The file itself—often disguised as a PDF or .zip—might contain a Trojan or ransomware that executes the moment you open it.
Simply clicking the link can alert the sender that your email address is "active," leading to an explosion of future spam. 3. How to Stay Safe
If you absolutely must see what it is, use a service like VirusTotal to scan the URL or file hash before interacting with it. The Bottom Line