An email attachment should not force you to install an unfamiliar program just to read it. A message may describe a download as a viewer, an update, or a security step, but that wording alone does not establish that the software is necessary or safe. Pause before clicking, downloading, or entering credentials. First assess the sender and whether you were expecting the file; then verify the request through a separate, trusted route. If the software is genuinely needed, obtain it from a source you already trust or one approved by your organization—not from the message’s prompt.
The useful bits
- Treat a required download as a reason to pause, not proof the message is malicious.
- Verify the sender and the need using contact details you already trust.
- Get necessary software through an approved, independent source.
Notice what the message is asking you to do
A familiar-looking document or delivery notice can make an installation request seem routine. Look closely at the actual demand: does the attachment fail to open until you install a viewer, enable an update, or visit a linked page? Is the page asking you to download a program or enter your email password? These are reasons to stop and assess the request, even if the message uses a company logo or says the action is urgent.
Do not treat the file name, sender display name, or polished wording as verification. A legitimate sender can make a mistake, and an account may be used by someone other than its owner. Conversely, a request to install something is not by itself proof that a message is fraudulent. The sensible response is to verify before acting.
Check whether you were expecting the file
Recall the context: did you ask for this document, agree on a delivery date, or discuss the exact type of file? Does the message explain why a new application is needed, or does it simply insist that you install one? Unexpected files deserve extra caution, especially when the requested action is unrelated to the conversation you expected.
Inspect the message without following its instructions. Check the full sender address rather than relying only on the displayed name, and read the surrounding conversation for inconsistencies. If the request is surprising or out of context, do not open the attachment or follow its download prompt while you investigate.
Verify through a separate route
Contact the sender using a phone number, address, or workplace contact method you already know is genuine. Do not use contact details supplied only in the questionable message or on its linked page. Ask whether they sent the specific file and whether installing software is actually required. If the email claims to come from an organization, contact that organization through a channel you have used before.
For a work account, follow your organization’s established security or IT process. A manager’s request does not make an unapproved download safe. If you cannot verify the sender or the software requirement, leave the file unopened and ask an appropriate support contact for guidance.
Find software independently
If the sender confirms a legitimate need for a viewer or update, do not return to the message’s download button. Use a software source you already trust, such as the publisher’s official site reached independently, or the source approved by your organization. Check that the software is intended for your device and that your organization permits its installation. If you are unsure, ask IT before downloading.
A page that insists you need a special tool is not a reliable way to establish the tool’s identity or necessity. Avoid installing a program simply because it is labeled a viewer, and do not provide passwords or one-time codes to a page just to unlock an attachment. If the file can be provided in a format supported by software you already have, ask the sender to resend it that way.
A practical example
Suppose a message appears to come from a supplier and says an invoice is ready, but the linked page requires a new document viewer. You were expecting an invoice, yet you have not agreed to install anything. Do not download the viewer or enter credentials. Contact the supplier using the address or phone number in your existing records, not the message, and ask whether they sent the invoice and what format they can provide.
Message received: “Your invoice is ready. Install this viewer to continue.” Sender shown: [billing@example.com] Independent action: Contact the supplier using a previously saved contact method. If confirmed: Ask for a compatible file or obtain approved software from a trusted source.
Confirm the request is resolved
You have handled the request when you have independently confirmed who sent the file and why the software is needed, or decided not to proceed because you could not verify it. If installation is approved, obtain the software separately and follow your organization’s process. Then open the file only with software you trust. Keep the original message available if you need to report it; do not forward it casually, since it may contain a risky link or attachment.
If you already clicked the prompt or installed something, stop interacting with the page or program and contact your organization’s IT or security support promptly, if you have one. Tell them what you clicked, downloaded, or entered. Do not assume that closing the page removes an installed program or reverses information you submitted. Follow their instructions for next steps.
- Did I expect this exact file and installation request?
- Did I verify both through a contact route independent of the message?
- Did I use only a trusted or organization-approved software source?
- If I could not verify it, did I leave the file and download prompt alone?
About this guide
Prepared with AI assistance for the BITTU Mail editorial library. Check important details against your original messages and current account settings. Product access depends on your role, plan and provisioning state. Provider interfaces and requirements can change.
View current plans · Security information · Suggest a correction