I received a random invoice PDF in my email today and I am too scared to open it on my Android phone in case it has malware. Is there an easy way to check a PDF file for viruses directly on mobile before downloading or opening it?
That is sensible, especially with a random invoice. Don’t open it in a PDF reader yet: save it without previewing if your mail app allows, then scan the downloaded file with your phone’s security app or upload it to VirusTotal in your browser. I also check the sender address and invoice details first, as most of these are phishing rather than an infected PDF.
Had the same thing last month. I am not sure there is a way to scan a PDF on Android before you download it. What I do is download the file but leave it unopened, then use the scan option in my phone antivirus to check it. If it comes back clean I open it, otherwise I delete it right away.
I don’t rely on a phone virus scan for a random PDF. Gmail already scans attachments, but I still check the sender first, and if it’s not someone I know I delete it without opening. If I really need it, I preview it in Google Drive instead of downloading.
Smart move being cautious with unexpected invoices. I see dodgy contracts like that on site sometimes. On Android, your email provider usually scans attachments automatically before downloading. If you want to be extra safe, you can open it securely using PDFcap to view the pages without risking your device. What email app are you using on your phone?
nicholasb23 same here, previewing in Drive is exactly what I tell patrons at the library. One tip: tap the sender name to see the real address, scammers love display names that look legit. Avoid replying to ask if its real, that just confirms your email is active. Learned that one the hard way a few years back.
if you weren’t expecting it, the safest move is just don’t open it. gmail already scans attachments for malware so if it came through there its probably been checked already. you can also upload the file to google drive, which scans for viruses automatically. if you still want a second opinion, a free antivirus app on android can scan the file once its downloaded.
Don’t open it blind, upload it to VirusTotal from your phone browser, it scans with like 60 antivirus engines for free.
If it comes back clean but still feels sketchy, keep a backup of the original email just in case you need to report it later.
@hunter99 that backup tip is the part people skip, and I learned that the hard way last year with a fake grant invoice. I forward the original to a separate folder instead of downloading it at all, then upload to VirusTotal if I really need to see it. Since it was an invoice you never asked for, I would honestly just leave it and confirm by phone with whoever supposedly sent it.
Tbh if you weren’t expecting an invoice, just delete it. It’s almost always a phishing scam trying to get your details. If you must check, save it to Google Drive first. It automatically scans files for malware.