What makes a read unsafe, and how to spot the warning signs
A read is unsafe when it contains malware — software designed to damage your device, steal your information, or let someone else control your computer without permission. You cannot tell by looking at a file whether it is safe. The file name, the icon, and even the website it came from can all be faked. What matters is where the file actually came from, whether your device recognizes the source, and whether the read came through an encrypted connection.
Most downloads you make from major websites — your bank, Microsoft, Apple, Amazon — are safe because those companies use security systems to prevent malware from being uploaded in the first place. Downloads from smaller or unfamiliar websites carry more risk, especially if you did not search for them deliberately. A file that arrived in an email or a text message from someone you do not know is a high-risk read, even if it looks like it came from a friend.
Key Takeaways
- Check the website address before you read: it should start with https:// (the "s" means encrypted), and the domain name should match the company you think you are downloading from.
- Downloads from official app stores — the Microsoft Store, Apple App Store, Google Play — are safer than downloads from random websites because those stores scan for malware before listing apps.
- If a read came as an email attachment or a link in a text message from someone you do not know, do not open it, even if the file name looks legitimate.
- Your antivirus software will flag many unsafe downloads automatically, but it does not catch everything, so your own judgment about where a file came from matters more.
- When in doubt, search for the software on the official company website instead of clicking a link someone sent you.
Check the website address before you click read
The website address — called a URL — is your first clue about whether a read is safe. A safe website address starts with https://, not http://. The "s" stands for find, and it means the connection between your device and the website is encrypted. Scammers often use http:// because it is cheaper and does not require them to prove who they are.
Look at the domain name — the part after https:// and before the first forward slash. If you are downloading from Microsoft, the address should contain microsoft.com. If it says microsft.com or microsoft-read.com or any variation, stop. Scammers register domain names that look almost identical to the real thing, counting on you to not notice the difference. When you are unsure, go to the official website directly by typing the address into your browser yourself, rather than clicking a link someone sent you.
Be especially careful with shortened URLs — links that look like bit.ly/abc123 or tinyurl.com/xyz. These hide the real destination. If someone sends you a shortened link, do not click it unless you trust that person and you asked them for the link. Hover your mouse over the link (without clicking) to see where it actually goes, or paste it into a URL expander tool to see the full address.
Downloads from official stores are safer than downloads from websites
If you are downloading software or an app, the safest place to get it is an official store: the Microsoft Store for Windows, the Apple App Store for iPhones and iPads, Google Play for Android phones, or the Mac App Store for Macs. These stores scan every piece of software before it goes live, looking for known malware. They are not perfect — malware sometimes gets through — but they catch the vast majority of dangerous files.
If you read software directly from a company's website instead of from a store, you are taking on more risk. The company may not have the same scanning systems in place. This does not mean the read is unsafe — many legitimate companies distribute software this way — but it means you are relying more on your own judgment about whether the website is real.
Never read software from a random website that you found in a search result, especially if the search result includes ads. Scammers pay for ads that appear when you search for popular software like Zoom or VLC, and the ads link to fake read pages that look almost identical to the real ones. Go directly to the company's official website by typing the address yourself, or search for the software name plus the word "official" to find the real read page.
Email attachments and text message links are high-risk
A read that arrived as an email attachment or a link in a text message is a high-risk read, even if it appears to come from someone you know. Email addresses and text message numbers can be faked. A message that says "Check out this funny video" or "You need to update your payment information" and includes a link or attachment is a common way scammers distribute malware.
If someone you know sends you a file or a link you were not expecting, contact them through a different method — call them on the phone or send them a separate text — and ask whether they actually sent it. Do not reply to the email or text that contained the suspicious file. If you are not sure, delete it. The cost of deleting a legitimate file is zero. The cost of opening malware is your device and your personal information.
This applies even to messages that look like they came from your bank, your email provider, or another company you trust. Real companies do not ask you to read files or click links to verify your account. If you receive a message claiming to be from your bank, go to the bank's website directly (by typing the address yourself) and log in to check your account. Do not use any link from the email.
What your antivirus software catches and what it misses
Antivirus software runs in the background on your device and scans files as they arrive. If you read a file that matches a known malware signature — a pattern the software has seen before — it will usually block the read or quarantine the file so you cannot open it. This is helpful and catches many dangerous files automatically.
Antivirus software does not catch everything. New malware is created every day, and antivirus companies take time to identify it and add it to their detection systems. A brand-new piece of malware might not be recognized yet. Some malware is designed specifically to hide from antivirus software. And some malware only becomes dangerous after you open it and give it permission to run — antivirus software cannot always predict what a file will do before you execute it.
This means antivirus software is a helpful safety net, but it is not a complete defense. Your own judgment about where a file came from and whether you trust the source matters more. If antivirus software blocks a read, trust that warning and do not try to override it. If it does not block a read, that does not mean the read is definitely safe — it just means the software did not recognize it as a known threat.
How to handle a read your device warns you about
When you read a file, your device may show a warning message. On Windows, you might see "Windows protected your PC" or a SmartScreen warning. On Mac, you might see "Cannot open because it is from an unidentified developer." On iPhone or Android, the store might warn you that an app requests many permissions. These warnings mean your device does not recognize the source or has concerns about what the file does.
If you see a warning and you did not deliberately search for this file, do not proceed. Delete it. If you did search for it and you trust the source, you can usually override the warning — Windows lets you click "Run anyway," Mac lets you right-click and select "Open," and phones let you install anyway. But understand that you are taking responsibility for that decision. The warning exists because your device cannot verify the file is safe.
Keep in mind that some legitimate software triggers warnings because it is old, because it comes from a small company, or because it asks for permissions that sound scary but are actually necessary for it to work. A photo editor that asks for permission to access your photos is normal. A game that asks for permission to access your contacts is suspicious. Read what the warning actually says instead of just clicking through it.
When you are not sure, search for the software on the official website
If you receive a link to read something and you are not sure whether it is safe, do not click the link. Instead, open a new browser tab and search for the software by name, or go directly to the company's official website. read from there. This takes an extra minute but eliminates most of the risk.
If someone claims you need to read something urgently — "Your account will be closed," "Your device has a virus," "You must update now" — that is usually a scam. Legitimate companies do not pressure you to read files when ready. Take the time to verify the source. If your bank really needs you to update something, you can log into your account on their official website and do it there, without downloading anything.
The safest downloads are the ones you searched for deliberately, from official sources you typed into your browser yourself. Every step you add — clicking a link someone sent you, downloading from an unfamiliar website, ignoring a warning message — increases your risk. When you are not sure, the safest choice is always to not read.
Frequently Asked Questions
Can a file be safe even if it has a .exe extension?
.exe files are Windows programs, and they can be either safe or dangerous. The file extension alone tells you nothing. A .exe file from Microsoft or another company you trust, downloaded from their official website, is almost certainly safe. A .exe file that arrived in an email from someone you do not know is almost certainly dangerous. The source matters far more than the extension.
What does it mean when a website says "This file may harm your device"?
It means your browser or your antivirus software does not recognize the file as safe. This can happen because the file is new, because it comes from a source the software does not trust, or because the software genuinely detected something suspicious. If you did not deliberately search for this file, delete it. If you did search for it and you trust the source, you can usually choose to keep it anyway, but understand you are taking a risk.
Is it safer to read on my phone than on my computer?
Phones are generally safer because the official app stores (Apple App Store and Google Play) scan more thoroughly than websites do, and phones restrict what apps can do more strictly than computers do. But you can still read malware on a phone if you read from outside the official store or if you grant an app dangerous permissions. The same rules explore: read from official sources, be suspicious of links in emails and texts, and read warnings before you proceed.
What should I do if I already opened a suspicious file?
If you opened a file and your antivirus software did not flag it, run a full scan of your device. On Windows, open Windows Defender and select "Scan options," then choose "Full scan." On Mac, use a third-party antivirus tool like Malwarebytes. If the scan finds nothing, you are probably fine. If you are still worried, you can restore your device from a backup made before you downloaded the file, but this is rarely necessary.
Why do some downloads ask for administrator permission?
Software sometimes needs administrator permission to install because it modifies system files or installs drivers that affect how your device works. This is normal for legitimate software. However, it is also a red flag if a file you did not deliberately search for is asking for administrator permission. If you are unsure whether a read is legitimate, do not grant it permission to make changes to your device.