Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Suppose I receive an email that I highly suspect is some form of spam but I'm not 100% sure. Suppose also that I'm using form of webmail (like Gmail) with good spam filters, but this message made it through safely.

Obviously I should not open any attachments, but is this email otherwise safe to open? If not, is there a simple way to safely open it?

share|improve this question
up vote 11 down vote accepted

If you open the email in a web client (ie, online at or, etc), you're generally very unlikely to experience any problems. If this email contained a script virus (very rare nowadays) it would generally require being opened in an email client locally installed on the computer in order to gain sufficient access to actually infect your computer.

Viruses, because of the popularity of web clients for email, have pretty much stopped sending themselves as emails in the last few years.

Spam is still a problem, and many viruses create spambots and enslave their infected computers as spam relays. But you're not going to catch a virus from the average spam message.

If you are using a local email client, don't open suspicious emails unless you've got the email client running inside a virtualized system that you can scrub easily with a reset.

share|improve this answer

If you want to be really safe, you can install a virtual machine and an operating system on it so that you can open the files there, this way it doesn't affect your OS if something goes wrong.

share|improve this answer
It's kind of a work-around to install a VM and an OS just to check if a mail is suspicious. On the other hand, this most likely is the safest way of the ones listed here, +1. – Tom Wijsman Aug 24 '11 at 20:37
This comment thread has been moved to a chat discussion. Mehrdad, please join... – Tom Wijsman Aug 24 '11 at 21:11

My suggestion is to download Sandboxie.

Run your email client and attachments inside the Sandbox.

Sandboxie runs your programs in an isolated space which prevents them from making permanent changes to other programs and data in your computer.

The red arrows indicate changes flowing from a running program into your computer. The box labeled Hard disk (no sandbox) shows changes by a program running normally. The box labeled Hard disk (with sandbox) shows changes by a program running under Sandboxie. The animation illustrates that Sandboxie is able to intercept the changes and isolate them within a sandbox, depicted as a yellow rectangle. It also illustrates that grouping the changes together makes it easy to delete all of them at once.

enter image description here

share|improve this answer
I'm specifically interested in webmail and not desktop email clients; is your answer still relevant in that case? – Michael McGowan Aug 24 '11 at 13:58
Just run the browser inside the sandbox... – Joe Internet Aug 24 '11 at 14:26
The odds of getting a virus by opening an email in a webmail site is very, very low, evern without a sandboxed browser. That being said, I believe Chrome already runs everything inside a sandbox, and IE9 may have a similar function as well. – music2myear Aug 24 '11 at 20:54

Another option (which might not be possible with all e-mail clients) is to open the e-mail as plain text. This might be an option like "View source" for example.

This may give you something that's hard for a human to read as the message is buried in HTML coding, but there's no chance that any scripts will be run or files downloaded/opened from remote websites.

share|improve this answer

Use a livecd - check the mail there, and if anything gets through, you can either upload it somewhere for checking, or simply switch off the system.

You could even try opening the attachments in this case, just for amusement's sake.

share|improve this answer

Gmail blocks images from unknown senders by default. We also scan for viruses and other suspicious content. If you're concerned about a suspicious message, don't display the images when you open it or download any attachments. You can also report the message to Gmail either for spam or for phishing.

share|improve this answer

For quick suspicious emails I usually open it on a unix/linux OS or my iPhone

share|improve this answer

I work in IT and have a chromebook solely for this purpose. when other people have a suspicious email they want me to check, I have them check the message and attachment on the chromebook, and usually their instincts are right. The chrome book runs every tab in a sand box. The moment any page makes any attempt to leave the sand box it wipes the sandbox. Other users suggestions of Virtual machines and sandboxie are also good. Also if you have an old computer around you know longer use nows your chance to dust it off.

All that said it is worth noting that 99.9% of the time if you think its spam you're right.

share|improve this answer

Even if you have taken measures to not having your computer infected, there's a high possibility that you will confirm your email address by clicking on the link, regardless of where or how you open it (the link contains a specific code connnected to your address). This will cause them to specifically target your email address in the future.

share|improve this answer
No one was asking about clicking links in an email. – kreemoweet Jan 22 '15 at 18:24

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .