What should you never open in spam mail?

You should never open or interact with anything in a suspicious spam email that could compromise your security. Here are the main things to avoid:

1. Attachments
   • Never open unexpected attachments, especially files ending in:
     • .exe
     • .zip
     • .rar
     • .js
     • .vbs
     • .bat
     • .scr
     • Macro-enabled Office documents (.docm, .xlsm)
   • These files may contain malware, ransomware, or spyware.
2. Links
   • Do not click links in spam emails.
   • They may lead to fake websites designed to steal passwords, banking details, or personal information.
3. QR Codes
   • Avoid scanning QR codes in unsolicited emails.
   • They can direct you to malicious websites without showing the destination beforehand.
4. Buttons
   • Don’t click buttons such as:
     • “Verify Account”
     • “Claim Prize”
     • “Update Payment”
     • “Download Invoice”
     • “View Secure Document”
   • These often redirect to phishing websites.
5. Embedded Images (if prompted)
   • Avoid downloading remote images from suspicious emails.
   • Some images can notify scammers that your email address is active, leading to more spam.
6. Calendar Invitations
   • Don’t accept calendar invites from unknown senders.
   • They may contain malicious links or fraudulent event details.
7. Password-Protected Files
   • Be cautious of password-protected attachments where the password is included in the email.
   • This technique is often used to bypass email security filters.
8. Unexpected Invoices or Receipts
   • Don’t open invoices or payment receipts for purchases you didn’t make.
   • These are common phishing lures.
9. Voice Message or Fax Attachments
   • Emails claiming to contain missed voicemails or faxes may include malware.
10. HTML Attachments
    • Files ending in .html or .htm can open fake login pages that mimic trusted websites.

Why This Matters

Spam emails often attempt to:

• Install malware on your device.
• Steal usernames and passwords.
• Trick you into revealing financial information.
• Infect your computer with ransomware.
• Confirm that your email address is active for future scams.

Safe Practices

• Delete suspicious emails without opening attachments or clicking links.
• Mark them as spam or junk.
• Verify unexpected requests by contacting the sender through a trusted method, not by replying to the email.
• Keep your operating system, browser, and antivirus software up to date.
• Enable multi-factor authentication (MFA) on important accounts.

In general, if you were not expecting an email or something about it seems unusual, do not open its attachments, click its links, scan its QR codes, or provide any personal information.