Common red flags

An unexpected attachment, especially a ZIP or document
A prompt to 'enable content' or 'enable macros'
Generic file names like invoice, receipt, or delivery
Pressure to open it quickly to avoid a problem

Safe next steps

Stop and verify through official channels you find yourself
Never share codes, passwords, or card details from a message
Use the message checker if you are unsure
Report and block the sender

Check a suspicious message

See the red flags in a real message and what to do next.

Check a message

PhishingPhishing is when a scammer pretends to be a trusted person or organisation to trick you into revealing passwords, codes, or financial details, or into clicking a malicious link.

Related scam messages you can check

Related scam-type hubs

Related red flags

Emergency guides

Frequently asked questions

How can I avoid malware attachment?

Slow down, never act on urgency, and verify through official apps or websites you open yourself. Use the free checker if a message seems off.

What if I have already been affected?

Contact your bank or the relevant provider through official channels, change any exposed passwords from a trusted device, and save evidence. See our recovery guides.