: Call the person/company to confirm they sent you a file before opening it.

: Arrived from a sender you don't know or a contact whose account was hacked.

: Ensure Windows shows you the full name (e.g., invoice.pdf.exe instead of just invoice.pdf ). Do you have antivirus software currently installed?

: Hackers use .rar files to bypass some basic email scanners.