A PDF or Word document may look routine long before you know who actually sent it.
Attachments are a normal part of recruiting. Job descriptions, company presentations, benefit summaries and interview materials are all commonly shared as files.
The difficulty is that the same familiar formats can also be used in questionable outreach. A document may contain a deceptive link, ask you to enable active content or simply arrive from someone whose identity has not yet been established.
That does not mean every unexpected file is dangerous. It does mean the attachment should be considered in context: who sent it, why it arrived, whether you were expecting it and whether the same information can be obtained through an independently verifiable source.
Where practical, an official employer website, agency job board or other identifiable professional channel gives you more context before you decide whether opening an attachment makes sense.
Before Opening an Unexpected File, Check the Sender and the Context
The extension alone tells you very little. A better question is whether the file makes sense within a recruiting conversation whose sender, organization and purpose you can reasonably establish.
An Attachment Can Encourage You to Move Too Quickly
A file called Job_Description.pdf looks ordinary and useful. It can feel like the conversation has already moved from introduction to something more concrete.
That familiarity can make an unexpected file easier to open without first checking who sent it.
Early recruiter outreach may instead begin with:
- A short professional introduction
- A summary of the opportunity
- A link to an official posting where one exists
- An invitation to arrange an initial conversation
Some File Behaviours Deserve More Attention Than Others
You do not need technical expertise to recognize when a document is asking for something unusual.
Examples worth slowing down for include:
- Compressed archives such as ZIP or RAR files from an unfamiliar sender, particularly when you were expecting an ordinary document
- Office documents that ask you to enable macros, active content or unusual permissions
- Documents containing unexpected links that direct you to sign-in pages, file-sharing portals or other unfamiliar websites
- Files whose extension, icon or behaviour does not match what you were told was being sent
There May Be Another Way to Review the Same Information
Where the opportunity is publicly advertised, you may be able to review the role without depending on an unsolicited attachment.
- A posting on the employer’s official website
- A posting on the recruiting agency’s own job board
- A recognizable employer applicant-tracking system
- A professional follow-up from a verifiable company account
Confidential searches are an important exception. A legitimate recruiter may not be able to provide a public posting or identify the client immediately.
Details Worth Pausing Over
The File Arrives Before Much Context
An attachment appears immediately while useful information about the sender, role or organization remains unclear.
The File Requests Active Content or Extra Permissions
A document asking you to enable macros, run content or approve unexpected permissions deserves closer attention before you continue.
The Attachment and the Outreach Are Both Generic
A generic filename combined with copy-and-paste messaging and little explanation of why you were contacted gives you less useful context.
What To Do Next
Ask for the Official Link Where One Exists
If the role is publicly posted, ask for the employer or agency webpage so you can review it independently.
“Thanks. Could you send me the official posting link on your website or the employer’s site? I prefer to review the role there first.”
Verify the Sender Before Deciding
If the opportunity interests you but the file arrived unexpectedly, establish the recruiter and organization first. The attachment can wait.
Notice How the Recruiter Responds
A request for an official link or a professional verification step is reasonable. If simple clarification is met with increasing pressure or repeated refusal, that becomes part of the information you have to evaluate.
If You Already Opened the Attachment
Opening an unexpected file does not automatically mean your device or accounts have been compromised. The appropriate response depends on what happened next.
Simply opening a document is different from enabling macros, running a program, entering credentials into a linked website or granting unexpected permissions.
If the attachment behaved unexpectedly, redirected you somewhere suspicious or gave you another reason for concern, possible next steps include:
- Stop interacting with the file. Do not enable macros, active content, permissions or additional downloads simply because the document asks you to.
- Run an appropriate security scan. Use trusted security software or your organization’s IT/security tools where available.
- Change credentials if they may have been exposed. If you entered a password or other credentials into a page reached through the attachment, secure the affected account promptly.
- Enable or review multi-factor authentication. MFA provides another layer of protection for accounts that support it.
- Review account activity. Watch for unusual sign-ins, password-reset attempts, unfamiliar transactions or changes to account security settings.
- Keep useful evidence and report the message. Screenshots, sender information and URLs may help when reporting suspicious outreach to the relevant platform or organization.
Key Takeaways
- Unexpected attachments are easier to evaluate once you know who sent them and why.
- A familiar filename or extension does not establish that a file is safe.
- Where available, an independently located official webpage gives you another way to review the same opportunity.
- Confidential searches may legitimately lack a public posting while still providing useful professional context.
- Requests to enable macros, active content or unusual permissions deserve particular attention.
- If you already opened something, base your response on what actually happened rather than assuming compromise.
Give the Attachment the Same Scrutiny as the Message
A file can look familiar before the sender does. That is what makes attachments worth treating as part of the verification process rather than as automatic evidence that a recruiting conversation is genuine.
If you know who the recruiter is, understand why the file was sent and can connect the opportunity to an identifiable professional process, you have more context on which to decide whether opening it is reasonable.
If those basics are still missing, there is usually no disadvantage in waiting. Ask for the official posting where one exists. Verify the sender. Ask what the attachment contains and why it is necessary.
Legitimate recruiters use attachments every day, so the presence of a file is not the issue. The useful distinction is whether the file fits the rest of the conversation and whether the surrounding details withstand ordinary verification.
The next article looks at a closely related question: how to inspect an unfamiliar recruiter link before you click it.
*Important Notice: The tips and tools in this “Safer Job Search” series are provided by Stoakley-Stewart Consultants Ltd. for general educational and informational purposes only. They do not constitute legal, financial, cybersecurity or other professional advice, and no lawyer-client, fiduciary or advisory relationship is created by reading or using this content. Individual circumstances, laws, regulations, technologies and platform practices may differ or change. Readers should exercise their own judgment and, where circumstances warrant, seek advice from an appropriately qualified professional in their jurisdiction. Stoakley-Stewart Consultants Ltd. makes no guarantee as to outcomes and disclaims liability for actions taken or not taken in reliance upon this material.
Looking for an Experienced Recruitment Partner?
Good recruiting depends on clear communication, professional accountability and an understandable process. If you are hiring, or considering your own next career move, we would be pleased to speak with you.
For Employers & Hiring Managers
Work with an experienced recruiting firm that understands how much an employer’s reputation depends on the way candidates are approached, represented and kept informed throughout a search.
Explore Our Employer Services →For Candidates & Job Seekers
Explore current opportunities with Stoakley-Stewart Consultants and learn more about the positions our recruiters are currently working to fill.
Browse Current Opportunities →