# Warnings when a customer sends a risky file or link

Scammers send app files and program files that take over the phone or computer that opens them, for example a "wedding invitation" or "parcel tracking" file that is really an Android app. When a customer sends one of these files, or a link that downloads one, Mampu AI marks it in the chat and tells the team. Real customers send these files too, so this only warns: nothing is blocked, no label is added and your AI agent keeps answering.

The file types that count are Android apps (apk, xapk, apks), Windows programs and scripts (exe, msi, msix, appx, scr, com, pif, cpl, bat, cmd, js, jse, vbs, vbe, wsf, wsh, hta, ps1, reg, inf, chm, msc, jar, xll, one), shortcut files (lnk, url, scf), disk images (iso, img, vhd, vhdx), Mac installers (dmg, pkg) and archives (zip, rar, 7z, cab). Photos, voice notes, videos, PDFs, Word and Excel files, web pages and SVG images never count.

## The warning in the chat

![A customer's apk file with the red Risky file type warning](../../.gitbook/assets/guides/risky-file-warning-chat.jpg){ width="410" }

A risky file shows **Risky file type. Don't open it unless you expected this file.** under its name. The warning shows for a file sent on its own and for a file sent with a caption.

![A customer's link to an apk file with the red link warning](../../.gitbook/assets/guides/risky-link-warning-chat.jpg){ width="536" }

A message with a link that points straight at one of these files shows **This link downloads a risky file type. Don't open it unless you expected it.** Ordinary links, such as a shop page, a map or a PDF, show nothing. A short link that hides the file name cannot be checked, so treat any unexpected download link with care.

## The notice in My Inbox

![Risky file or link notices in My Inbox beside the chat's New message entries](../../.gitbook/assets/guides/risky-file-my-inbox.jpg){ width="330" }

The agent assigned to the chat and every admin get a **Risky file or link** entry in **My Inbox**, naming the file or the link. When nobody is assigned, only the admins get it. The entry stays beside the chat's **New message** entries; a newer risky file or link in the same chat replaces it. Opening the chat marks it read, and the warning stays on the file.

## Get it by email or push

![The risky file row in Notification preferences](../../.gitbook/assets/guides/risky-file-notification-preferences.jpg){ width="600" }

The notice appears in **My Inbox** only, until you choose otherwise. To also get it by email or as a push notification, open your [profile settings](/settings/profile-and-notifications), find **A customer sends a risky file (an app, program, disk image or archive) or a link to one** under **Notification preferences** and tick **Email** or **Push notification**. Each person sets this for themselves.

## What to do

1. Do not open or download the file on a work phone or computer.
2. Ask the customer what the file is, in the chat.
3. If you expected it, for example a customer's own zip of documents, open it on a device you can afford to wipe, or ask for a PDF or photos instead.
4. If the customer's number looks hacked, tell them; they may not know their WhatsApp is sending files.

If your own WhatsApp number starts sending these files to customers, that is a different alert. See [When your WhatsApp number may be hacked](/channels/whatsapp-hacked-number-alert).

## Related

* [My Inbox](/conversations/my-inbox)
* [When your WhatsApp number may be hacked](/channels/whatsapp-hacked-number-alert)
* [Your profile and notifications](/settings/profile-and-notifications)
* [Managing Conversations](/conversations/managing-conversations)

---
Source: https://help.mampuai.com/conversations/risky-file-and-link-warnings